AV-Comparatives AV-Comparatives Real World Protection Test - Feburary - May 2019

Disclaimer
  1. This test shows how an antivirus behaves with certain threats, in a specific environment and under certain conditions.
    We encourage you to compare these results with others and take informed decisions on what security products to use.
    Before buying an antivirus you should consider factors such as price, ease of use, compatibility, and support. Installing a free trial version allows an antivirus to be tested in everyday use before purchase.

Andy Ful

From Hard_Configurator Tools
Verified
Honorary Member
Top Poster
Developer
Well-known
Dec 23, 2014
8,592
There was someone complaining on the other forum that at the office they needed to update their HP printer software because of a certain issue, and WD blocked the update. I told him that WD is nervous about very new files so just don't be the first guy to update. He said that over a week later, the HP update was still being blocked.
That is an issue that can happen (and probably will happen in the future), but it is also the fault of HP. I can send my installers to Microsoft to avoid customer problems. Why HP cannot do it?
It takes only five minutes. I can understand small vendors, but not HP because it is a big company.
 

shmu26

Level 85
Verified
Honorary Member
Top Poster
Content Creator
Well-known
Jul 3, 2015
8,153
That is an issue that can happen (and probably will happen in the future), but it is also the fault of HP. I can send my installers to Microsoft to avoid customer problems. Why HP cannot do it?
It takes only five minutes. I can understand small vendors, but not HP because it is a big company.
So HP is stupid and arrogant, I know that already, lol. But why does WD still block a HP installer a week and a half later, that's what I can't understand.

 

TairikuOkami

Level 37
Verified
Top Poster
Content Creator
Well-known
May 13, 2017
2,685
But why does WD still block a HP installer a week and a half later, that's what I can't understand.
I guess WD does not know, it is just HP installer. HP tech support expects than someone will report it, anyone else but them, so it is DIY. Like I have reported a faulty VisualC++ library in Setpoint 2 years ago, plus a fix. But Logitech released the new Setpoint this year still crashing because of it. :rolleyes:

 

Zorro

Level 9
Verified
Well-known
Jun 11, 2019
408
The problem is, that 99% users always use the default config and those, who can customize it, usually do not need AV in the first place. ;)
I often heard the opinion that advanced users or those who know how to set up programs do not need an antivirus. I can not agree with that. One person who understands PC and PC protection once said - "Antivirus is 30% of PC protection, and 70% of protection is user actions." Still, at least 30% of PC protection is the work of the antivirus. Especially nowadays, threats are evolving and now it’s not even necessary to download something, launch, threats can penetrate and unnoticed, so that even having visited a site that has been well known to you for a long time, you will not even suspect that your system is already infected. So, as antivirus insurance, everyone needs both advanced and novice users.
 

shmu26

Level 85
Verified
Honorary Member
Top Poster
Content Creator
Well-known
Jul 3, 2015
8,153
having visited a site that has been well known to you for a long time, you will not even suspect that your system is already infected
I agree that AV is something everyone should have, but not because visiting a website might infect your system. That was true like about 5-10 years ago, but it doesn't happen anymore (with the exception of an occasional targeted attack on high-value Internet Explorer users)
 

TairikuOkami

Level 37
Verified
Top Poster
Content Creator
Well-known
May 13, 2017
2,685
Especially nowadays, threats are evolving and now it’s not even necessary to download something, launch, threats can penetrate and unnoticed
Not when you know, how it works, malware does not magically download and run by itself, like they portrait it on the news, it needs help. I always try to find the detail reports, where they describe, how it works, step by step. This is where customizing AV, as you said, helps, like by monitoring scripts, system folders and such. Or you can simply prevent them from running silently by customizing OS, like with HardConfigurator.
 

alakazam

Level 9
Verified
Mar 25, 2014
398
K7Computing scored better than ESET, but most people on MalwareTips say that it's a bad product. It doesn't even have its own subforum. I think it's sad that you guys underestimate it so much. :(
 
  • Like
Reactions: oldschool

roger_m

Level 42
Verified
Top Poster
Content Creator
Dec 4, 2014
3,187
One person who understands PC and PC protection once said - "Antivirus is 30% of PC protection, and 70% of protection is user actions." Still, at least 30% of PC protection is the work of the antivirus.
I would say that it's more like 1% and 99%. While I use antivirus software, it never detects anything other than PUPs which I download myself, or a very occasional false positive for a safe installer. I don't get infected and I also wouldn't if I wasn't running antivirus software.

That's not to say that I never will encounter malware and it certainly doesn't hurt to have an antivirus installed. But it's not as if I absolutely need it.

K7Computing scored better than ESET, but most people on MalwareTips say that it's a bad product. It doesn't even have its own subforum. I think it's sad that you guys underestimate it so much. :(
ESET has much better detection rates. It has a bad reputation here, because some people have tested it and found it to not be so good.

Its detection rate is good, but it's can't match the big name antiviruses. I wouldn't take much notice of a single test where it outperforms ESET.
 

Zorro

Level 9
Verified
Well-known
Jun 11, 2019
408
I agree that AV is something everyone should have, but not because visiting a website might infect your system. That was true like about 5-10 years ago, but it doesn't happen anymore (with the exception of an occasional targeted attack on high-value Internet Explorer users)
I agree with you. I forgot to mention that there is also such a moment as the replacement of legal programs with malicious ones by breaking into the servers of the company distributing this legal software. Remember the story with CCleaner? This was not a targeted attack on any specific users, and the calculation was made on a massive attack, since CCleaner is a very popular program and installed on the computers of many users. And here only proactive protection of the antivirus could save, which would notice suspicious actions on the part of CCleaner. I remember when this story was not even made public, and even when the developers themselves were not aware that they had been hacked (they didn’t notice it right away), one tester on YouTube posted a review about ESET Smart Security, and I I noticed that ESET signaled some kind of problem with CCleaner, it was there that the SysInspector component wrote something about the problem. The tester did not pay attention to it at all, they say a false positive. And after 4 days, information about what happened has already been made public.
 

alakazam

Level 9
Verified
Mar 25, 2014
398
ESET has much better detection rates. It has a bad reputation here, because some people have tested it and found it to not be so good.

Its detection rate is good, but it's can't match the big name antiviruses. I wouldn't take much notice of a single test where it outperforms ESET.
As the test results show, with the proper user settings, K7Computing can outperform ESET, AVG, Avast and Panda. I think this is pretty telling that it can match some of the big name antiviruses. Also, the fact that some companies which don't even have a proprietary engine (Lavasoft, F-Secure, Bullguard etc.) have their own subforum, but K7Computing doesn't, is unfair.
 

Zorro

Level 9
Verified
Well-known
Jun 11, 2019
408
Not when you know, how it works, malware does not magically download and run by itself, like they portrait it on the news, it needs help. I always try to find the detail reports, where they describe, how it works, step by step. This is where customizing AV, as you said, helps, like by monitoring scripts, system folders and such. Or you can simply prevent them from running silently by customizing OS, like with HardConfigurator.
I am certainly not an expert, but I heard about the drive-by download attacks, when malicious elements (scripts, as I understand it) are quietly download from the pages of hacked sites, and then the malware itself is loading directly. I don’t know the whole mechanism, I can’t judge it, but an antivirus can detect and prevent this. Of course, you can configure the browser very tightly and configure the system very tightly, and then you can use the system without antivirus, perhaps, but how convenient will such a rigid configuration be? I think it will suit not all ordinary users, for whom it will be easier once to set up an antivirus for Internet Security class well, and to get protection from such threats.
 

shmu26

Level 85
Verified
Honorary Member
Top Poster
Content Creator
Well-known
Jul 3, 2015
8,153
Of course, you can configure the browser very tightly and configure the system very tightly, and then you can use the system without antivirus, perhaps, but how convenient will such a rigid configuration be? I think it will suit not all ordinary users, for whom it will be easier once to set up an antivirus for Internet Security class well, and to get protection from such threats.
+1
@TairikuOkami is not your ordinary user, and I am sure he would not recommend for ordinary users to do what he does. When I just read his posts about how he tortures his system, I go cross-eyed. But this thing about scripts silently downloading and attacking your computer -- that's scare stories from the sandbox fanboys, or maybe it's propaganda from some company trying to sell you something.
 

Andy Ful

From Hard_Configurator Tools
Verified
Honorary Member
Top Poster
Developer
Well-known
Dec 23, 2014
8,592
...
Also, the fact that some companies which don't even have a proprietary engine (Lavasoft, F-Secure, Bullguard etc.) have their own subforum, but K7Computing doesn't, is unfair.
You can do it. Do not count on others.(y):giggle:

...
Its detection rate is good, but it's can't match the big name antiviruses. I wouldn't take much notice of a single test where it outperforms ESET.
There are tests of two K7 Computing products. The vendor admits that K7 Total Security is more comprehensive than K7 Antivirus. The tests are not conclusive yet to show reliable detection rate of K7 products. So, we cannot say for sure, that Eset detection rate in AV Labs tests will be better than K7 Total Security. But it is very probable that Eset can be better from K7 AV on the base of the capabilities of both products. (y)
 

Andy Ful

From Hard_Configurator Tools
Verified
Honorary Member
Top Poster
Developer
Well-known
Dec 23, 2014
8,592
I am certainly not an expert, but I heard about the drive-by download attacks, when malicious elements (scripts, as I understand it) are quietly download from the pages of hacked sites, and then the malware itself is loading directly. I don’t know the whole mechanism, I can’t judge it, but an antivirus can detect and prevent this.
...
It is normal that the malicious website can run the malware, but in most cases, it will be contained/restricted in the web browser sandbox (except web browser exploits). The AV with web filtering feature can prevent access to many malicious websites and can block malicious scripts injected to legal websites, but it can be done without the AV, too. In theory (on the well updated system/software), it is possible that very cautious and experienced user could harden a little the web browser and system without losing much usability, and skip the AV real-time protection. She/he would be probably safer than average users with AV protection, but still using the AV by her/him will be safer. :giggle:
 
Last edited:

TairikuOkami

Level 37
Verified
Top Poster
Content Creator
Well-known
May 13, 2017
2,685
But this thing about scripts silently downloading and attacking your computer -- that's scare stories from the sandbox fanboys, or maybe it's propaganda from some company trying to sell you something.
Many times there is news, that some malware infected computers by itself, I go deeper and look-see, the file download was indeed triggered silently, but it pretended to be a document or a picture and people were like, what is this and ran it to find out. If it were ignored, it would not do anything.
 

shmu26

Level 85
Verified
Honorary Member
Top Poster
Content Creator
Well-known
Jul 3, 2015
8,153
Yes, most people don't have active "show file name extensions" and get infected by document_bill.exe.docx
AFAIK the malicious file type would be document_bill.docx.exe
If you did not enable "show file name extensions" you will see only document_bill.docx and that looks safe.
But even if it is truly document_bill.docx it is still dangerous because it might be a weaponized doc.
 

About us

  • MalwareTips is a community-driven platform providing the latest information and resources on malware and cyber threats. Our team of experienced professionals and passionate volunteers work to keep the internet safe and secure. We provide accurate, up-to-date information and strive to build a strong and supportive community dedicated to cybersecurity.

User Menu

Follow us

Follow us on Facebook or Twitter to know first about the latest cybersecurity incidents and malware threats.

Top