avast! new version released

Do you have a question? Post it now! No Registration Necessary.  Now with pictures!

Threaded View
avast! just released it's new version and it is much improved. IMO it is
holding the number one free antivirus category solidly. The sandbox is
greatly improved and pup scan is much better.

Re: avast! new version released


Quoted text here. Click to load it

Since you recently posted a widely spammed scam in a White Hat news group I
won't take this post at "face value".

You failed to post the Alwil Avast version and any vendor related facts
concerning this update and you failed tp post a vendor URL.  You only posted
personal opinion which is NOT good enough.

--
Dave
Multi-AV Scanning Tool - http://multi-av.thespykiller.co.uk
http://www.pctipp.ch/downloads/dl/35905.asp


Re: avast! new version released


Quoted text here. Click to load it

What are the requirements to place on the category list? IE: How do you go
about testing them?

As a side note, I tend to recommend Avast as one of the best free
antivirus myself. Easy to manage, not a royal pain in the arse on the
system. I have no experience with the freshest version myself, however,
based on the majority of opinions I've been reading it won't let me down.


--
Character is doing the right thing when nobody's looking. There are too
many people who think that the only thing that's right is to get by, and
the only thing that's wrong is to get caught. - J.C. Watts

Re: avast! new version released


Quoted text here. Click to load it

I do a bunch of stuff, but an incomplete summary quickly is I read as
many tech reviews from those that I respect as I can find...and they are
numerous - especially with this one, and I install the program on an
image I use for testing security programs, collect a few thousand new
malware samples and 20 or so fresh links from a source I have and try it
against a couple of other quality antivirus apps I put through the same
test with the same malware...and see how it does. I also give the
program to a friend in the IT security division of my company and he
runs some tests on it for me...and give me a summary of his findings.

avast! with pup turned off caught about 80% of the samples and with it
on about 90%...it's sandbox was the most active. Emsisoft caught 98%.

That is about the best I can do for my own satisfaction. I also do not
like publishing these findings other than my summary opinion as I'm not
a professional malware tester and only use samples for a general
conclusion as to how the program does and reacts to them...but it does
satisfy my concerns.

Microsoft Security Essentials and AVG have been left in the dust.
Antivir does OK, but not as good as avast!...used to be the other way
around not so long ago.

Quoted text here. Click to load it


Re: avast! new version released

wrote:

Quoted text here. Click to load it

    That really interests me.
    I manage about 1 a week, when I'm lucky. I'm sure David would
be happy if you could share just 5% of them with him.
    Are they on your site ? Maybe you could give a dropbox url ?
    []'s
--
Don't be evil - Google 2004
We have a new policy - Google 2012

Re: avast! new version released

4ax.com:

Quoted text here. Click to load it


They are not for re-distribution.

Re: avast! new version released

wrote:

Quoted text here. Click to load it
    
    Why on earth not ? We are all white-hat here. The more working
on solutions, the better. Munge the url, zip and password protect
them, so the innocent won't be harmed, and we can test our malware
defenses. I'm really impressed by your Emsisoft results, but I would
like to conduct my own tests before I switch.
    TIA
    []'s
--
Don't be evil - Google 2004
We have a new policy - Google 2012

Re: avast! new version released


Quoted text here. Click to load it

They are not for re-distribution.

There are sources that are available to you to obtain new malware
samples and links to malware distribution sites...you could search for
one that you like. I have my own reliable sources that are /not/
available to the public.


Re: avast! new version released

4ax.com:

Quoted text here. Click to load it

Indeed. I'd really like to see what it is he actually has. :)



--
Character is doing the right thing when nobody's looking. There are too
many people who think that the only thing that's right is to get by, and
the only thing that's wrong is to get caught. - J.C. Watts

Re: avast! new version released

Shadow wrote:

Quoted text here. Click to load it


You can find tons of live viruses here:

hxxp://vx.netlux.org/

Re: avast! new version released

On Fri, 24 Feb 2012 21:07:34 -0600, G. Morgan

Quoted text here. Click to load it

    I have sites that offer megabyte.rars of malware, but my Avira
picks up every one of them.
    They are all tame.Interesting to study though. I'm more
interested in Bear's wild ones. The ones the main AVs don't detect. No
point testing my AV against tame ones.
    Thanks for the site.  Another one for my bookmarks.
    :)
    []'s

    PS did you see my comments about PDFZilla in alt.comp.freeware
?
    Am I paranoid ?


--
Don't be evil - Google 2004
We have a new policy - Google 2012

Re: avast! new version released

Shadow wrote:

Quoted text here. Click to load it

No, I'll go now and look.


Re: avast! new version released

Shadow wrote:

Quoted text here. Click to load it

About T-Bird?  Yes.


Re: avast! new version released

On Fri, 24 Feb 2012 22:52:59 -0600, G. Morgan

Quoted text here. Click to load it


    No, about the extracted PDFZilla executables from cnet and
PDFZilla installers having diferent sizes, but exactly the same
version number. I found it strange. But did not decompile. Hate VB
programs. Probably just a case of false-positive-paranoia.
    Thread:
     [OT] PDFZilla 20-day giveaway

    []'s
--
Don't be evil - Google 2004
We have a new policy - Google 2012

Re: avast! new version released


Quoted text here. Click to load it

With regard to the samples.. How exactly do you test them? How do you
know they are infact, actually malware? Malware Research is pretty
serious business ya see, I've done it professionally and still practice
the arts on my own time. I'll even be reviving the bughunter app soon
for the older oses which are still online, that probably shouldnt be.
 
Quoted text here. Click to load it

Your statistical information is worthless without knowing your testing
methodology.
 
Quoted text here. Click to load it

Bear,

I suspect the lack of interest in publishing is because you must atleast
suspect it has problems. The way your general recommendations read is
not of that as an amateurs , but as a professional recommending this or
that security app and then providing statistics like 80% for this app, %
98% for that app.  You don't disclose any of this when you claim emisoft
is the best, followed by sas and then by mbam. Nor do you disclose your
hobbyist skillset when providing the stats as you calculated them.

That's very misleading Bear and unprofessional.

Quoted text here. Click to load it

This is an excellent example of what I was writing about above. What do
you base any of those claims on? Why do you not disclose the fact you
don't know much/anything about malware and these are based on your own
personal tests that you won't publish? Atleast that way it wouldn't be
so misleading.
 


--
Character is doing the right thing when nobody's looking. There are too
many people who think that the only thing that's right is to get by, and
the only thing that's wrong is to get caught. - J.C. Watts

Re: avast! new version released

wrote:

Quoted text here. Click to load it

    Better as in "ignore Nirsoft, Cain etc" ?
    If I turn PUP detection on, most AV's wipe half my programs.    
    :)
    []'s
--
Don't be evil - Google 2004
We have a new policy - Google 2012

Re: avast! new version released


Quoted text here. Click to load it

You put those utilities in a folder and put the folder in as a scan
exception.



--
Dave
Multi-AV Scanning Tool - http://multi-av.thespykiller.co.uk
http://www.pctipp.ch/downloads/dl/35905.asp


Re: avast! new version released

On Fri, 24 Feb 2012 16:31:27 -0500, "David H. Lipman"

Quoted text here. Click to load it

    Is what I do with my nasty malware files.
    But I prefer to disable PUP detection. (Advanced options in
Avira - the resident AV I favour)
     A recent Kaspersky USB scan found 138 PUPS, with high
heuristics and "all" categories selected. None were malicious. (unless
someone has access to my PC).
    PS I'm still fishing for the nasties. They are ignoring me.
    :(
    []'s
--
Don't be evil - Google 2004
We have a new policy - Google 2012

Re: avast! new version released


Quoted text here. Click to load it

You /can/ whitelist 'em...might be too much of a pain for ya though.
While avast! is likely the best of the free AVs, I use PandaCloud Beta
with it's firewall on top of Windows Firewall...they play very nice and
I like the virtually real-time updates, it's detection is better than
avast's but not Emsisoft (which has the best by far.) avast's resource
usage is an impressive 7Mb but Panda's is 3MB. My system is fast as
greased lightning which is the way I like it. Boot time for Win7 is 24
seconds.

I don't use anything else other than the safe-hex experience I've gained
over the years...though I do allow UAC with Win7...foolish not to.

I've never gotten any unintentional serious infection since I've been
using computers, which I suppose is because of a mixture of luck and
care. I certainly explore more sites and download and install more than
the average bear...but I've used different techniques over the years to
effectively manage that. Right now, I have an image I use for exploring,
and when I'm done, I pop my regular one back on.

I also have an image I use that has no security programs installed at
all, for intentionally infecting my machine while testing various
security programs that I load...besides being fun, it is very
enlightening.


Re: avast! new version released


Quoted text here. Click to load it

The panda software becomes useless the moment an internet connection is
compromised. Hopefully, it has local definitions it can resort to using?

What procedures and tools do you use to make the determination that
emisoft is better/worse than avast?

By boot time, are you stopping the clock when you see the desktop? What
are your hardware system specs? 24 seconds from dead stop (power off
state) seems... unrealistic, Bear.

Quoted text here. Click to load it

I havent observed you mention safe(r)-sex until I recently brought it up
during a previous discussion... What is the safe-hex experience as known
to Bear? I'm interested in how it may/may not differ from the standards
I'm familiar with...
 
Quoted text here. Click to load it

Bear,

In all seriousness... Have you considered the unnecessary wear and tear
you're placing on the hardware by doing all of this image/reload?
 
Quoted text here. Click to load it

As you most likely aren't playing with viruses, One couldn't really say
you're infecting the computer. However, again, from a research point of
view, I certainly am interested in your methodology for infection, your
testbed configuration and how you keep track of everything.

I am especially interested in whether or not you've verified every sample
in your malware collection is indeed a live viable 1st/2nd gen sample.
Various av/am programs will happily alart on non functional malware
samples. Simply scanning a folder and keeping anything that scores a hit
isn't a good way to process the collection. Just so you know, in the event
you didn't already.

Looking forward to your response(s) to my inquiries.


--
Character is doing the right thing when nobody's looking. There are too
many people who think that the only thing that's right is to get by,
and the only thing that's wrong is to get caught. - J.C. Watts

Site Timeline