Re: [SkunkworksAMA] Re: anyone else notice that virus?

From: David Parenteau <kitfox_at_firstlight.net>
Date: Sun, 03 Dec 2006 15:36:26 -0700

At 11:08 AM 12/3/2006, nicholas m wrote:
>aol and its firewall suck . this coming from a geeksquad aget. i say pc
>cillin or norten.bout have there downs norten is a draing on the system
>and pc cillin updates all the time its anowing .

Draining on the system can't be fixed. You're stuck with it.

"Updates all the time and annoys you" can be fixed by just telling it to
not alert you when it's updating. Then it updates silently, and doesn't
annoy you. I use what is previously known as PC-Cillin (It's been called
"Trend Internet Security" for a number of years now), and the thing is
pretty well configurable. It'll alert me about things I tell it to, and
not bug me about things I don't want.

At 12:50 PM 12/3/2006, J Hooten wrote:
>Odd I did not even get that email because I am using Nortons 2007

I didn't get it either and I'm using Trend Micro's 2007. But mine doesn't
pop up annoying messages all the time, updates generally more than once a
day, and detects more stuff than my laptop that runs Norton 2007.

Notably, a bunch of people didn't get the message because Yahoo screws up
and doesn't send out email properly. It never even got to my email server
from Yahoo.

So your claim is similar to "I didn't get into a car accident today because
I pressed my brake pedal at red lights." Doesn't say anything about the
quality of your brake pads.

At 09:29 AM 12/3/2006, George McMullen wrote:
>Y'know... everyone says "norton's crap" etc... but I've never had a
>problem. I've used other virus checkers at the same time and I've never
>been infected while I've had Norton on my system/s...

Well, that's likely because of the other virus checkers. ;)

>I'll agree with you on the whole popping up messages thing though. as for
>taking ages to scan, I'd rather have my computer take ages to do a simple
>check and get everything

It takes a long time because it's inefficient (They changed this recently,
so it's a bit better). It's not because it's doing a more thorough
scan. It's because it just plain takes longer to do the same thing.

>than suddenly switch to another type of anti-virus software and end up
>with a million-and-1 viruses/trojons/worms because the new thing isn't
>updated enough.

I guess if you REALLY want to be secure, you look for NOD32
(http://www.nod32.com) which has always had the highest ratings regarding
any live viruses and zero-day exploits. I used to be on the exploits
prevention team of a large network. This resulted in me having a
collection of several hundred zero-day exploits and other nasty stuff. A
lot of them were hand-written and very specialized. It made it VERY easy
for me to test various AV software, since I had the Real Stuff that kiddies
were using to try to screw people.

Of 437 bits and pieces of unpleasant stuff I tested with at the time:

Norton:
Original test: Detected 12.
6 months later: Detected 292.
At time of original test, 321 of the malware packages disabled Norton AV
successfully (341 attempted to).
Scan time for folder: 5:31 minutes.

McAffee:
Original Test: Detected 38*
6 months later: Detected 384
At the time of the original test, 302 of the malware packages disabled
McAffee successfully (341 attempted to).
Scan time for folder: 7:19 minutes (Heuristics were enabled)
* 17 were detected by pattern, 21 were detected by "This looks very
suspicious." heuristics

Trend
Original test: Detected 122
6 months later: Detected 421
At the time of the original test, none of the malware packages disabled
Trend successfully (2 attempted to).
Scan time for folder: 21 seconds*.
* Trend performed an memory test beforehand that took 17 of the 21 seconds
for the full scan.

I do not have any NOD32 tests from back then.

NO AV software will ever fully protect you from everything though. Your
brain and awareness are the most important honestly.

Some people seem to mistakenly take Software as a religious experience, and
argue about it like they argue about religion: Each has their own
wholehearted opinion and NOTHING will change their mind about it. But hey,
honestly, I fix a higher percentage of computers for Spyware, Trojans, and
other nasty stuff that use Norton AV than any other AV program. (Higher
percentage means that the fact that more people are using Norton (Damn
bundled software) has nothing to do with the count.)

So, since Software is Religious to so many people, and too many people have
very little actual knowledge about things as long as they think it works
for them (Which is why Norton sells so well. People think it works.), this
discussion should probably be dropped in favor of skunk discussions.

Bottom line: Use what you want to use, but if something's wrong, try
scanning with something else.
Received on Sun Dec 03 2006 - 16:16:31 CST

This archive was generated by hypermail 2.3.1 : Sat Nov 30 2019 - 17:52:15 CST