Malware detection list updated

07. October 2013 Security 2

This is a minor update that added FortiNet (FortiClient) as requested by some readers. I’ve also finally had a chance to get Dr.Web updated and started testing of all AV applications against the latest Leverage malware.

FortiNet performs very poor with a 12% detection rate. It scans a whole disk extremely fast so I am almost positive that archived files are not scanned at all. The few archived samples that were found were detected based on signature alone. When I extracted the archive, put the contents in a new folder and re-archived it, FortiClient was unable to detect the malware. I checked the preferences but found no checkbox that allowed me to enable or disable archive scanning. Between the not scanning of archived files and a signature database that is severely lacking, I would not recommend Mac users to rely on this product for protection.

Dr.Web stayed at an 89.2% detection rate. All other AV products will be updated and tested over the next week or so. I’ve also added the name of the AV product in every column every 50 lines, this should make it easy to see which product you are checking out for anyone with a display resolution of 1440×900 or larger (Thank you TED for your suggestion). The latest PDF can be found here.

2 thoughts on “Malware detection list updated”

  • 1
    TED on October 7, 2013 Reply

    The new added naming scheme works great!! Very easy to see what you are looking at. Thanks. Also what do the white blanks in Dr Web mean? I get the red and green, but white?

    • 2
      Jay on October 8, 2013 Reply

      White spaces mean the product has not been tested against those samples yet, Dr.Web should not have any (and I can’t find any).

Leave a Reply

Your email address will not be published. Required fields are marked *


This site uses Akismet to reduce spam. Learn how your comment data is processed.