The fastest vendor to add a submitted malware to their signatures

[Al-Faqir]

Hello! The title says it all! What do you think?

 

[ForgottenSeer 58943]

Probably Fortinet, usually a 15 minute response time, rarely over 60 minutes. Almost always under 30 minutes. Provided of course, they're sent in to the proper email address.

submitvirus@fortinet.com

That goes directly into the analyst laboratory.

 

[Al-Faqir]

Probably Fortinet, usually a 15 minute response time, rarely over 60 minutes. Almost always under 30 minutes. Provided of course, they're sent in to the proper email address.

submitvirus@fortinet.com

That goes directly into the analyst laboratory.

Sending a sample to Eset using their product usually takes 4 hours to be added. It seems that Fortinet is the fastest. Are the samples analyses automatically or done manually by humans?

 

[ForgottenSeer 58943]

Sending a sample to Eset using their product usually takes 4 hours to be added. It seems that Fortinet is the fastest. Are the samples analyses automatically or done manually by humans?

Humans, there are 500 Analysts in the lab right now.

 

[SHvFl]

Why is this even relevant? If we relied on this way of protection by someone submitting a sample all the planet would have been infected.

 

[Al-Faqir]

Humans, there are 500 Analysts in the lab right now.

Wow! I have submitted 3 samples to Bullguard 5 hours ago and nothing yet. I guess submitting the same samples to Bitdefender might get detected sooner? Do you know how long it takes in case of Bitdefender?

 

[Al-Faqir]

Why is this even relevant? If we relied on this way of protection by someone submitting a sample all the planet would have been infected.

I know! Let’s say that you encountered a malware sample caught by a BB or a simila component, submitting it for analysis and then it added to signatures will definitely help protect other users. Signatures are the first defense line. Never forget that if product x detected a piece of malware using BB, this might not be the case in another device using the very same product; many factors might cause this. I hope you got my point.

 

[Local Host]

I say Microsoft cause it's the only company I ever had to bother to send my Programs (in order to remove FPs from WD).

 

[Al-Faqir]

According to Sophos support. It take 7 business days to add a new submitted piece of malware to their database.

 

[Moonhorse]

Voted kaspersky. Can totally agree with forticlient

But probably avast is the one against malware, since they have huge ( probably biggest) userbase?

 

[Nestor]

Eset probably is the fastest.

 

[Mahesh Sudula]

Fortinet,Eset , Symantec, Avast are first to add signatures to any of my samples

 

[omidomi]

its depend on the situation of their workers
I see BitDefender add a malware lowver than 10 min & Eset lowver than 1 min...and also Forti over 1 week!

 

[Ink]

It's not a race. Fastest does not mean better.

You should praise the Security Researchers and Malware Hunters that discover the new threats, analyse them and make products better. AI and ML are on the rise to do whatever they do.

 

[Al-Faqir]

@Spawn Thanks for pointing this out! I believe Eset and Kaspersky are the best when it comes to naming (classifying) malware according to what the piece of malware does. It is not like other vendors who name any piece of malware Trojan.Generic and whatsover

 

[Al-Faqir]

its depend on the situation of their workers
I see BitDefender add a malware lowver than 10 min & Eset lowver than 1 min...and also Forti over 1 week!

I don't agree with you in case of BD. I have send them 3 serious pieces of malware this morning and they did not add them till now! Kaspersky, Eset and Sophos added them. Anyway I did notice that when you scan a file using Kaspersky VirusDisk the result it automatically reflected to their definitions on VirusTotal.com. Also, when Sophos web filter catches sth with heuristics, it appears as a detection on virustotal after seconds!

 

[mellowtones242]

Comodo is under a minute if I remember correctly.

 

[Burrito]

...and the answer is...

Bitdefender, Kaspersky & Symantec

The answer lies in the standard AV test labs. Since many of the samples tested are 'known' samples, the tests to some degree measure the speed of processing and adding signatures.

 

[bribon77]

Well I voted for kasperky .. but eset is also very fast .. What many AVs mark very fast but they are not safe. it is not so in the case of Kaspersky what it says is safe .. And bitdefender too.

 

[eonline]

Malwarebytes.