Is PCTAV really ready for prime time?

[solcroft]

A longtime believer that common sense and proper know-how did away with the necessity of antivirus software, I was recently forced to re-examine that belief when my sister brought multiple pieces of malware home with her from college. After spending my weekend dealing with infections across four of our computers at home, I installed a free but highly-regarded antivirus software, among other things, on my sister's laptop and sent her back to college.

She's back again for her after-exam holidays, and her laptop is malware-free. Out of curiosity I browsed through the quarantine function of the antivirus software I installed for her, which had caught no less than a hundred infections in less than one week. Again, out of curiosity, I zipped up a few of the infected files onto a USB drive, and scanned them with PCTAV.

Of the six different pieces of malware the other antivirus product picked up, PCTAV failed to detect even a single one.

Much as I am partial towards PCTAV, I must ask serious questions about its suitability for public use. In the short while I have tested it, it appears that there are multiple bugs in the program, none of them critical, yet annoying all the same. Yet while all these bugs pose are inconveniences, the shortcomings of the scanning engine are truly atrocious and unforgivable. Running my sister's infected files through three other antivirus software (I have a different one installed on each computer now) confirmed that they were not false positives. These are live samples that are actively spreading in the wild, not sterile specimens locked up in a virus zoo. If I had installed PCTAV on my sister's laptop, I have no doubts that I would have spent all of today cleaning up my sister's laptop, and would have to delay typing this post until tomorrow.

Does PC Tools truly have the resources and connections needed to engage themselves in the antivirus industry, one where there is no tolerance whatsoever for technical mediocrity? Are the developers aware of the various problems plaguing this software, and what, if anything, are they doing to fix it? And last, but not least, what can we as common users do to help?

[AChen]

Hi solcroft,

Please know that our PCTAV program is always improving and we have the resources to become one of the best antivirus programs out there. Our developers are working very hard to ensure that PCTAV will become a top knotch program.

Please realize, we are new to the Antivirus scene and our software is constantly developing and adapting to catering to the hundreds of new threats everyday. We have established our company as one of the main competitors in the spyware industry and would like to carry this trend with our antivirus software.

Although there may be a few bugs in the program, these issues are being worked on and will be resolved with the new version which will be released in February.

With the viruses that are not beinig detected by PCTAV, you can send us samples via http://www.pctools.com/mrc/submit/ or you can email me these samples and I can then pass this on to the analysts to investigate.

Feedback is very important to us as this will give us some knowledge on what customers really want within their software and we can consider these for current/future releases.

[solcroft]

I have already submitted password-encrypted copies of the malware samples via the MRC website. It will be interesting to see how long the turnaround time is for the developers to release the necessary signature updates, I think.

As I mentioned, it is not the bugs in the software that truly concern me. The forum staff (yourself included, AChen) have paid attention to the issues raised and assured us that the next release would bring bugfixes. What DOES concern me are the issues with the scanning engine and PCTAV's detection rate, which I fear that, by the time users do post their feedback, consumer confidence is very likely to have already gone down the drain.

It is not merely a matter of the six samples I have at hand; god knows how many other viruses are running out there undetected by PCTAV. The much larger picture is not only whether PC Tools has the programming know-how to create an excellent program, but whether your company has the industry connections and resources to be informed of new malware as they arise, and then quickly create vaccines for them as well. I am no industry insider by any means, though I can imagine being new to the field poses its usual hiccups... but I suggest PC Tools, for its best interests' sake, get over this teething period ASAP.

[WarrenG]

I think that PC Tools has the know-how to make a great anti-virus program. I mean just look at downloads they get on www.download.com, its not like it isn't popular. Being that the popularity is so high I would imagine that the company has alot of "backing" to adhere to the abundance of customers they deal with day to day.

How long ago did you submit the threats to them? I think that you need to chill and let things ride, thats unless of course the threats are doing damage to your PC, which would adversely affect you. Is this the case? Seeing as you can post on here with no trouble there musnt be too much going wrong with it.

Just my 2 cents.

Peace.

[solcroft]

The only reason I can post here with no trouble is because PCTAV was NOT the line of defense guarding my home network. As I mentioned there are 4 different antivirus products running on 4 computers my family has, so even if one of them gets infected, the other three are reasonably secure. If it had been PCTAV that was installed on my sister's laptop instead of another product, I'd have spent all of yesterday cleaning up the veritable petri dish of viruses her laptop would have become.

To be honest, I don't find it acceptable for a product to miss detecting threats on the basis that the aforementioned threats "don't do damage". We have different standards of judging, I guess.

The reason I am posting this is not to lambast PC Tools for the shortcomings in this product, but to hopefully alert them of the potential severity of the problem. This is the kind of issue that, by the time users raise it to the developers, they will most likely have lost faith in the product and damage, perhaps irreversible, has already been done to their computers. I am sticking it out and still looking forward to the next release of PCTAV - but heaven knows there are some people who are not so forgiving.

[Inf0Byt3]

I respect your opinion and I can't say that you are not right. However, everything you see around you has been built on a base. Everything has a start, and the things that are big (and/or) efficient today were small in the past. You cannot judge a software company just by 1 product. I can tell you this because I work for a security company and this work is not so easy. PCTools need our feedback in order to improve their products. I recently have scanned big malware collections and the detection rate is pretty high. I can say that this is the ONLY antivirus package that stayed on my PC more than one month (and I consider using it and recommending it as long as there will be a free version). Also, there is allways freedom of choice. If you think this antivirus does not suit your needs, consider installing another . Simple as that.

I hope you understand that i'm not trying to defend anyone here or acuse or anything, this is just my humble opinion.

Best regards.

[solcroft]

You're right indeed that the freedom of choice is always there. There is fierce competition and brand loyalty contests now even among the free antivirus software market, something unheard of as early as two years ago, I believe. If a package fails them, people are likely to simply pack up and move to another. PCTAV still has my vote for now, and since I'm on summer vacation, I can afford spare time to test and tinker around a bit, but most are unlikely to be as forgiving as you or I.

Incidentally, I've just submitted another batch of malware via the MRC website. I am not sure if submitting missed/false/suspicious detections en masse is going to be helpful to the developers at all, so somebody please stop me if this is indeed a counterproductive exercise, otherwise I plan to send samples to PC Tools as I find them.

[Inf0Byt3]

No, you're doing a great job . A little constructive criticism is allways good. I am trying these days to send some undetected malware too but for now I am limited by the quarantine items number (I cannot see wich of the samples were detected) .

[solcroft]

The inevitable finally happened after days of handling virus samples, and I was forced to reformat my hard drive after I accidentally executed a trojan sample from China - which PCTAV, as usual, did not detect.

I've switched to another antivirus product for now, and will not be touching PCTAV until its next release when there will hopefully be much-needed fixes and improvements to the program. As bad as the detection rate already is, a substantial percentage of PCTAV's detections seem to come from its heuristics, as far as my suspicions go, seem to indiscriminately flag any files compressed by packing routines such as PECompact or NSPack, infected or otherwise (I may be wrong about this). Comparing detection results between PCTAV and VirusBuster (using www.virustotal.com) reveals that detection rates and malware names are virtually identical, suggesting that PCTAV engineers have done little, if at all, to modify and improve the VirusBuster-based scanning engine and signature updates. Submissions to the MRC seem to have yielded little in the way of actual results thus far, with neither any response from PC Tools, nor PCTAV succeeding in detecting the samples days after submission.

I cannot in good conscience recommend PCTAV to anyone right now. Annoying bugs aside, PCTAV fails horribly at its core task as well, as viruses slip through it like water through a sieve. The program is virtually useless compared to the competition it faces right now.

Hopefully the next version will change things.

[Support]

Originally Posted by solcroft

The inevitable finally happened after days of handling virus samples, and I was forced to reformat my hard drive after I accidentally executed a trojan sample from China - which PCTAV, as usual, did not detect.

I've switched to another antivirus product for now, and will not be touching PCTAV until its next release when there will hopefully be much-needed fixes and improvements to the program. As bad as the detection rate already is, a substantial percentage of PCTAV's detections seem to come from its heuristics, as far as my suspicions go, seem to indiscriminately flag any files compressed by packing routines such as PECompact or NSPack, infected or otherwise (I may be wrong about this). Comparing detection results between PCTAV and VirusBuster (using www.virustotal.com) reveals that detection rates and malware names are virtually identical, suggesting that PCTAV engineers have done little, if at all, to modify and improve the VirusBuster-based scanning engine and signature updates. Submissions to the MRC seem to have yielded little in the way of actual results thus far, with neither any response from PC Tools, nor PCTAV succeeding in detecting the samples days after submission.

I cannot in good conscience recommend PCTAV to anyone right now. Annoying bugs aside, PCTAV fails horribly at its core task as well, as viruses slip through it like water through a sieve. The program is virtually useless compared to the competition it faces right now.

Hopefully the next version will change things.

solcroft,

It is unfortunate to hear you are disappointed in PC Tools Antivirus' performance. You are right in stating that PC Tools is very new in the market and that there is a growth phase where we will need to catch up quickly in the program's function and performance.

We thank you (and everyone elses' in here) for your feedback as it is important for us to hear what the customers are saying.

We look forward to releasing a newer and ever-improving version of PC Tools Antivirus soon.

Customer Support Services
PC Tools
www.pctools.com