Prevx, Hitman Pro & Bluepoint Security tested against 250 early life samples (Part 3: Bluepoint)

Bluepoint Security

Category:

Science & Technology

Tags:

• Prevx
• review
• test
• malware
• hitman
• pro
• bluepoint
• security
• research
• group
• on
• demand
• bllepoint
• cloud

[kailea2323]

i am just wondering what your absolute "go-to" program is for removing viruses from your computer.

I have malwarebytes. works great. and hitman pro.

but i am just wondering if there is like "the ultimate malware removal" program out there. lol

[MalwareResearchGroup]

@kailea2323 In terms of removal, i would say the ones you mention are about as good as you will get.

[sepertude]

What about Panda Cloud?

Also I think that this is not the right way to test could based antivirus software because they do not relly on signature detection that is important for this kind of testing.

If you could put heuristic on maximum and execute each of undetected samples we could see if software stops it or not :)

For example, in order to lower false positives vendor would apply different ruleset for files that are associated with apropriate registry entires for that files..

[MalwareResearchGroup]

Hi sepertude.

Im afraid you are incorrect in your assertion that cloud AMs do not use signatures as they do.

They use heuristics as well and for on exe, may employ behavioral analysis also.

Whilst it is true that some AMs will detect a higher proportion of malware on exe than on demand, it is incorrect to argue that on demand tests are the wrong way to test applications

[rivercisco]

i have AVG on my computer can i scan with it on?

[commando189]

Well i would say from these bluepoint must be good because hitman pro uses 6 engines if you count g data as avast! and bitdefender and it scored the same as bluepoint!

[MalwareResearchGroup]

@sepertude Hi. In fact, with a right clicj scan, Hitman simply uploads the files to the cloud where they are scanned by the various vendors engines. Bluepoint also uploads the samples. Hitman employs its own detection during a system scan and if EWS is enabled. I believe Prevx simply uploads a MD5, but uses a few extra techneques during on exe analysis. Both Bluepoint and Surfright are happy with our tests and methodology.

Regards,

Chris

[sepertude]

if not it does not call othervise it would take hours to check each file with online database.

[sepertude]

They imply different heuristic for realtime situations and different for on-demand scan.

Cloud based software have database stored online, they scan a file and if a file is clean software check with online database to make sure file is not listed overthere. Thats why they depend of the Internet.

When you do on-demand scan they use limited database and heuristics, if a file is suspicius they call database,

[MalwareResearchGroup]

We do it because 1) It is interesting. 2) Serves as a diversion from running our own businesses. 3) provides a service to smaller vendors that would otherwise cost them between €500 - €2500 per test 4) Because we want to make the internet safer for the average user. 5) We like helping people who have good products make them better.