Reply to thread

Message

<blockquote data-quote="BVLon" data-source="post: 866627">Testing McAfee against this archive for example would be totally inaccurate, as Web Advisor uses aggressive heuristics and deletes everything that looks untrusted. McAfee doesn&#039;t want to employ the same tactic in the common scanning engine to avoid false positives, but their protection capability is still great. Web Advisor also uses 2 additional databases, not utilized by the scan engine. These are McAfee Gateway Intelligence, which detects untrusted files circulating via emails and Early Bird Database (EBD) where they send all files exhibiting signs of maliciousness, but not yet fully analysed. When I say McAfee is missing a lot of threats, I am talking about the AV module alone, as I have bypassed the Advisor&#039;s warnings myself. Their behavioural blocker alone is a hit and miss. Also I have noticed (and McAfee confirmed) if you re-download a program that it has already flagged and removed, it excludes it, which is not great.Norton, F-Secure and Trend Micro&#039;s behavioural blockers consider broad range of data about the file&#039;s origin such as how trustworthy is the site and how many people normally visit it.</blockquote>

[QUOTE="BVLon, post: 866627"] Testing McAfee against this archive for example would be totally inaccurate, as Web Advisor uses aggressive heuristics and deletes everything that looks untrusted. McAfee doesn't want to employ the same tactic in the common scanning engine to avoid false positives, but their protection capability is still great. Web Advisor also uses 2 additional databases, not utilized by the scan engine. These are McAfee Gateway Intelligence, which detects untrusted files circulating via emails and Early Bird Database (EBD) where they send all files exhibiting signs of maliciousness, but not yet fully analysed. When I say McAfee is missing a lot of threats, I am talking about the AV module alone, as I have bypassed the Advisor's warnings myself. Their behavioural blocker alone is a hit and miss. Also I have noticed (and McAfee confirmed) if you re-download a program that it has already flagged and removed, it excludes it, which is not great. Norton, F-Secure and Trend Micro's behavioural blockers consider broad range of data about the file's origin such as how trustworthy is the site and how many people normally visit it. [/QUOTE]

Verification