F-Secure Anti-Virus

  • Thread starter Thread starter Richard H
  • Start date Start date
R

Richard H

Why does Kaspersky AV have more VB100% awards, and a Check-mark trojan award
and F-Secure does not? One would expect that F-Secure would detect more
viruses than Kaspersky and Frisk/F-prot combined because F-Secure uses both
these engines and also comes with the F-Secure Orion Engine.
Please explain
TIA
 
Am Sun, 19 Oct 2003 12:47:07 +0100 schrieb Richard H:
Why does Kaspersky AV have more VB100% awards, and a Check-mark trojan award
and F-Secure does not? One would expect that F-Secure would detect more
viruses than Kaspersky and Frisk/F-prot combined because F-Secure uses both
these engines and also comes with the F-Secure Orion Engine.
Please explain
TIA
Click to expand...

F-Secure uses the _engines_ but they create their own signatures. So if
Kaspersky comes with more signatures they will detect more. Simple - huh?
:)

hth

Christoph
 
Christoph Cordes said:
Am Sun, 19 Oct 2003 12:47:07 +0100 schrieb Richard H:


F-Secure uses the _engines_ but they create their own signatures. So if
Kaspersky comes with more signatures they will detect more. Simple - huh?
:)

hth

Christoph
Click to expand...

I don't think so. The Kaspersky engine uses the Kaspersky signatures. Why
would you think they'd create their own?
 
Why does Kaspersky AV have more VB100% awards, and a Check-mark trojan award
and F-Secure does not? One would expect that F-Secure would detect more
viruses than Kaspersky and Frisk/F-prot combined because F-Secure uses both
these engines and also comes with the F-Secure Orion Engine.
Please explain
Click to expand...

There are several reasons... Your best bet is to look through the back
issues in the Virus Bulletin archive
<http://www.virusbtn.com/magazine/archives/index.xml>.

If memory serves older versions of FSAV didn't scan extensionless files
by default.
TIA
Click to expand...

Your welcome. HTH.

--
Cheers-

Jeff Setaro
jasetaro <at> mags.net
http://people.mags.net/jasetaro/
PGP Key IDs DH/DSS: 0x5D41429D RSA: 0x599D2A99 New RSA: 0xA19EBD34
 
Am Sun, 19 Oct 2003 13:29:16 +0000 schrieb optikl:
I don't think so. The Kaspersky engine uses the Kaspersky signatures. Why
would you think they'd create their own?
Click to expand...

Well, first of all they would have to maintain 3 sets of signatures
(F-Prot, KAV, Orion).

Then they would have to wait for KAV and Frisk if some new virus comes
up. But they have a own AV-Response Team.

And finally - they say so (i have some german article about that - dunno
how reliable this info is.).

Of course it's possible that i'm totally wrong and they realy use the
original KAV-signatures - but why do they update at least twice a day,
while KAV only gets one update? I mean - would KAV give them updated
signatures before they publish it for their own customers? Same with Frisk
- they do not update their signatures as often as F-Secure does.


regards

Christoph
 
Christoph Cordes said:
And finally - they say so (i have some german article about that - dunno
how reliable this info is.).
Click to expand...
Can you post the source of that? I'd be interested in reading it, unless it
is written in German language (I'm limited to Spanish & French).
 
Am Sun, 19 Oct 2003 13:29:16 +0000 schrieb optikl:


Well, first of all they would have to maintain 3 sets of signatures
(F-Prot, KAV, Orion).

Then they would have to wait for KAV and Frisk if some new virus comes
up. But they have a own AV-Response Team.

And finally - they say so (i have some german article about that - dunno
how reliable this info is.).
Click to expand...

F-Secure has the ability to generate signatures for the F-Prot engine.
Not sure about the Kaspersky engine.
Of course it's possible that i'm totally wrong and they realy use the
original KAV-signatures - but why do they update at least twice a day,
while KAV only gets one update? I mean - would KAV give them updated
signatures before they publish it for their own customers? Same with Frisk
- they do not update their signatures as often as F-Secure does.
Click to expand...

Kaspersky releases signature updates (daily.avc) once or twice
(sometimes three) time a day. F-Secure doesn't, under normal
circumstances, update both engines twice a day. Normally the the
signatures for the Kaspersky engine are updated in the morning followed
by the F-Prot engine latter in the day.

--
Cheers-

Jeff Setaro
jasetaro <at> mags.net
http://people.mags.net/jasetaro/
PGP Key IDs DH/DSS: 0x5D41429D RSA: 0x599D2A99 New RSA: 0xA19EBD34
 
Christoph Cordes said:
Same with Frisk
Click to expand...
- they do not update their signatures as often as F-Secure does.
Click to expand...


Actually it is not quite that simple. We update our in-house
definitions multiple times per day. F-Secure gets access to those
in-house versions, and they make their decisions on which ones to
release independently of our own release schedule.

With the release of version 4.0 of F-PROT, we will start releasing
DEF-file updates faster than we do currently, as that version supports
incremental updates, so users don't have to download the entire file
every time.

-frisk
 
Am Mon, 20 Oct 2003 04:06:12 -0700 schrieb Fridrik Skulason:
Actually it is not quite that simple. We update our in-house
definitions multiple times per day. F-Secure gets access to those
in-house versions, and they make their decisions on which ones to
release independently of our own release schedule.

With the release of version 4.0 of F-PROT, we will start releasing
DEF-file updates faster than we do currently, as that version supports
incremental updates, so users don't have to download the entire file
every time.

-frisk
Click to expand...


Finally a competent response - so i guess my info was wrong. But one thing
i would like to know - do you supply "raw" signatures that F-Secure
converts into a own signature-file or do they realy maintain 3 different
databases ?

Another thing - why can i get a product that contains your engine and your
signatures (= your product) AND another great engine (KAV) AND a personal
firewall for 50 Euro while i pay for F-Prot as "stand-alone" more than 85
euro?
(Maybe the wrong place for such a question, but i take my chance ;) )

thx

Christoph
 
Finally a competent response - so i guess my info was wrong. But one thing
Click to expand...
i would like to know - do you supply "raw" signatures that F-Secure
Click to expand...
converts into a own signature-file or do they realy maintain 3 different
Click to expand...
databases ?
Click to expand...


Most of the time they just re-distribute our .DEF files, but they
sometimes make their own - in particular the MACRO.DEF file.
Another thing - why can i get a product that contains your engine and your
Click to expand...
signatures (= your product) AND another great engine (KAV) AND a personal
Click to expand...
firewall for 50 Euro while i pay for F-Prot as "stand-alone" more than 85
Click to expand...
euro?
Click to expand...


85 euro? That would be our price for a 20-user license, and compared
to what others are charging, I don't consider it unfair. As for
F-Secure, I don't know what their price list is like - they are one of
the companies that license our technology, but we have no control over
their pricing, and limited information on it....If they are selling a
20-user license for 50 euro, it sounds like a pretty good deal to me.
 
Another thing - why can i get a product that contains your engine and your
signatures (= your product) AND another great engine (KAV) AND a personal
firewall for 50 Euro while i pay for F-Prot as "stand-alone" more than 85
euro?
(Maybe the wrong place for such a question, but i take my chance ;) )
Click to expand...
F-secure has also F-Secure Internet Security 2003 which has
firewallpart too. I am not 100% sure which av engines it uses, but I
think it uses just f-prot, KAV and its own.
It costs 69 euros, so it is more expensive than you hope.
Jari
 
Am Tue, 21 Oct 2003 02:15:09 -0700 schrieb Algjor Bjani:
Most of the time they just re-distribute our .DEF files, but they
sometimes make their own - in particular the MACRO.DEF file.
Click to expand...

Thx for the info.

85 euro? That would be our price for a 20-user license, and compared
to what others are charging, I don't consider it unfair. As for
F-Secure, I don't know what their price list is like - they are one of
the companies that license our technology, but we have no control over
their pricing, and limited information on it....If they are selling a
20-user license for 50 euro, it sounds like a pretty good deal to me.
Click to expand...

I dont think the price is unfair - only pretty high compared to others - i
thought. I don't want a 20 user licence, just a single one for my little
winbox. Of course you can't control the pricing of F-secure or others -
but maybe you can control your distributors.

Just to explain the 85 (88 even) euro:

As the german i am i'm lazy and smallminded by nature ;)

So i entered www.f-prot.DE in my browser 6 days ago and the page of
PerComp came up -fully german - perfect for me.
I just clicked on "Webshop" and on the Frisk-Logo. And there we have it -
"EU-Bewohner zahlen EUR 88.00 inkl. 16% MwSt".
That was a bit much - so i decided to buy KAV - at www.Kaspersky.DE
for just 49.95 . Today i took a look at www.f-prot.com and saw that you
offer F-Prot for only 24.95 - well, too late, maybe next year :/ Sorry...

regards
Christoph
 
Christoph Cordes said:
So i entered www.f-prot.DE in my browser 6 days ago and the page of
PerComp came up -fully german - perfect for me.
I just clicked on "Webshop" and on the Frisk-Logo. And there we have it -
"EU-Bewohner zahlen EUR 88.00 inkl. 16% MwSt".
That was a bit much - so i decided to buy KAV - at www.Kaspersky.DE
for just 49.95 . Today i took a look at www.f-prot.com and saw that you
offer F-Prot for only 24.95 - well, too late, maybe next year :/ Sorry...
Click to expand...

The difference being that in once case you get a German version with
local support from perComp and in the other case you get the English
version from us...those two are priced quite differenly.

-frisk
 
The Orion engine is optimized for detecting Windows specific polymorphic
viruses by using code based emulation & heuristic analysis.
Click to expand...
If only F-secure could adopt the extra definitions that Kaspersky
provides for dialers, pornware, adware etc...

jari
 
If only F-secure could adopt the extra definitions that Kaspersky
provides for dialers, pornware, adware etc...
Click to expand...

I haven't tried it but should be able to manually add those definition
files and the corresponding avp.set to the FSAV program folder.

--
Cheers-

Jeff Setaro
jasetaro <at> mags.net
http://people.mags.net/jasetaro/
PGP Key IDs DH/DSS: 0x5D41429D RSA: 0x599D2A99 New RSA: 0xA19EBD34
 
Back
Top