From: "Crouchie1998" <
[email protected]>
| LOL
|
| 96.37% of all stats are made up, but this one especially
|
| Some of those virus programs are out-of-date because it mentions Symantec
| Antivirus 8 Corporate Edition & I am using version 9.0.0.1400, which is the
| very latest version.
|
| Crouchie1998
| BA (HONS) MCP MCSE
|
Well there are three parts to every AV application; Kernel, Engine an Signatures.
- The version of the software is the Kernel.
- The Engine applies the algorithms for find infectors
- The signatures are the fingerprints of the infector.
The two most important parts are the Engine and Signature files.
The Kernel is application and OS related and is insignificant for the purpose of Virus
Total's tests 0or sample analysis.
For example if you used the McAfee Command Line Scanner, it stands alone and independent of
whether it is Enterprise VirusScan v7.x, Enterprise VirusScan v8.0i or Retail VirusScan 8
or Retail VirusScan 9. Only the Engine and Signature files are used.
I can assure you that Virus Total does not have 18 AV applications installed and running on
a server. Rather they are applying the sample to the various command line scanners. So the
fact that it is Symantec v8 or Symantec v9 is insignificant. It is more important to know
the version of the signature files that were used. Why that is not displayed I don't know.
For McAfee is shows DAT v4479 but it does not show the Engine version which should be v4400.
In summation, the latest version of software is needed on a desktop for a given OS, it is
not needed for vendor scanner infector analysis.
If you question the analysis using Symantec v8 vs. Symantec v9 I suggest email --
(e-mail address removed)