av-comparatives August results

[true indian]

I cannot understand...even if it is filerep and Autosandbox in avast as user dependent..that just cant be that high a percentage of user dependency..I mean avast is user friendly and in my and other people's experience it doesnt need even 2% user interaction at all..More ever, they dont care to say what is user dependent on there for avast!
 
the one of my greatest grips with av comparatives is they dont say what was user dependent on there..

check the results: chart.av-comparatives.org/chart2.php

I dont get it...even if they took more than 200 URL's to test...that 6% can only come out of 12 URL's from that bunch in my calculation...or am i doing something wrong?? 

[bob3160]

http://forum.avast.com/index.php?topic=19387.msg842888#msg842888

[MDRockstar]

Sorry but for me the automatic sandbox always put unknown file in the autosandbox and after analysis it give me 2 choice : continue execution or close. So for me it is really user dependent like comodo. It happen really often when i test malware sample.
The option continue execution doesn't seem to put the file in the autosandbox so how does it protect the system then? This is user friendly ....maybe but  avast was better when it was recommending to autosandbox. Just my opinion.

[Lisandro]

The option continue execution doesn't seem to put the file in the autosandbox so how does it protect the system then?

Having scanned and analyzed the file before...

This is user friendly ....maybe but  avast was better when it was recommending to autosandbox. Just my opinion.

You can set it to manual if I remember correctly. Sorry, I'm not at an avast! computer right now.

[true indian]

Well,avast SB analysis is working...i have seen it identifying malware behaviour lately since last program update

[RejZoR]

AV-C test is flawed. They count it as "user dependent" when Auto Sandbox popup appears which is just idiotic since user has no control over it anyway. FileRep popup, ok, you still have option, but even if you pick to download the file, that doeasn't mean it will just run unrestricted later on. FileRep is just a warning service and a medium to decide if file should be Auto Sandbox analyzed. Aborting download just gets rid of the file right there if you think you don't really need that file all that much considering it's found very suspicious fromt he start... If you pick to download it anyway, Auto Sandbox analyzer will kick in on its own not giving user any control until its analyzed.

[DavidR]

I still haven't got a clue what av-comparatives means by "user dependent," dependent on what. Not to mention "user dependent" could mean many different things for different AVs, so how is it possible to define a single meaning for "user dependent."

[Lisandro]

It would be very good if IBK comes here and drop some light over all of this...

[Davy]

Are AV Comparatives being honest I ask?

See this link about them, http://www.melih.com/2011/11/27/av-comparatives-org-bullying-censorship-and-financial-deals-with-anti-virus-vendors/

So what does go on behind closed doors, leave you with the thought.

Dave

[DavidR]

Coming from melih I take this vent/rant, the gospel according to melih with a large dose of salt. Not to mention the vent/rant/report is as old as the hills (in terms of IT/Security) almost a year old (so believe me we have seen it before).

I rarely get excited about any AV test results as I'm still a believer of real world experience, I don't believe it possible to run an AV test to match a users normal use, but some are starting to get better. That still won't detract from

[bob3160]

I don't believe it possible to run an AV test to match a users normal use,

When you visit as many Computer Clubs and see as many people as I do,
you soon realize that there is no such thing as a normal user.
They are all different with all kinds of different applications on their systems and they all have
different likes and dislikes. Have their favorite browsers, utilities, etc.
In most cases, the only thing they have in common is the fact that they all use computers and,
the computers are all different.
In this business, normal is actually abnormal. 

[Davy]

I don't know this guy.

There's only one way to find out and that is doing it the hard way - trying, because as Bob3160 say's it's all down to ones configuration... and the site the user visits.

AV Comparatives must be in the business for making money and not doing things for free, it was this that made me post and wonder.

No matter which AV it is, you see it many times in forums, some systems an AV causes it to crawl while others it as no effect , again it catches this n' that and catches nothing in other systems.

I agree you got take these reports with a pinch of salt because various testers use different methods giving differing results which I think confuses the average 'layman' looking for a Antivirus.

Dave

[Lisandro]

It would be very good if IBK comes here and drop some light over all of this...

He posted in Wilders (as well as Vlk).

[Charyb-0]

Interesting. Wonder if it has or has not been fixed?

-http://www.wilderssecurity.com/showthread.php?p=2118965#post2118965

[true indian]

AV-C test is flawed. They count it as "user dependent" when Auto Sandbox popup appears which is just idiotic

really?? but IBK statement made was different here:

Maybe you misunderstand what is being told here.
Yes, the file was first autosandboxed. But if user after the autosandbox analysis (which came to the conclusion that the AV has no idea wth the file is) the user chooses to continue execution, the system is compromised. If he decides to close the program, he is not. So it is up to the user. In other words, user decision.
If after the autosandbox analysis there is the verdict that the file is malicious and blocked (which sometime happens), then it is counted as blocked, not as user-decision.

now what is true?? your statement or IBK statement?? and what av-comparatives is doing in reality?? counting the analysis toster box as user-dependent or the result after analysis as user dependent?? and if this is shown to a normal user he wouldnt look at it with a geek eye..he will just base his conclusion on the chart shown..