Battle Dual vs. Single-Engine Antivirus?

H

hjlbx

Either-or... having 500 AV scan engines is pointless for all of the files that are undetected - and there are many millions of those... LOL.

If you ask me, Windows Defender and MS MRT are sufficient for the AV layer of a security config.

I'm partial to HitmanPro as an on-demand scanner - since it is cloud-based.
 
L

LabZero

I consider AV just one part of the security setup.
Of course, two engines "can" be better than one, if well-implemented. But it is necessary a diversification of levels : AV, firewall, HIPS, anti-exe, sandbox, anti-exploit.
Anti-virus only, in this context, becomes relative and Windows Defender can be good for my needs.
 

_CyberGhosT_

Level 53
Verified
Honorary Member
Top Poster
Content Creator
Well-known
Aug 2, 2015
4,286
I feel ya Gamez
For me this would depend on the engines in question, some AV / Anti-Malware companies employ crappy dual engines so they would not necessarily be better than a single engine with good qualities.
A good point is EmsiSoft that employs their own engine and Bitdefender and its a solid combo that wins over most other single and multi engine Products.
So its not a question of "how many" but the Quality of what is presant, for me.
PeAcE
 
Last edited:

FrFc1908

Level 20
Verified
Top Poster
Well-known
Jul 28, 2016
950
Let me put it this way ; windows defender has come a long way and it's definately upgraded in the win 10 anniversary update. when you practice safe online habbits , do not download and install / use cracks / warez , do not visit dubious sites , like p*rn and other high risk stuff , defender - win firewall , uac set to max is more than sufficient. if you are one a shared computer or you do high risk activities than a " layered " security approach is a better option : av / firewall - anti executable and zemana pro in realtime ( execellent for protection against ransomware ) of course a multi engine security product is better than a single engine , but the increase of fp's will be higher , as is the drag on the system. so you will have to ask yourself the question : do I want a light config , or do I want to sacrifce some pc performance?
 

tonibalas

Level 40
Verified
Honorary Member
Top Poster
Well-known
Sep 26, 2014
2,973
First of all i am using Windows Defender right now because with my safe browsing habits i don't something else.

About single or dual engine av.
When i want to install an av 2 things i consider most important.
System performance is the first and then false positives.
If an av is heavy on my system single or dual engine after a while is uninstalled.

An example is Emsisoft AntiMalware. Dual engine but lite on my system and with a few false posistives.

Another example Dr.Web. Single engine with few to none False positives but heavy on my system,
so at this time it's not consider an option.

In the end it's not about which is best but what suites you best on your system and what is best for your browsing habits;)
 

FrFc1908

Level 20
Verified
Top Poster
Well-known
Jul 28, 2016
950
First of all i am using Windows Defender right now because with my safe browsing habits i don't something else.

About single or dual engine av.
When i want to install an av 2 things i consider most important.
System performance is the first and then false positives.
If an av is heavy on my system single or dual engine after a while is uninstalled.

An example is Emsisoft AntiMalware. Dual engine but lite on my system and with a few false posistives.

Another example Dr.Web. Single engine with few to none False positives but heavy on my system,
so at this time it's not consider an option.

In the end it's not about which is best but what suites you best on your system and what is best for your browsing habits;)

well said tony! I also use a double engine product right now ( kindly provided by my internet provider ) F-Secure I.S. 2016 it uses bitdefender and their own. It is nice and light on overall system performance it only puts a little extra on bootup , but that is no biggie for me :)
 

FrankS

Level 3
Thread author
Verified
Well-known
Dec 22, 2015
148
Thanks for your replies guys. I used Kaspersky for like 3 years. Now I'm testing a bit and currently I'm using G Data. It's more heavy than Emsisoft, F-Secure and Kaspersky. It runs without any errors/fails and got the best detection ratio/malware removal rate on my own test.
Emsisoft is very fast, light and removed all samples, too. But there are some few things that bother me. 1.) The price 2.) Malware-Host block alert, which is coming like every five minutes on every third page - okay a bit exaggerated. I think I'll wait for Kaspersky 2017 and go back to them.
 

securitydolphin

Level 1
Verified
Jul 22, 2016
16
Dual-Engine antiviruses are only good when properly implemented. Using 2 engines dedicating to finding viruses overlaps significantly, and will more likely than not just decrease performance while giving you 1% better detection that would've been caught by heuristics or 0-day defenses. This is a big issue I have with dual-engine antiviruses. Marketing speak such as "Powered by Bitdefender and Kaspersky" usually means that only the signatures are used, and none of the proprietary 0-day defenses that are arguably more important.

Single-Engine antiviruses are better simply because these antiviruses actually include a competent HIPS or heuristics module.

An exception to the dual-engine no-no is Emsisoft, which has made a point in separating their engine into 2 parts, a home-grown PUP engine and a licensed engine from Bitdefender. This makes sense because the engines don't do the same thing and are both actively developed, so there's little overlap and both engines are actually effective. They also include a HIPS / behavioral blocker so it's not just some snake-oil "Powered by 60 antivirus engines" antivirus program (Powered by "Free Antivirus Pro 2016" anyone lol?)
 
Last edited:

About us

  • MalwareTips is a community-driven platform providing the latest information and resources on malware and cyber threats. Our team of experienced professionals and passionate volunteers work to keep the internet safe and secure. We provide accurate, up-to-date information and strive to build a strong and supportive community dedicated to cybersecurity.

User Menu

Follow us

Follow us on Facebook or Twitter to know first about the latest cybersecurity incidents and malware threats.

Top