Antivirus protection worse than a year ago
The effectiveness of antivirus software has fallen off, and more and more pests can now slip past these barriers. This is the sobering conclusion the german computer magazine c't comes to in issue 1/08 with a test on 17 antivirus solutions.
Context & Ripple Effects
The c't finding lands on top of a deteriorating record that security reporting has been tracking for over a year: InfoWorld noted in December 2006 that malware quality was dropping while quantity rose, and in March 2007 the BBC reported that Windows failed a second independent virus test. What changed with this story is the scope of evidence — rather than a single product or platform failing, a 17-solution comparison finds the whole category's effectiveness falling against a year earlier.
That breadth matters because it shifts the question from 'which vendor is weak' to whether signature-based detection itself is keeping pace with the volume of new pests described in the 2006 reporting.
First-order effects
- Buyers of the 17 tested products face measurably weaker protection than they got a year ago, with more malware slipping past their installed defenses.
- Antivirus vendors collectively take a credibility hit: a mainstream German magazine's comparative test, not a single lab result, is now documenting declining catch rates across the field.
Second-order effects
- Vendors are pushed toward non-signature techniques — heuristics and behavioral detection — to close the gap the test exposes, since incremental signature updates demonstrably are not holding the line.
- Enterprises and home users have reason to layer additional controls (firewalls, patching discipline, alternative scanners) rather than treat any single antivirus product as sufficient, pressuring the 'one suite = safe' sales pitch.
Third-order effects
- If detection rates keep sliding as malware volume grows, the standalone antivirus subscription model comes under structural pressure, with security value migrating toward OS-level and multi-layer defenses rather than third-party signature databases.
The trend: Signature-based antivirus is losing its arms race against industrialized malware production, pushing endpoint security toward layered and behavioral approaches.