Author Topic: disapointing results for Avast! 4  (Read 23942 times)

0 Members and 1 Guest are viewing this topic.

asafdem

  • Guest
Re:disapointing results for Avast! 4
« Reply #15 on: October 06, 2003, 11:13:55 PM »
techie101

Quote
NOW, if you also make sure that the Heuristic feature is selected for the respective On line Access Protection modules, and you have a nice secure setup.
I see heuristics only in Internet mail provider ( I don't use Outlook and I turned off p2p provider). Was that what you mean?

Quote
Thank you for taking the time to share your test results with us.

No problem. ;D

asafdem

  • Guest
Re:disapointing results for Avast! 4
« Reply #16 on: October 07, 2003, 09:32:43 PM »
On the subject of false detection in cpav.exe again...

Quote
(from the Kaspersky Anti-Virus Personal / Personal Pro 4.5  USER GUIDE) ...The extracting tool...can also deal with some versions of immunizers, programs protecting executable files from viruses by attaching checking code blocks (CPAV and F-XLOCK) and enciphering programs (CryptCOM) to them.

I guess this (virus-like behaviour of CPAV.EXE) sheds some light on why Avast! 4 detects non-existent virus in CPAV.EXE It also shows that something can be done about it! ;)

asafdem

  • Guest
Re:disapointing results for Avast! 4
« Reply #17 on: October 08, 2003, 02:59:03 AM »
Final analysis

Offline Lisandro

  • Avast team
  • Certainly Bot
  • *
  • Posts: 67195
Re:disapointing results for Avast! 4
« Reply #18 on: October 08, 2003, 03:29:58 AM »
The Home version does support RAR archives (and always has).
Vlk

Please, Vlk, can you confirm that Pro and Home versions use the same VPS (I mean, can detect the same virus)? I think they do but I am a little bit confused now...  ::)
Btw, what is the behavior with CAB files?
The best things in life are free.

Offline MWassef

  • Avast Evangelist
  • Super Poster
  • ***
  • Posts: 1315
Re:disapointing results for Avast! 4
« Reply #19 on: October 10, 2003, 03:39:43 PM »
The Home version does support RAR archives (and always has).
Vlk

Please, Vlk, can you confirm that Pro and Home versions use the same VPS (I mean, can detect the same virus)? I think they do but I am a little bit confused now...  ::)
Btw, what is the behavior with CAB files?

http://www.avast.com/i_idt_1018.html


MW

Offline Vlk

  • Avast CEO
  • Serious Graphoman
  • *
  • Posts: 11658
  • Please don't send me IM's. Email only. Thx.
    • ALWIL Software
Re:disapointing results for Avast! 4
« Reply #20 on: October 10, 2003, 05:31:47 PM »
Technical, indeed, avast Home and Pro both use the same engine, same samples, same kernel.

The detection rates should therefore be the same as well.

Version 4.0 Home lacked support for CAB archives, but these were included in 4.1.

Vlk
If at first you don't succeed, then skydiving's not for you.

Culpeper

  • Guest
Re:disapointing results for Avast! 4
« Reply #21 on: October 10, 2003, 08:54:32 PM »
So the results look good for Avast set on HIGH. :D

Culpeper

  • Guest
Re:disapointing results for Avast! 4
« Reply #22 on: October 10, 2003, 08:55:55 PM »
Technical, indeed, avast Home and Pro both use the same engine, same samples, same kernel.

The detection rates should therefore be the same as well.

Version 4.0 Home lacked support for CAB archives, but these were included in 4.1.

Vlk

That was what I was trying to remember.  It was the CAB not RAR files the Home version used to leave out.

Offline Lisandro

  • Avast team
  • Certainly Bot
  • *
  • Posts: 67195
Re:disapointing results for Avast! 4
« Reply #23 on: October 11, 2003, 02:54:38 AM »
Technical, indeed, avast Home and Pro both use the same engine, same samples, same kernel.

The detection rates should therefore be the same as well.

Version 4.0 Home lacked support for CAB archives, but these were included in 4.1.

Vlk

Thanks Vlk.  ;)
Sorry, minacross for my simple question. I just want a confirmation of this fact. Thanks for you post.  ;)
The best things in life are free.

asafdem

  • Guest
Re:disapointing results for Avast! 4
« Reply #24 on: October 11, 2003, 05:40:05 AM »
Having a forum like this is a great way to make a good product even better. Still, in version 4.1.280 the same problems I pointed out earlier in this thread, remain:

1. False positive in CPAV.EXE
2. Missed virus in PKLite packed file which other products in the market are able to detect
3. "Double detection" of two worm wariants within the same file.

I hope, you people from Alwil, will fix those and other problems in an upcoming release.  :)

Offline MWassef

  • Avast Evangelist
  • Super Poster
  • ***
  • Posts: 1315
Re:disapointing results for Avast! 4
« Reply #25 on: October 11, 2003, 09:27:46 AM »
Technical, indeed, avast Home and Pro both use the same engine, same samples, same kernel.

The detection rates should therefore be the same as well.

Version 4.0 Home lacked support for CAB archives, but these were included in 4.1.

Vlk

Thanks Vlk.  ;)
Sorry, minacross for my simple question. I just want a confirmation of this fact. Thanks for you post.  ;)

no problem.. ;D
you're most welcome Technical  :)
MW

mantra

  • Guest

Offline Lisandro

  • Avast team
  • Certainly Bot
  • *
  • Posts: 67195
Re:disapointing results for Avast! 4
« Reply #27 on: October 12, 2003, 04:18:02 PM »
look here http://www.avast.com/forum/index.php?board=2;action=display;threadid=1436

This link send me in circle reference...  ???
mantra, are you an avast! reverend or not? What is this title forum (disapointing...)  :(
The best things in life are free.

Offline igor

  • Avast team
  • Serious Graphoman
  • *
  • Posts: 11849
    • AVAST Software
Re:disapointing results for Avast! 4
« Reply #28 on: October 12, 2003, 05:14:13 PM »
asafdem: I'm not sure if the detection of two variants within a single file will be "fixed". It is easily possible that a file is infected by a virus, then packed, and then infected by another virus. So, in general it's correct to announce both (all) the infections.

Offline Lisandro

  • Avast team
  • Certainly Bot
  • *
  • Posts: 67195
Re:disapointing results for Avast! 4
« Reply #29 on: October 13, 2003, 05:16:18 AM »
asafdem: I'm not sure if the detection of two variants within a single file will be "fixed". It is easily possible that a file is infected by a virus, then packed, and then infected by another virus. So, in general it's correct to announce both (all) the infections.


Thanks igor... A file double infected... I have never thought on this before...
Maybe is because I have no virus on my computer since a very long time  ::)
The best things in life are free.