Which antivirus program is better, Doctor Web or Kaspersky. Research work "Which antivirus program is better Kaspersky Anti-Virus, Avast or Dr.Web"

Here is a small test and comparison of four flagships in antivirus protection– ESET Smart Security 4.2.71.3, Dr.Web Security Space 6.00.1, Kaspersky Internet Security 2011 11.0.2.556, Norton Internet Security 2011 18.5.0.125.

For testing, 4 identical copies of the Windows XP SP3 operating system with all updates at the time of publication of the article were selected. This made it possible to make the most accurate comparison antivirus products. Let's look at some interesting results.

Starting the system. The following test was carried out: first, the startup time of the operating system without an antivirus installed was recorded, and then a comparison was made with the startup speed of the system with each antivirus product separately.

Launch the browser. The test was done using a similar procedure. Based on Opera browser 11.00.1156 International Final. The result records the time the program was opened (do not confuse the time of opening the program with a fully loaded web page!).

Unpacking the archive. The test shows how long it takes a system with antivirus installed to unpack the archive. To carry out the test, WinRAR 4.00 Beta 4 was used, with which 1 file of 510 MB was packed.

Examination system disk. Each antivirus scanned the system disk, the files of which occupied approximately 4.5 GB. Were used maximum settings antivirus products.

As you can see, in terms of performance, ESET won in three out of four tests. Norton won in system scanning speed.

Let's look at one more interesting point– PC load. Let's compare how much memory each antivirus product takes up during idle time (when nothing happens on the PC) and during scanning of the above-mentioned system drive.

And here again he takes the lead ESET– it used approximately 60-65 MB of memory during idle time and during scanning.

Someone who disappointed is this Dr.Web. During idle time it used 105-110 MB (!), and that's just the core itself!

To scan the system drive, Dr.Web uses separate module– Dr.Web Scanner. A separate module used an additional 100 MB of memory. Together with the kernel, you get more than 200 MB of memory - too much, you agree.

Kaspersky Internet Security 2011, which many consider a “monster” for weak PCs, showed twofold results. In idle mode, it took up almost the same amount as ESET - 60-65 MB.

But during scanning, Kaspersky is truly a “monster” - 150-170 MB of memory

Norton Internet Security 2011 showed good results. During idle time it stayed at 60-65 MB.

And during scanning – 80-85 MB, which personally pleasantly surprised me.

IN total confidently climbed to first place ESET Smart Security, and very close to it is Norton Internet Security. Of course, Dr.Web disappointed... Although quite high level protection product uses a lot of PC resources, and the scanning time of the system disk took 3 times longer than the third one best result. Kaspersky Internet Security 2011, despite its high scanning speed (which is nice), used an indecent amount of memory during scanning of the system disk compared to other products.

In the end, I would like to note that these results in no way confirm or refute the quality of protection against malicious objects and other threats!

Let's say we have 49 copies of current malware, which are 100% known to antiviruses with modern bases. What could these antiviruses have done with them a week ago, when these malware had not yet fallen into the hands of virus analysts? How effective are the heuristics and proactive protection of modern internet security if you test it against real malware? And for this we don’t need to invent a time machine at all - we’ll just preserve experimental antiviruses in virtual machines without access to the Internet, and after a week we’ll test them against a collection of the latest malware, which is already detected by these antiviruses with up-to-date databases. But the antiviruses of the past, of course, don’t know about this yet :).

We will use KIS, Dr.Web, ESET and Windows Defender. All except the last one will run in Win 7. The last one will work under Win control 10 - there is hope that the “ten” is better protected and even with a sieve like Defender, viruses will not get through. Well, let's check.

Once again about testing

Here's what will be checked: detecting the virus, blocking the virus from launching and treating the infection. The first test will be performed with protection disabled - in scanner mode. For the second and third tests, the antivirus monitor will be turned on.

After all this, we will update the database and compare the resulting detection with the previous result. Since there are many viruses, “exhibits” for launch testing will be selected by the antivirus itself. We will launch those viruses that are not removed as a result of the detection test. It's stupid to try to launch a virus that is in antivirus database, - any antivirus will block it. The most interesting thing is to launch a virus that is “unfamiliar” to the antivirus.

All viruses in my collection were divided into groups: Backdoor, Worm, Virus, and so on. A list of all “program heroes” will be provided later. As you can see, there is plenty to choose from.

Your ideas

Your ideas inspire us to new research. We have already taken them into account. So keep gushing - comments on the article and are always open to your suggestions for improvements :).

All operating systems are fresh (specially installed for this article), and the Internet was turned off immediately after installing the antivirus so that the databases remained old with a 100% guarantee.

Let's start testing with the well-known Kaspersky Internet Security. As you can see from the screenshot below, the antivirus was installed six days ago (24 days of free use left).

Disable the antivirus, unpack the archive with viruses. We do not activate the antivirus, but we launch it spot check(so that he doesn’t start running through everything, but concentrates on one folder) and check the Virus folder. I remember once at a gas station they managed to fill a 20-liter canister with 23 liters. So in the case of Kaspersky - in a folder of 49 files, he managed to find 80!

Apparently, several infections are packed into one file and the antivirus displays each of them separately in the list. Let's look at the detailed report.

As can be seen from the screenshot, 45 threats were found (out of 49). For some reason, the Trojan.Win32.Waldek.jsu virus was neither deleted nor quarantined: the antivirus simply did not process it, although it detected it. There are a total of 11 files left in the Virus folder.

Most of the viruses survived in the RansomWare folder. As you can see from the screenshot, files numbered 2, 4, 7 and 8 were not touched by the antivirus at all. It will be interesting to see the detection after updating the databases.

Well, now we activate the protection and try to launch the “surviving” viruses from the Virus folder. I ran the first two files from the RansomWare folder (numbers 2 and 4). File number 2 was recognized as PDM:Trojan.Win32.Generic. The antivirus detected dangerous behavior of the program, “precisely characterizing it as malicious.”

He suggested healing the computer by rebooting. We agree. Treatment began, the antivirus canceled the actions of the malicious program and simultaneously eliminated file number 4.

I didn't like the results of the treatment. After reboot I did not receive clean system. Something was trying to boot, and files created by the virus remained on the desktop. The antivirus cleaned up some things, but it seems to me that not everything. Along the way, the antivirus, of course, tries to treat objects created by viruses.

I continue to run files from the RansomWare folder (numbers 7 and 8). Immediately after launching these files, as in the previous case, there was no immediate response from the antivirus, which allows programs to multiply. The antivirus began to respond after the viruses tried to send emails. Nothing worked out for them - neither did I. mail client, no internet connection!

It’s interesting, but Kaspersky anti-virus did not respond to file number 8. Let's move on. From the Scareware subfolder I launch the only file with the same name. I wait a few minutes. There is no reaction from the antivirus, and in the meantime the virus is most likely doing its dark deeds.

From the TrojanCryptor folder I launch a file named TrojanCryptor (1). The cryptographer is the heavy artillery. There was no response from the antivirus either. But a window appeared.

About the ransomware

The Trojan launched, there seemed to be no response from the antivirus, but the data remained unencrypted, as was the case with another participant in this test. But one of the antiviruses allowed data encryption, as you will see below.

From the Virus folder I launch files numbered 4 and 8, then from the Worm folder - files 6 and 8. For some reason the first one did not start (it’s not only developers who make mistakes regular programs, but also virus writers). But Kaspersky did not react to the second one.

I'm launching full check computer. Its goal is to identify objects infected with viruses and try to cure the computer. After the reboot, let's see what happened with the antivirus. To be honest, I was not pleased with the results. The antivirus reported that no threats were detected. Although malware remained on the computer. I didn’t dig deep - I just opened msconfig and looked at the startup list. As you can see, the antivirus didn’t clean out everything.

When I rebooted the computer, Kaspersky reported that it had decided to cure my computer - an active treatment process was detected, as a result of which the Ransomware (8.exe) file, as well as the worm (8.exe) file, were nevertheless deleted.

It seems that some malicious files he cleaned it up. After treatment active infection KIS again reported that there were no threats.

Well, it's time to update the databases. The databases have been updated and the computer has been rebooted. After the reboot, the recovery after infection wizard started, offering to fix some issues. After the wizard works, I reboot the computer again.

The master restored some things, but not others. Yes, autorun is cleared. But not completely - as you can see, there are still those who want to start. -!RecOveR!* files created throughout the disk were also not deleted.

I give the antivirus another chance and run a full scan again - this time with new databases. No threats were detected multiple files created by the virus remain on the computer.

Now repeat the detection test. I disable protection, unpack the archive and run a custom scan of the Virus folder. After updating the databases, Kaspersky neutralized all threats (49). In general, what was to be expected, because we specifically included in the test only real malware, known to the “antiviruses of the future.”

Dr.Web Security Space

A real monster was chosen from the Dr.Web line, installation file which weighs 466 MB - Security Space. The smaller Katana product wasn't an option because it doesn't have a scanner.

Continuation is available only to subscribers

Option 1. Subscribe to Hacker to read all materials on the site

Subscription will allow you to read ALL paid materials on the site within the specified period. We accept payment bank cards, electronic money and transfers from mobile operator accounts.

Which antivirus is better, Kaspersky or Dr. Web (Doctor Web)!

In this article I will not touch on other antiviruses. I just want to talk about these two.

I'll tell you my case. When I first went online, I didn’t have an antivirus. Then I thought about this question. I found two free ones online Kaspersky antivirus and Dr. Web.

Of course I installed Kaspersky (you guessed it right away). 78.53% of users would do this. Installation and activation went well. Afterwards, when I came home from work (a certain number of days had passed), I discovered that the computer was working somehow wrong. I tried to run the antivirus, but it wouldn't turn on. I had Kaspersky antivirus on a flash drive. I inserted the USB flash drive and wanted to reinstall the antivirus again. But the virus broke the antivirus again. I went online and wanted to download some other antivirus program. But as soon as I connected to the Internet, the virus immediately stole from me windows key. Windows began to appear on the screen with the inscription that you should not licensed Windows. It's all over reinstalling windows. Now I installed Doctor Web.

Let's now figure out which antivirus is better. In reality, there is no such thing as 100% protection. But each antivirus has its pros and cons. To be honest, Kaspersky has the best virus database, but its methods often lead to system freezes. And one more big disadvantage: all viruses are initially designed for Kaspersky. The main task of the virus is to destroy the antivirus program, and then quietly reproduce. So, by installing Kaspersky, there is a possibility that your antivirus will be broken. Also, when a virus gets onto a computer, it enters the antivirus database and deletes itself from the database. And the antivirus then does not recognize it as a virus.

As for Doctor Web, it allows viruses to enter your computer and allows infection system files and only then finds these infected files and disinfects them. But he has a very good program “Dr. Web CureIt" "Dr. Web CureIt” does not require installation and can be launched from any media. It has its own virus database. Simply by launching it from any media, you check the entire computer.

First you need to turn Windows into a fortress, the OS can be fine tuned and sent to smoke half of the malware!

Regular updates reduce the likelihood of your computer becoming infected.

Also, do a full scan of your computer once a week or more often, it all depends on how often you use the computer.

You also need to properly configure your antivirus software, no matter which one you use.

Of course, no antivirus can provide 100% security, because... There is a “human factor” - the rules of online behavior must always be followed.

There are a great variety of software products of this kind and their number continues to grow every year. Preparing this article, I have already weeded out the mediocre options and selected the four most famous antiviruses so that now, having studied their features in detail, I can find the best one.

Which antivirus is better - Kaspersky, Nod32, Avast, Dr. Web?

Degree of protection

The main criterion for selecting an antivirus is its ability to detect malware and then isolate or destroy it. Not every program copes with this task fully, but only shows false activity. What is the best antivirus for this component? Let's see:

1. Kaspersky is far ahead of all its competitors in terms of protection. Its mechanisms allow high speeds, in real time, block everything external threats even before they penetrate the computer. Even if malicious code archived, the antivirus will detect it and notify the user about it. Of course, for ample opportunities you will have to pay your price, but more on that later.
2. Nod32 contains all the tools you need to prevent it from getting into your computer. virus programs, and if they still manage to penetrate, it will be able to fight them thanks to the tools for deleting and disinfecting files. Unfortunately, everything is good only in words, but in reality there are enough security holes for some viruses to get through. Plus it's very annoying large number false positives protection for absolutely secure files(you have to constantly pull them out of quarantine and add them to exceptions).
3. Avast antivirus, as for free software, copes well with its tasks - it fights various kinds of threats, periodically scans the system and monitors operations with files and folders in real time, which makes it possible to quickly eliminate almost any threat. Even during the show screen saver Windows Avast is already starting to check for malicious code in the system.
4. Dr. Web great solution for those who want to protect their computer from unauthorized intrusion from the outside. The program successfully combats file viruses, Trojans, polymorphic viruses, spyware and a bunch of other unwanted guests. The operating mechanisms are designed in such a way that most of the currently known viruses are not able to interfere with the operation of the algorithm or bypass it.

Easy to install and configure

There should be no problems installing and configuring security software, because its priority is to start protecting your computer as soon as possible. And it’s best if you don’t need to long time mess around in the options.

There is nothing special to write about at this point and it is difficult to determine the best, since most antivirus programs have long since arrived at a certain unified working model. To install each product you only need to run executable file and follow the instructions provided. Activation paid versions occurs by entering a code and username, after which all functions will become available, including automatic update. To take full advantage of the opportunities free product, you will have to go through the registration procedure. All the reviewed antiviruses have all the main services enabled by default - real-time protection, scheduled scanning and others, without which it is impossible to guarantee the security of the system.

Since the appearance of the first operating rooms Windows systems issues related to protecting computers and networks from all kinds of virus threats, became very acute, since most known viruses (both then and today) are mainly designed to infect OSes developed by Microsoft. But what exactly should you choose to ensure security? Next, we will consider two main and competing Russian antivirus and let's try to find out which is better - Doctor Web or Kaspersky. Both developers have made their mark on the security software market quite a long time ago and are rightfully considered one of the leading ones in the world. However, the opinions of users and specialists regarding preferences or inclination to install any one software product are clearly divided. Let's try to compare some of them, taking into account such reviews.

Which is better - Kaspersky or Doctor Web? What to start from when comparing?

To begin with, each user must understand that both developers produce quite a lot of anti-virus software products designed for completely different situations. Among everything that can be found, the most popular are standard antiviruses installed directly in operating systems on local computers, servers or network terminals, portable programs, designed to neutralize threats on already infected computers, and special disk utilities, having their own bootloaders to start instead of starting the OS in order to destroy threats in cases where Windows does not load precisely due to a virus.

Let's briefly look at all three types of applications, as well as the quality comparative characteristics we will consider the issues of purchasing licensed software, the complexity of installation and use, the load on system resources and quality of security.

Comparison of Kaspersky and Doctor Web: issues of cost and installation

As for free standard software products, both developers have practically none.

The only exception is the latest modification of the free Kaspersky Anti-Virus (and even then it must be activated in a timely manner). Doctor Web has no trace of this. The first round is for Kaspersky. All portable programs and disk applications are truly free. But if you purchase legal versions official antiviruses, in fact, it turns out that Doctor Web software products cost home and corporate users almost half as much as similar developments from Kaspersky Lab. There's no arguing with that.

But from regular funds Which antivirus is better - Kaspersky or Doctor Web? Neither specialists nor users have a consensus on installing this type of software.

Some believe that installing Doctor Web is easier than installing Kaspersky, others are of the opposite opinion. However, if you approach it with an open mind, opinions about the complexity of the installation look clearly far-fetched. The only exceptions may be server versions, when it is necessary to configure antiviruses either on each network terminal or directly on the central server. These questions should be left system administrators, since the average user does not need such knowledge at all.

But Doctor Web can easily be installed to restore order to an already infected system, and problems with Kapersky in this regard are often observed.

Some differences in functionality

If we consider the regular ones protective equipment"Kaspersky" or "Doctor Web" in terms of the functionality embedded in them, a special difference can only be noticed in the details, since standard sets both developers have almost the same.

But what looks somewhat unusual about Kaspersky is the ability to connect to installed antivirus any other device with a similar product and control the protection system through personal account, located on the My Kaspersky portal. This is a clear plus. As for cross-platform use, both antiviruses are in equal positions (their versions can be found for almost all known operating systems, installed on both desktop PCs and mobile devices).

Response to viruses and suspicious threats

Now let's see which is better - Kaspersky or Doctor Web, if we're talking about about detecting threats and neutralizing them. It is tacitly believed that Kaspersky virus databases are the most complete. But one can argue with this. But in terms of scanning, some believe that Doctor Web clearly loses for the reason that it scans absolutely all files downloaded from the Internet, even if they do not pose a direct or perceived threat, which takes more time. Additionally, installed to scan your computer in background The default settings used in both programs also cause legitimate indignation among users when the scan starts at the most inopportune moment, which is why the programs begin to freeze, and system resources are fully used exclusively by antiviruses. However, this can only be said by those users who do not know how to set up a scheduled scan so that it occurs at those moments when the computer is in a state of inactivity.

Load on system resources

As for resource consumption, many people make an unambiguous conclusion about which is better - Kaspersky or Doctor Web.

For some reason, it is generally accepted that Kaspersky slows down the system incredibly, although the latest modifications (according to the developer’s statements) are no different. Apparently, this is due to an established stereotype that has existed since the release of the first antivirus products, when, with the standard antivirus from Kaspersky Lab installed, even on powerful computers it was impossible to work.

Portable and Disk Utilities

Naturally, among the Kaspersky and Doctor Web antiviruses there are also special treatment programs that do not require installation on hard drive computer or laptop (KVRT and Dr. Web CureIt! respectively). Both utilities are in almost equal positions in their capabilities, however, users who scan their system are often dissatisfied portable application from Doctor Web, is caused by the fact that it identifies many well-known optimizer programs or uninstallers as potentially unwanted software.

At the same time, it is believed that there is no way to disable treatment or removal for particularly critical cases, and after the scan is completed installed applications They completely refuse to work. In addition, Doctor Web does not respond to activators such as, for example, KMSAuto Net. On the one hand, this is good for the average user, on the other hand, this is the most illegal Windows activation. Kaspersky issues a warning about detection legal program activation, but reports that it may contain malicious code. Disk utilities are at approximately the same level, although again it is secretly believed that Rescue Kaspersky Disk detects and neutralizes threats of any type better than LiveDisk from Doctor Web.

Which antivirus should you prefer?

So which is better - Kaspersky or Doctor Web? Alas, it is impossible to give a definite answer to this question. Everything from both developers deserves all sorts of praise, and the choice in favor of one often depends on user preferences or even a pre-formed stereotype. That is why you are given the right to make your own choice and install exactly the one software product, which you consider necessary and most effective.