RE: Antivirus Comparison

["Reece, Terry" <terry.reece () nmci-isf com>]

I have long been a fan of Norton/Symantec Anti-Virus, but it does seem lately that the products are starting to slip. I 
use E-Trust as well as SAVCE and SMS. There are several version with memory leaks, and overall reliability issues. 

With the release of this information: 

Serious Symantec Vulnerability

http://www.sarc.com/avcenter/security/Content/2005.02.08.html 

ISS X-Force has found a serious heap overflow vulnerability in many 
versions of the Symantec UPX decompression engine. As some of you may 
be aware, most modern trojans are packed with a combination of 
obfuscating and compression methods to evade detection; a component 
of which is UPX compression. It is conjectured that malware will soon 
take advantage of this attack to evade, disable, and possibly damage 
Symantec security products. Please examine the list of products 
posted by SARC and take immediate action to remedy any vulnerability 
you might be exposed to. Hotfixes are available. Stop reading and go 
patch now. This webpage will be here when you get back, which is more 
than we can say for your browsing experience should you decide NOT to 
take action. 
Further information is available at 
http://xforce.iss.net/xforce/alerts/id/187 


I am starting to doubt the product more and more. I love the company and the majority of their products do work as 
designed. On another note, I don't think I've ever seen eTrust find a virus, althought I do agree, they do have a 
decent lightweight product and nice enterprise console.

Terry

-----Original Message-----
From: Shawn Wall [mailto:sjwall () shaw ca]
Sent: Monday, February 07, 2005 17:08
To: security-basics () securityfocus com
Subject: Antivirus Comparison


Hi All. 

For years I've been using Norton antivirus products but lately I'm hearing
that Norton is no longer the de facto antivirus solution. I'm interested in
hearing what antivirus products are considered to be the best for both
enterprise and private use. As always, all comments are welcome. Thanks.

shawn