AV Vendors suck
Page 1 of 2 12 LastLast
Results 1 to 10 of 12

Thread: AV Vendors suck

  1. #1
    Computer Forensics
    Join Date
    Jul 2001

    AV Vendors suck

    from thelatest ISC diary...

    Many readers might be familiar with Virustotal (http://www.virustotal.com ). This service provides its users the ability to submit a file and have several anti-virus engines scan it. Unfortunately, several major anti-virus vendors decided this was not a good use of their product (probably because it exposes which vendors are lagging on getting updates out) and have badgered Virustotal to remove their engines. Apparently too many customers would come back to AV vendors using Virustotal results to harass them about lagging signatures.

    I'm sorry. Who the hell do these vendors think they are? This guy is providing one of the best services I have seen in a long time. Quick submittal and scan time, and you get to see who is catching what viruses. I guess the vendors couldn't handle someone pointing out that they suck.
    As of this morning the site is still up..but we'll see what happens.
    Antionline in a nutshell
    \"You\'re putting the fate of the world in the hands of a bunch of idiots I wouldn\'t trust with a potato gun\"

    Trust your Technolust

  2. #2
    AO Ancient: Team Leader
    Join Date
    Oct 2002
    Yeah.. I saw this earlier and was going to post about it after i got back from breakfast... You beat me to it.....

    I agree... They suck.... If they were any good they'd want thier engines there to prove they are up to speed.
    Don\'t SYN us.... We\'ll SYN you.....
    \"A nation that draws too broad a difference between its scholars and its warriors will have its thinking done by cowards, and its fighting done by fools.\" - Thucydides

  3. #3
    Senior Member nihil's Avatar
    Join Date
    Jul 2003
    United Kingdom: Bridlington
    Hey Guys,

    Time to name em and shame em?

    If you are not prepared to go "in the pit" then we KNOW YOUR PRODUCT IS CRAP

    Game on?

  4. #4
    Computer Forensics
    Join Date
    Jul 2001
    I've been slamming Symantec at work. I'm less than excited to continue using their products. Especially considering their definitions are the slowest in the pack. ugh.
    Antionline in a nutshell
    \"You\'re putting the fate of the world in the hands of a bunch of idiots I wouldn\'t trust with a potato gun\"

    Trust your Technolust

  5. #5
    Junior Member
    Join Date
    Nov 2003
    I have to agree with hogfly. I've moved away from Symantec's products in favor of Panda's AV suite. Symantec was too slow to respond to outbreaks and too costly.

  6. #6
    Senior Member
    Join Date
    Aug 2003
    I guess I really don't care if AV companies are getting their panties in a wad. For me, it is an invaluable service for some of those pieces of malware that you just can't get rid of. It's nice to have the ability to upload it somewhere and at least be able to get an idea of what a file is.

    If the AV vendors want to improve their PR, then they would work with websites like this to improve their definition database. How hard would that be?

  7. #7
    Member gn0min0mic0n's Avatar
    Join Date
    Mar 2004
    I noticed a significant slowdown in Symantec products since 2002...for the longest time I'd only use 2001 Systemworks or Internet Security, until I found AVG 6 and Kerio (version 2, not 4!).

    Funny, I just noticed that our AVG virus definition (from the emails) at work have a date from August....

  8. #8
    Senior Member
    Join Date
    Nov 2001
    thanks vorlin...when i copied the url into samspade i left in a "." before it....duh!
    Bukhari:V3B48N826 “The Prophet said, ‘Isn’t the witness of a woman equal to half of that of a man?’ The women said, ‘Yes.’ He said, ‘This is because of the deficiency of a woman’s mind.’”

  9. #9
    PHP/PostgreSQL guy
    Join Date
    Dec 2001
    If you're talking about www.virustotal.com, here's what my dig pulled up:
    PS - I'm in Tampa and yes, my machine's name is booty, he he he...

    booty - /home/kellert > dig www.virustotal.com

    ; <<>> DiG 9.2.1 <<>> www.virustotal.com
    ;; global options: printcmd
    ;; Got answer:
    ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 6464
    ;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 4, ADDITIONAL: 4

    ;www.virustotal.com. IN A

    www.virustotal.com. 755 IN A

    virustotal.com. 755 IN NS ns2.argo.es.
    virustotal.com. 755 IN NS adsl2.argo.es.
    virustotal.com. 755 IN NS ns-split.argo.es.
    virustotal.com. 755 IN NS ns1.argo.es.

    ns1.argo.es. 1863 IN A
    ns2.argo.es. 1863 IN A
    adsl2.argo.es. 1863 IN A
    ns-split.argo.es. 27063 IN A

    ;; Query time: 41 msec
    ;; SERVER:
    ;; WHEN: Mon Nov 15 03:09:12 2004
    ;; MSG SIZE rcvd: 202
    Then, here's the traceroute, dying on hop 16 somewhere outside/nearby/in Madrid, Spain, but it looks to be a spanish site anyways:

    booty - /home/kellert > traceroute www.virustotal.com
    traceroute to www.virustotal.com (, 30 hops max, 38 byte packets
    1 rrcs-24-73-166-233.se.biz.rr.com ( 3.038 ms 2.531 ms 2.534 ms
    2 ( 8.792 ms 10.088 ms 10.045 ms
    3 atm5-0-641.tampflerl-rtr1.tampabay.rr.com ( 11.956 ms 19.527 ms 12.097 ms
    4 srp8-0.tampflerl-rtr3.tampabay.rr.com ( 12.066 ms 11.290 ms 12.085 ms
    5 pop1-tby-P0-1.atdn.net ( 13.596 ms 11.308 ms 16.370 ms
    6 bb1-tby-P0-0.atdn.net ( 11.640 ms 19.751 ms 17.290 ms
    7 bb2-atm-P7-0.atdn.net ( 29.360 ms 29.459 ms 32.926 ms
    8 pop1-atm-P4-1.atdn.net ( 29.208 ms 37.443 ms 32.399 ms
    9 if-8-0.har1.Atlanta3.teleglobe.net ( 29.336 ms 29.333 ms 29.451 ms
    10 if-0-1.core1.Atlanta3.Teleglobe.net ( 35.571 ms 30.016 ms 33.643 ms
    11 if-1-2.core2.Newark.teleglobe.net ( 145.190 ms 144.725 ms 144.966 ms
    12 if-8-0.core2.London2.Teleglobe.net ( 151.340 ms 152.783 ms 153.521 ms
    13 ( 159.579 ms 161.151 ms 159.521 ms
    14 if-6-0.core1.Madrid.Teleglobe.net ( 151.808 ms 152.845 ms 152.577 ms
    15 ix-1-0.core1.Madrid.Teleglobe.net ( 157.646 ms 164.747 ms 157.086 ms

    <died after this hop>
    Just some random info...

    EDIT: oh yeah, just from what www.register.com thinks, here's the dynamic pic of the whois they had. Anyone know if I just broke a law by putting said pic on my server for the duration of this post? If so, I'll remove it, yoiks!

    www.register.com whois of www.virustotal.com
    We the willing, led by the unknowing, have been doing the impossible for the ungrateful. We have done so much with so little for so long that we are now qualified to do just about anything with almost nothing.

  10. #10
    Senior Member
    Join Date
    Jan 2004
    Panda AV is God. I use the ActiveScan all the time. I do have Panda AV Platinum as well, but rarely get around to using it seeing as how ActiveScan is free, easy, and updated constantly.

    Geek isn't just a four-letter word; it's a six-figure income.

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts