hitmans pros best zero day malware finder

[nsm0220]

lately hitman pro have best zero day malware finder ever what to know who is the this unlikely hero is 

[GT500]

HitmanPro incorporates scanners from several vendors, so it makes sense that their detection rate would be better then any of those scanners would have by themselves.

That being said, the makers of HitmanPro don't do the research themselves and they don't developer the scan engines themselves, so don't forget to give credit to the makers of the AV engines that are used in HitmanPro since those engines and the developers and researchers behind them are responsible for any good detection ratings that HitmanPro may have.

Of course, I am reminded of something that Bruce Harrison once said. To paraphrase him, think for a moment of a test result where an AV product is able to detect 99.9% of the malicious samples, and the test was conducted by scanning a folder of 5,000 malicious samples. That leaves you with 5 malicious samples that were undetected. What if those 5 malicious samples were all 0-day infections, and were spreading more rapidly at the moment then the 4,995 samples that were detected? The sad truth about comparative testing is that, when you see your end results, you have no way of knowing if the malicious samples that were not detected are more common in-the-wild than the ones that were detected. It leaves you with an incomplete picture.

[nsm0220]

i was going tell you that Ikarus in hitman pro is most useful av to find zero day malware 

[GT500]

i was going tell you that Ikarus in hitman pro is most useful av to find zero day malware

It also has an abnormally high false positive rate.

[spywar]

Yes IKARUS engine was dropped by Emsisoft due to big FP rates, really high..

[nsm0220]

Yes IKARUS engine was dropped by Emsisoft due to big FP rates, really high..

no its fp eate haves drop over the last year or two

[nsm0220]

i meant to spell rate

[nsm0220]

Yes IKARUS engine was dropped by Emsisoft due to big FP rates, really high..

but you see IKARUS haves the high detection rate of zero day malware like this one for example https://www.virustotal.com/en/file/6fe3a176378149d2f417510848e1ade08dce4d14c60783582bb51cd515848ce2/analysis/1378671530/

[David H. Lipman]

I'm not sure that is a 0-Day malware, just a poorly detected sample.

[nosirrah]

But not this one https://www.virustotal.com/en/file/9d732e99396aaaeb250e1eee35bc6067e6644fffef305844df6344b0f12f5bff/analysis/1378678821/ Note that my VT scan is ineed the first VT scan for this sample and it is indeed malware, a ransomer.

 

Its easy to find 0hour malware to make any vendor look good/bad.

[Guest Sentoryn]

It is easy to explaining the definition of zero-day, is the process of modifying the risk of a hacker in 24 hours, the parts are modified all the more difficult to detect. And here's an example from my scan to zero day malware:https://www.virustotal.com/pl/file/2f95dc8c5edb0031b09b5333e2df3fdc225d4f2fa7003f0fc7016d1cfb38652c/analysis/

 

Hitman Pro is a good scanner for today uses only three motors, Bitdefender, Emsisoft , Kaspersky

[nsm0220]

Hitman Pro use 5 av enignes not 3

[Guest Sentoryn]

I'm sorry, but You are the poorly informed

 

http://i.imgur.com/C2u6Fjg.png

 

3 AV , Bitdefender,Emsisoft,Kaspersky

[nsm0220]

im not poorly informed i know that hitman pro uses 5 av engines because i scan it when i see a odd file that its malware  

[nsm0220]

[Guest Sentoryn]

Can you scan suspicious files older version of Hitman Pro, but that's not possible because you updated to the latest which uses only three engine, see the link to the picture, which I gave up 

[nsm0220]

this pic came from the current venison of hitman pro  

[Guest Sentoryn]

  So this is the latest version at the moment Hitman Pro.

 

[nsm0220]

yes the same one that still uses IKARUS

[nsm0220]

btw the fodder i sent to malwarebytes have be all detected as malware 4 by IKARUS and 1 by kis on the same file also vt haves found the files as malware the only reason why malwarebytes didn't find the files as malware is because the 4 would poorly detected     

[GT500]

no its fp eate haves drop over the last year or two

I don't know what their FP rate was before Janurary of 2012, however since then I do have experience with their engine and its FP rate. The Ikarus engine would frequently cause Emsisoft Anti-Malware to fail in Virus Bulletin's testing, and as soon as the Ikarus engine was dropped in favor of the BitDefender engine Emsisoft Anti-Malware finally stopped failing comparative testing due to false positives.

The false positives may seem better in your own testing and personal use of products that include the Ikarus engine, however in both real-world situations and testing done by certain organizations the Ikarus engine tends to produce too many FP's.

[nsm0220]

you should being study its fp's i got the data for the last years fps 

[GT500]

I don't see why that would be necessary.

[nsm0220]

also besides there is one more good zero day malware finder that is kis

[AdvancedSetup]

Topic is closed due to abusive responses.  Please refrain from name calling on the forum or further actions will be taken.

 

Thank you