Re: [Full-Disclosure] Hi! Antiviruses Comparison - A Little Research Results

----- Original Message -----
From: "3APA3A" <3APA3A@SECURITY.NNOV.RU>
To: <full-disclosure@lists.netsys.com>
Sent: Friday, April 16, 2004 10:06 AM
Subject: Re: [Full-Disclosure] Hi! Antiviruses Comparison - A Little
Research Results

Dear Rafel Ivgi, The-Insider,

Now bad things about McAfee: antiviral bases are updated only once in a
week (remember Mydoom? Kaspersky updates signatures every 4 hours),

----> McAfee has Daily DATS available and always makes new DATS available
within 4 hours (usually a lot quicker) of a major outbreak that is
classified Medium-on watch or higher (Level 3 and up according to Symantec's
levels)

dies on checking far.exe, detects any MS Office file with dot in a name as
a
heuristic virus,

--->Not true with the Enterprise versions that I've seen.... What version
are you talking about??

 requires ePolicy Orchestrator to be managed in
corporate network

---> All AV products have their own management product... EPO can control
Symantec's stuff too :-) There is also a smaller less expensive EPO like
product for corporations 500 nodes and smaller....

  and in case of centralized 'mirror' updates requires
all updates to be downloaded twice (because it's impossible to update
machine with mirror itself from mirror).

---> Not true, sort of, the mirror machine will be the repository, and will
have to get the DATS from itself, big deal...
another comment: although their distributed repositories arent' perfect,
EPO 3.x handles update much much better than previous versions.

Any antivirus comparsion demonstrate one thing: CURRENTLY THERE IS NO
GOOD ANTIVIRAL PRODUCT ON MARKET.

 ----> I'll give you this re-phrasing: Currently there is no PERFECT
antivirus product on the market.

 Exibar

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html
Received on Fri Apr 16 13:04:55 2004