View Single Post
  #5  
Old February 21st 06, 08:51 PM posted to microsoft.public.windowsxp.security_admin
external usenet poster
 
Posts: n/a
Default Does OneCare need ZoneAlarm?

Windows One Care is the worst antivirus software now and it has the lowest
detection rate.It can't detect even well-known malware ,what about new one.


David Lipman tests:
I just tried another adhoc impromptu test. 4 EXE files one SYS file.
A nice mix of Trojans, a worm and a RootKit file.

Microsoft got 0 of the 5
!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!! !!!!
-----------------------------------

McAfee got 4 of the 5
--------------------------------
C:\1\doc_12_02_06_enrcypted_archive.exe ... Found the Generic MultiDropper.d
trojan !!!
The file or process has been deleted.
C:\1\ID_10997210.exe\ID_10997210.exe ... Found the Generic Downloader.u
trojan !!!
The file or process has been deleted.
C:\1\outlook.exe\outlook.exe\00011204.EXE ... Found the
W32/Gaobot.worm.gen.u virus !!!
The file or process has been deleted.
C:\1\usbncmac.sys ... Found the NTRootKit-R.gen trojan !!!
The file or process has been deleted.

Sophos got 2 of the 5
---------------------------------
Virus 'Troj/Dropper-EH' found in file c:\1\doc_12_02_06_enrcypted_archive.exe

Removal successful
Virus 'Troj/Clagger-G' found in file c:\1\ID_10997210.exe

Removal successful

Kaspersky got 5 of the 5
-----------------------------------
C:\1\DOC_12~1.EXE archive: NSIS
C:\1\DOC_12~1.EXE/stream archive: NSIS
C:\1\DOC_12~1.EXE/stream/data0001 archive: Embedded
C:\1\DOC_12~1.EXE/stream/data0002 packed: UPX
C:\1\DOC_12~1.EXE/stream/data0002 infected: Trojan-Downloader.Win32.Agent.aew
C:\1\DOC_12~1.EXE/stream/data0004 disinfection failed:
Trojan-Downloader.Win32.Agent.aew
C:\1\DOC_12~1.EXE/stream disinfection failed:
Trojan-Downloader.Win32.Agent.aew
C:\1\DOC_12~1.EXE disinfection failed: Trojan-Downloader.Win32.Agent.aew
C:\1\ID_109~1.EXE packed: FSG
C:\1\ID_109~1.EXE infected: Trojan-Downloader.Win32.Small.cjv
C:\1\ID_109~1.EXE deleted: Trojan-Downloader.Win32.Small.cjv
C:\1\OUTLOOK.EXE packed: UPX
C:\1\OUTLOOK.EXE infected: P2P-Worm.Win32.VB.dw
C:\1\OUTLOOK.EXE deleted: P2P-Worm.Win32.VB.dw
C:\1\SRCBCBCP.EXE packed: PE_Patch
C:\1\SRCBCBCP.EXE infected: Trojan.Win32.Crypt.t
C:\1\SRCBCBCP.EXE deleted: Trojan.Win32.Crypt.t
C:\1\USBNCMAC.SYS warning: Rootkit.Win32.Agent.ao

Trend Micro got 3 of the 5
-----------------------------------
c:\1\doc_12_02_06_enrcypted_archive.exe [TROJ_DROPPER.AKD]
c:\1\ID_10997210.exe [TROJ_CLAGGER.C]
c:\1\outlook.exe [WORM_GAOBOT.DF]

I think there is no need of comments.
Your previous McAfee got 4 of 5 , your current OneCare got 0 of 5.
No comment


If you wish program lighter on resourses but very good at malware catching
- use Nod 32 .I recently did tests on 4 antivirus software - Panda , Norton
, Kaspersky and Nod32 , and Nod scored 85% of catching both known and
unknown malware (very good) but because it is lighter that the others it is
good and obviously better than One Care.


Panda_man

Panda_man
--
Prevention is always better than cure !
Panda TruPrevent - the most intelligent technology to combat unknown malware
http://www.pandasoftware.com
http://pandaman.hit.bg


"cloud36" wrote:

After removing completetly McAffee (annoying reminder pop-ups) and reduced
Spysweeper to only scan once a week otherwise shut off, OneCare and ZoneAlarm
are my loyal gate keepers.
But I noticed that almost at the same time OneCare firewall pop-up informs
me about a program accessing the web, also ZoneAlarm pop-up appears.
= Would anyone recommend to keep both programs?

Ads