Besides Kaspersky, which antivirus software is good?

I have been busy with the exam, so I haven't been here for a long time. I saw an article about Kaspersky on the Internet last night, which is so mythical. After reading it, I thought it was well written. Although I can't say that all the above is true, I have seen some incidents of manslaughter. It can be said that some of the events mentioned above are by no means false, so I personally think that everyone should treat this article with a correct attitude, and the author will not be responsible for all the consequences and losses caused by this article!

Kaspersky has become an overly mythical anti-virus software in China. Especially those who have a huge number of "card meals" in China have an unparalleled blind worship of Kaspersky, and they use Kaspersky to kill viruses. They regard Kaspersky as the best choice for antivirus software, and these pseudo-experts spread their worship of Kaspersky everywhere. In the end, Kaspersky was hailed as a myth and shrouded in an illusory aura. This aura is so strong that when Kaspersky was exposed one shortcoming after another and killed again and again, they still regarded him as a god and turned a blind eye to his shortcomings. However, just like all myths are fictional, Kaspersky's myths simply can't stand scrutiny. Can Kaspersky, an anti-virus software that is not the first in Russia, reach such a fantastic height? Obviously not. Here, let's break the myth of Kaspersky, get rid of Kaspersky's illusory aura, and let Kaspersky return to reality.

Kaspersky's first myth in the world

Kaspersky's technical level is quite high. In some ways, Kaspersky's engine represents the highest level in the industry, but not all. Kaspersky is a pretty good antivirus software, but he has never been the first in the world. Even in his hometown of Russia, it is doubtful whether its anti-virus technology is the first. Many people think that the most powerful anti-virus software in Russia is actually Dr. Web, also known as "Okumo". This is anti-virus software used by Russian military and national security departments. Mainly not commercialized, the virus database is not very suitable for ordinary users, so its reputation is not as good as Kaspersky's, but as far as anti-virus engine technology is concerned, Kaspersky is even incomparable. In fact, although Kaspersky's technology is really excellent, Kaspersky is not even a first-line manufacturer. Compared with security vendors such as Symantec, McAfee and Trend Micro, Kaspersky is the best among second-tier vendors at best. Even in China, Kaspersky's share in the individual user market is pitiful. And if you take the bulk of the anti-virus software market, the performance of Kaspersky Enterprise Edition is even worse, and its market share is negligible.

Kaspersky is used to showing off his technical strength with dazzling awards and certifications, so let's take a look at the recent evaluation results of international authoritative antivirus software. Kaspersky official website will never publish these results. In the AV-Test test in May this year, Kaspersky only won the sixth place; In the VB 100 test that Kaspersky has always been proud of, it was unfortunately defeated this time; In the AVC test, Kaspersky only got the lowest standard rating and performed even worse. Kaspersky's ranking first in the world is just a joke.

Let's analyze some main shortcomings of Kaspersky anti-virus software in detail, so that everyone can have a more comprehensive understanding of it.

Kaspersky's shortcomings:

1 relies too much on the virus database.

Kaspersky's anti-virus engine uses a single form of rule judgment, and it starts very quickly when it encounters a virus. It is considered to have good performance in file identification and virus database comparison, which makes full use of the processing power of the processor. Kaspersky's virus database is very large, which has reached 300,000 at present, and its virus database and engine are also very well combined. Kaspersky's huge virus database and rapid upgrade frequency make the traditional signature antivirus technology used by Kaspersky perform quite well. This is Kaspersky's strength, but it is also Kaspersky's weakness. Kaspersky relies too much on its virus database, but at present, the virus has the characteristics of fast update and many shells. The traditional way of killing viruses with signature code has been unable to cope with the rapid self-renewal and self-protection of viruses, which makes Kaspersky's ability to protect unknown viruses extremely poor. Although Kaspersky has been promoting how powerful his heuristic anti-virus technology is to capture unknown viruses, it is actually just a joke. In the AVC test conducted in May this year, the focus was on the detection of unknown viruses and the detection of protection ability. Kaspersky only achieved an active detection rate of 9%, while AntiVir with the highest active detection rate reached 7 1%. The difference between the two cannot be overestimated.

2. Weak monitoring ability

There is no denying that Kaspersky's background monitoring ability is very weak. Kaspersky does monitor the registry completely, as well as services, but does not monitor the startup folder in the start menu. But it only prompts IE and other processes when monitoring remote thread code injection, so that people can inject Winlogon, and then infect the file to realize self-startup. Moreover, its monitoring of the loading driver is not complete, which makes malicious programs have many loopholes to drill.

Kaspersky's weak monitoring ability makes it easy for viruses to enter users' computers, but fortunately Kaspersky's anti-virus ability is very strong, and it can kill viruses. Moreover, due to Kaspersky's poor monitoring ability, Kaspersky needs to force a full scan regularly, which is not only time-consuming, but also affects the life of the hard disk. On the contrary, McAfee, whose anti-virus ability is not better than Kaspersky's, can rank among the world-class anti-virus software because of its powerful real-time monitoring ability. After being infected by the virus, it is better to kill it, and the virus will only be rejected by the monitoring ability. Which is higher and which is lower? I believe readers will know at a glance.

Three card bars collapsed

Kaspersky's occupation of system resources has been criticized by users. "Card collapse" is the most vivid title given by users who suffer from Kaspersky's occupation of resources. Although Kaspersky version 6.0 claims to solve the problem of resource occupation, the actual effect does not seem to be great. There are also some Kafan who claim that they can solve the problem of excessive system resources occupation by optimizing settings, but in fact you can try. After installing Kaspersky on a pure system, no matter how you optimize it, as long as you turn on the main monitor, you will have a soaring system resource occupation.

Kaspersky's card is not only reflected in the occupation of resources. Kaspersky's killing of large compressed files can really be described for a long time. Scanning compressed and mirrored files sometimes gets stuck, and its total scanning time is too long. After installing Kaspersky, the system starts very slowly, which is widely reflected by many users. You can find more than 3500 items in Baidu search "Kaspersky system starts slowly".

4 the legend of the king of manslaughter

Kaspersky's manslaughter rate is as high as its "card". Users joked that Kaspersky "would rather kill a thousand by mistake than let one go" and "I hurt a thousand and I lost 800 myself". Although this is a bit exaggerated, it is enough to show how serious Kaspersky's manslaughter is. Moreover, Kaspersky didn't get the relevant core code of the operating system provided by Microsoft, which led to the instability of its antivirus software. Sometimes system files are infected by viruses, and Kaspersky can't just separate malicious codes for cleaning, and it doesn't provide isolation function, so he has to kill system files together, so many users cry to kill viruses with Kaspersky, and the system can't get in.

Not long ago, because Kaspersky killed Kaka's assistant, Rising disclosed 22 major manslaughter incidents in Kaspersky's six months. So many serious manslaughter incidents are really dumbfounded. Among them, Kaspersky 5.0 even misreported the installation package of Kaspersky 6.0 simplified Chinese version as Trojan horse. The water rushed to the Longwang Temple, and the family didn't know their own family, which really made people laugh and cry. However, Rising's exposure does not seem to have much warning effect on Kaspersky, and Kaspersky seems to have intensified. After killing Rising's Kaka's assistant by mistake, Kaspersky then used Jinshan's cleaning experts as an advertising program, while Jiang Min's antivirus software was unfortunately reduced to pornographic code. In just one month, the three major domestic security vendors were unfortunately killed. Just a few days ago, Kaspersky accidentally killed the system registry file. Rising accused Kaspersky of being "the king of manslaughter". It seems that this is not just a legend.

5 Kaspersky's vulnerability

Kaspersky software itself has many vulnerabilities, of which the most widely known and simplest vulnerability is probably the famous modification time vulnerability. If Kaspersky wants to run normally, it must first check the user's key file to see if it is out of date. Kaspersky checks the validity of the key through the local time. Once the system time is modified by a virus, the key file will be invalid immediately, which makes Kaspersky unable to use it normally. This is a long-standing loophole, but Kaspersky seems to have no intention to solve this problem. So many viruses use this vulnerability to modify the user's system time to disable Kaspersky, so if you find that your Kaspersky is not working properly, please look at your system time. If you find yourself going back to 20 years ago, 30 years ago, congratulations, you got caught.

For Kaspersky 5.0, some experts have systematically pointed out the design loopholes, saying that it used many unsafe technologies in anti-virus software. Not long ago, many users using Kaspersky 6.0 found that they could not surf the Internet normally. In some cases, Kaspersky will interrupt the connection between the user and the website, resulting in the inability to open the webpage. In June, some experts pointed out that there are loopholes in Kaspersky 6.0 and Kaspersky 7.0, which may lead to system crash.

Second, more truth.

These are some of Kaspersky's serious problems, but this is not all. In fact, it is easy for us to list more than 30 shortcomings of Kaspersky, which exist in Kaspersky's virus killing ability, software functions, compatibility and so on.

theme

As far as the domestic market share of individual users of antivirus software is concerned, according to relevant statistics, Rising accounts for more than 60% of the stand-alone market, Jiang Min and Jinshan each account for about 15%, while Kaspersky's personal software killing market is definitely less than 10%. So why is Kaspersky so respected in China, almost reaching a mythical level? The reason is that Kaspersky's users are mostly students, including many so-called masters who think they are proficient in computers. Although the number of these people is far less than that of users such as Rising, Jinshan and Jiang Min, these people appear in major forums, but the proportion of websites is much higher. And Kaspersky is really a pretty good antivirus software, and it is almost free, so word of mouth, parrot, and the high level of Russian programming technology is known by people * * *, plus the psychology of blindly worshipping foreign technology, so the wind of admiration for Kaspersky spread, and three people became tigers, not to mention three people. Just like this, the market communication mode of word-of-mouth communication has made Kaspersky have many users. However, in such times, Kaspersky's ability was gradually exaggerated, and finally Kaspersky's myth was born.

Addicted to piracy is a means of promotion.

Speaking of Kaspersky, many Kaspersky users may regard it as free antivirus software. Indeed, Kaspersky's users really use genuine software that they paid for, but I'm afraid there is nothing. Most users use free pirated key files that Kaspersky used to find everywhere on the Internet. Not long ago, the cooperation between Kaspersky and Qihoo 360 security guards was one of Kaspersky's marketing activities in China, and it did bring many users to Kaspersky, but these users also used a free key that can only be used for half a year. At the end of last year, the person in charge of Kaspersky's China District announced that from 2007, about 6 million pirated users around the world will be banned, which is enough to show how serious the piracy situation of Kaspersky is. So, Kaspersky hasn't found the seriousness of piracy? Is Kaspersky incapable of preventing piracy? I'm afraid not. Piracy is deliberately condoned by Kaspersky, and Kaspersky turns a blind eye to it. It is precisely because of the consideration of cultivating the market that the recent cooperation with 360 is also based on this purpose. If word-of-mouth communication makes Kaspersky establish a brand image, then indulgence in piracy is the killer in Kaspersky's marketing means.

Now, the net has been sown, and it's time to close it. What did Kaspersky publicize the most this year? Besides being genuine, it is genuine. Combating piracy is Kaspersky's propaganda theme this year. Kaspersky recently sealed a large number of keys, which is a fatal measure to combat piracy. This is similar to Microsoft. Microsoft used to turn a blind eye to piracy, but has it started to certify genuine Windows recently? Of course, whether it is Microsoft or Kaspersky, their behavior is understandable. In business, after all, as a commercial software, it is natural to pursue benefits. But when Kaspersky is no longer free, will you still choose Kaspersky?

Of course, if you are one of Kaspersky's pirated users, don't worry for the time being, because Kaspersky knows that most of his users are pirated users. If you are in a hurry, these users will naturally abandon them. Just like the net should be closed slowly, otherwise it will run away in a hurry to collect the fish. Kaspersky dare not seal it too hard. I believe you can still enjoy Kaspersky's service for free for a long time.

Attitude is everything.

Milu, the "magic coach" who once coached the national football team, has a truth: attitude determines everything, although he failed to make the lame national football team magical. This principle also applies to the anti-virus software industry.

In fact, the technology of major antivirus software vendors has developed relatively maturely, and the technical level of major antivirus software vendors is not much different. In the AV-Test test, we can see that Kaspersky achieved a detection rate of 97.64%, ranking only sixth. Domestic Rising antivirus software also reached 96.02% in this test, ranking tenth. It can be seen that Kaspersky is only a little more than one percent higher than Rising in China. If there are more virus samples from China in the test samples, I'm afraid the performance of domestic software will be better. So, what is the key to win the market when the technical level is not much different? This is an excellent service attitude. But is Kaspersky China's service attitude excellent? No, they haven't had time to think about it, because they are still busy fighting piracy.

Why is Kaspersky China's service so criticized? Because Kaspersky doesn't pay attention to the China market at all, and they don't pay attention to the rights and interests of users in China. How can they provide good service without a good attitude?

The present situation of Kaspersky China

Kaspersky doesn't pay attention to the China market, not to say that Kaspersky doesn't want to pay attention to the China market. He can't be indifferent to China's huge market, but at present Kaspersky really doesn't have any measures to attach importance to the China market. Even the so-called Kaspersky China doesn't exist. Kaspersky has only one sales organization in China, and at most there is a so-called technical organization, which can only be responsible for doing things with Chinese characteristics-Russians can't do such things, and it may not happen in the distant future to set up a virus research center in China. In fact, at present, the marketing, publicity and dissemination of Kaspersky anti-virus software in China are managed by Digital Star, the general agent of Kaspersky in China, and Kaspersky China is only a nominal leader.

Critical localization

Just as people often use the word "with China characteristics" when talking about the situation in China, the Trojan horse virus on the Internet in China also has China characteristics. Insufficient localization is a problem that many foreign antivirus software manufacturers will face in China, and Kaspersky is no exception. Kaspersky's localization in China is extremely weak, and there is no virus research center in China, which leads to its untimely response to the sudden virus in China. Kaspersky has few services in China. Ask friends who use Kaspersky and you will know that they always send emails to Kaspersky's Russian headquarters when they encounter problems. By the way, the service of Kaspersky headquarters is quite good. At least, if you have a letter, you will reply. When the virus broke out, Kaspersky couldn't respond in time and didn't provide a solution for domestic users. Take the "AV Terminator" that broke out not long ago as an example. Domestic security vendors have quickly given solutions, but Kaspersky has never provided any solutions for users. Kaspersky has never produced killing tools in China, because it claims that Kaspersky has strong anti-virus ability and does not need killing tools, but it doesn't know that Kaspersky has released various killing tools in Russia and Europe. How do you explain this?

First of all, we mentioned that Kaspersky has almost no service agencies in China. Why do you say almost? This is because Kaspersky later added an upgrade server in China and recently opened a 400 service phone. Why did Kaspersky make these moves? Let's review it. Let's talk about the installation of Kaspersky China server. Everyone has been asking Kaspersky to set up a server in China, which is convenient for users to upgrade. Kaspersky didn't have a server in China before the submarine optical cable was interrupted after the earthquake in Taiwan Province Province. It is very inconvenient for Kaspersky users to upgrade after the earthquake. At first Kaspersky China said that he would not set up an upgrade server. Later, some domestic antivirus software manufacturers launched free services. As a result, Kaspersky China couldn't sit still. In order to keep the hard-won market in China, Kaspersky had to set up a China server and launch a special key for earthquakes. Then came the opening of the 400 service phone. A while ago, Norton and Kaspersky killed Windows system files by mistake, which made Kaspersky China realize the importance of strengthening local services. Norton didn't know about local services, and his image was greatly damaged in this incident, so Norton later announced the establishment of a security response center in China, while Kaspersky launched a 400 service phone. We can see that whether it is to set up an upgrade server in China or to open a 400 service phone, Kaspersky is actually forced to make a move, which is the result of competition with other manufacturers. Of course, we hope there should be more competition in the market, because this is a good thing for consumers anyway.

Despise China users

Here I have to mention again Kaspersky's recent series of manslaughter incidents. Since Kaspersky killed Kaka by mistake, and Rising exposed Kaspersky's 22 major manslaughter incidents in half a year, Kaspersky China did keep his promise, at least on the surface, without making any comments. It just killed Jinshan cleaning experts by mistake under the principle of "all users are safe", and then called Jiang Min and Adobe Reader 8 "pornographic programs". Then Kaspersky's cooperative ally Thunder was also regarded as a Trojan downloader. Recently, Kaspersky accidentally killed the system registry.

Of course, Kaspersky doesn't admit manslaughter, they only admit false positives. They say, "After Kaspersky warns of threats, users can decide whether to" delete "or" skip "these threats according to their knowledge, experience or any other reasons. Whether to "kill" a software depends on the user. If the user is very sure that running a software or doing an operation will not pose any threat, Kaspersky welcomes the user to submit it to Kaspersky's virus analysis center, and the virus analysis engineer will re-analyze and evaluate it. " This is a complete joke. "If the user is very sure that running a certain software or doing an operation will not pose any threat", can the user really be very sure? How many users can know that regedit.exe, who was just killed by Kaspersky the day before yesterday, is a system registry file?

Why did Kaspersky anti-virus software, which has always claimed "extremely low false positive rate" or "zero false positive rate" in the evaluation of anti-virus products in Europe and America, have so many major manslaughter incidents in China? And after being accused by Rising as the "king of manslaughter", Kaspersky's manslaughter is even worse? In fact, from Kaspersky's attitude towards the manslaughter of Rising Kaka and Windows XP system files, it can be seen that Kaspersky has no introspection on his manslaughter, and does not pay attention to the rights and interests of China users at all. In order to pursue the fast upgrade frequency, they neglected the basic testing work for the China market, so it is inevitable that there will be frequent manslaughter. Moreover, Kaspersky not only does not reflect on his own manslaughter, but also denies it blindly, even disdains the war of words on the surface, but secretly retaliates against his competitors on Sina and other blogs, which is really shameful and ridiculous.

In fact, Kaspersky's biggest problem in China is not technology, nor piracy, but service attitude. What Kaspersky needs to do now is not to crack down on piracy, but to correct the service attitude, increase the attention to Internet viruses in China, deepen the cultivation of China, serve users in China, and let Kaspersky achieve further development in China. China has a huge market. If you just want to make money and don't want to serve users in China, I'm afraid Kaspersky's free key will be sealed and you should quit the China market.

Let's break the myth and recognize the truth.

Myths are always beautiful, but the truth is often cruel, which is one of the reasons why people like myths and refuse to face the truth. People need myths. Kaspersky after the myth may be able to dispel netizens' fear of computer viruses, but the myth can't help you avoid the invasion of computer viruses. Maybe you can't believe the above facts. Maybe you think the above seems a bit exaggerated. You never thought Kaspersky would have so many problems, but if you look closely, you will find that you have to admit that these are all facts. Yes, compared with the aura of glory, truth often appears so scarred and pale. When the cloak of Kaspersky myth was stripped off, we have already seen the truth that it is full of shortcomings. Gold is not enough, no one is perfect. Kaspersky is indeed an excellent antivirus software, but it is not the best antivirus software, nor is it as perfect as claimed. It also has many shortcomings.

So, if you are using Kaspersky, I hope you can also clearly understand its shortcomings. You still have to be alert, you may still be attacked by the virus. Besides, you must be more careful. Next time Kaspersky kills a pig, is this another false alarm?