Best signature-based detection ratios?

In your opinion, what are the top 3 best signature scan engines? (In order)

These infos are best determined by analyzing various AV test lab reports. Which scan engines have the best signatures depends upon which AV test lab does the testing (for example, AV Comparatives vs AVLab vs Virus Bulletin vs etc), but the general test lab trend is:
  1. Kaspersky
  2. Bitdefender
  3. Avira
Others will disagree I'm sure - based upon Malware Hub test results.
 
Last edited by a moderator:
In terms of pure signature based detection rate:

1. Avira

2. Avast

3. ESET

Note that actual protection wise Avira is one among the weakest due to its too much dependency in its signature and cloud :)
 
I have to say Kaspersky cloud detection is really one of the top ones (aka KSN) but SEP v14 "advance machine learning" and insight/sonar is catching up. In terms of purely signatures , I would say eset,kaspersky and norton (obviously "best detection ratio" is subjective-kaspersky has more signatures generated in less than 24h from the sample being available whereas sep has low FP record-when configured right!)- It depends what you are looking for in you endpoint protection
 
  • Like
Reactions: Parsh and Wave
eset , avast and AVG have great sigs put when it comes to pup detection eset takes the crown :)
Based on my own testing, for PUP detection, Dr Web is far superior to anything else. ESET does better than just about every other AV, but Dr Web detects many more PUPs.
 
  • Like
Reactions: Wave and FrFc1908
On personal testing, i'd point out:

  • Kaspersky
  • Emsisoft
  • BitDefender
  • GData (i don't know which engine it uses?)
The matter lies on testing independent engines, because a full product may have modules that may make engines detect higher.
 
  • Like
Reactions: Parsh
Bitdefender based on independent testing laboratory results.

Best detection doesn't mean it's the best all round, and that's a reason why I don't always recommend Bitdefender to everyone.
 
On personal testing, i'd point out:

  • Kaspersky
  • Emsisoft
  • BitDefender
  • GData (i don't know which engine it uses?)
The matter lies on testing independent engines, because a full product may have modules that may make engines detect higher.
GData uses an in-house engine alongside BD engine for higher detection.
Same is the case with Fsecure (5 engine levels of detection).
 
Bitdefender and Avira. Kaspersky also has great static detection, thanks to KSN
Forget KSN, it's not static analysis of the actual files but it's the file reputation (static but not in the same sense of signatures). Kaspersky have very good generic signatures for static analysis and a nice memory scanner, so I agree with you for Kaspersky 100%

I don't even use Kaspersky, never have used on host properly, but I know it's amazing from testing. In fact, Kaspersky have stronger self-defense than all the other products on the market like ESET, Emsisoft, Bitdefender, G-Data, etc. ;)
 
I don't even use Kaspersky, never have used on host properly, but I know it's amazing from testing. In fact, Kaspersky have stronger self-defense than all the other products on the market like ESET, Emsisoft, Bitdefender, G-Data, etc. ;)
Yeah, Kaspersky is great even without those additional security forces like KSN, though these only improve the probability of detection.
Independent tests have put Norton, Eset and Kaspersky in the forefront for their self-defense.
 
  • Like
Reactions: vemn