Terry Pinnell said:
Thanks, interesting point - never considered that before. As you saw
from my follow-up, in this case under discussion the great bulk were
found by Panda in my Norton Recycle Bin, which is where Norton Unerase
Wizard puts deleted files (complementing the standard and rather weak
Windows Recycle Bin). FWIW, I'd have thought it would be smart enough
to recognise that, but it's academic now. (I won't be bothering to
look further at Panda stuff.)
But your point is, of course, a different one, and surprises me. Can I
be sure I have it straight please? Surely the Quarantine areas for the
files that my AV has already found and removed does not contain files
which represent any risk? So why would another spyware detection
program report them as such?
Be aware that amongst the various Anti Virus/SpyWare/Grayware vendors, there
is *still* much disagreement between what makes code a virus, spyware,
grayware, etc. There is much overlap. They are often classified differently
amongst the different vendors. As such, certain Anti V/SW/Grayware programs
will "miss" some because they don't come under that classification system
with that vendor. Or have a different detection priority due to their
classification. Also note that one of the ways this *uncooperativeness*
amongst vendors plays out is that (after all these years) there is *still*
no standardization on virus naming conventions. Just *know* what to expect
from Anti V/SW/GW solutions and you will be okay. You cannot always compare
them side by side, apples to apples.
Also, many folks get "carried away" with detection rate numbers. Well, yes,
they're important, but... just as important are other things like minimum
user interaction, configuration management, updates, performance, etc. Many
folks fail to consider that when you "buy into" any particular Anti V/SW/GW
solution, what you are *really* "buying" is the company's credibility.
Credibility to apply constant vigilance to identify new threats and get new
signatures out in a timely and automated fashion. You're also "buying into"
their position on identification of viruses/spyware/grayware and
categorization of such. Also thier *continuing support* (not just a flash in
the pan). Just something to think about. Most enterprise level admins have
figured this out a long time ago.
Not to hijack your thread. Just a convenient place to type I guess
LOL.
-Frank