Submission + - Kaspersky antivirus failed VB100 test
thisispurefud writes: Antivirus software from three global vendors has failed a major series of malware tests, the VB100.
Products from Kaspersky, Grisoft, and F-Secure all failed to detect 100 percent of the in-the-wild malware signatures in the database of testers Virus Bulletin, although each company has passed before.
Of the 37 products submitted for testing, 10 failed to demonstrate the detection abilities required for VB100 certification.
Kaspersky Anti-Virus 6.0.2.621 failed to detect a network worm called allaple. According to Kaspersky's senior technology consultant David Emm, Kaspersky first added a signature for the worm in February. At the time of the test, Kaspersky was "optimising" its allaple signature, and the signature wasn't in the Kaspersky database, Emm explained.
Kaspersky said it is confident that no customers running its security suite were affected at the time of the test, because the security suite includes a firewall, behavioural analysis and heuristics, and the product was tested in a manner that precluded behavioural analysis. "That doesn't help in our disappointment at not passing the test, but at least we know our customers weren't affected," said Emm.
Grisoft AVG 7.5 Professional Edition also failed the VB100. AVG is a popular free anti-malware application, which has widespread use.
Larry Bridwell, global security strategist for Grisoft, said that the part of its anti-malware application, AVG 7.5 Professional Edition, that detects signatures had failed to detect one of the W32 agobot Trojan variants, but that the anti-spyware part of the product had picked it up. "Testing is on-access, at the hardware level, which is scanned," Bridwell told ZDNet.co.uk. "When [AVG 7.5 Professional Edition] was tested, we picked up the bot on the spyware side, which is on-demand [the program has to start to be executed before it is halted]. We should have detected it on-access."
