Testing Panda Cloud Anti-virus 1.1

Last night I tested the latest version of Panda’s Cloud Anti-virus. Why? I’m on the hunt for an effective free anti-virus that doesn’t use too much ram (about 25 mb tops) and doesn’t have “in your face” nag screens. Panda’s Cloud Anti-virus fits those 2 requirements, but can it really protect my clients? Yes and no.

During my testing I can see that Panda’s Cloud AV (v1.1) is able to tackle more of those zero-day threats, however it let a nasty rootkit through (see screen shots below). While that’s distressing, I can see that the free version of the Panda Cloud AV scanner is getting much better and you’ll probably be seeing more of it in the media.



, , ,

  • Johan

    Good review as usual Matt!

    I will probably buy the Pro version when my ESS license ends.

  • Kinar

    nice review!

  • croatian sensation

    @Matt

    Thank you for finally doing a final review of the product, im glad u thought better of it as well. Also, doesnt the 64 bits nowadays not get rootkits anyways?

    Croatian

  • jay

    i think comodo uses about that and also should test the latest version 4.1

  • Anthony

    Great review

  • Martin

    A tiny suggestion for future videos. I know you don’t use very advanced methods for finding about if your VM has been infected and this isn’t supposed to tell you otherwise, I enjoy your videos nonetheless.

    -What you could do to find if new processes are running: Get Process Explorer from Sysinternals, get the “Select Columns” switch over to “Process Performance” and enable “Start Time”. Sort the columns afterwards. Much easier to spot new nasty stuff.

    -Easily detect changes made by malware with Regshot (http://sourceforge.net/projects/regshot/). Make a snapshot before you start testing and whenever you like run the second. Should be helpful – and it’s quick.

    • malwarekilla

      @Martin – excellent idea, thanks Martin!

  • Erik

    Do you plan to replace mse with Panda Cloud Anti-virus?

    • malwarekilla

      @Erik – Only on boxes with 512 MB of ram or less.

  • OtakuWrath

    I was wondering if you ever did a review on Malwarebytes registered version? i know you often use Malwarebytes and for a good reason… i tried the registered version and i feel it works really good.. so good in fact i deleted my AV because it was just wasted space..

    Have you ever used Rkill?

    Also i just want to thank you, I used to stress out trying to clean my Family’s computers. Thanks to your help i tossed on Sandboxie, Firefox with WOT and Malwarebytes and they haven’t gotten any rogues :)

    • malwarekilla

      @OtakuWrath – if they want to send me a key, then sure.

  • Matt Stevenson

    Matt, I loved this review, but although not knowing much about Panda and it’s previous history and versions, I thought it didn’t really stand up to what it says it does. I thought 80% wasn’t so good, but GREAT REVIEW! I also was wondering how bad are Rogue Software to your business, because i’m developing a great rogue removal tool, and I was wondering if you would be willing to review it? Please contact me, thanks!

  • Steve

    Matt,

    Enjoyed your Panda review as always. Regarding a light AV, have you considered ThreatFire by itself? I put it on a friend’s 256MB XP machine and seems to work well.

    Regards,
    Steve

  • Johan

    @Croatian sensation!

    I thought Matt said in the Video that the test system was a 32-Bit version of Windows 7. Meaning the Rootkit had no problems getting in.

  • Manab Choudhury

    Hi matt,
    Its been a long time since you did reviews on MBAM and SAS,can you do a couple of reviews on the latest versions of those two?

  • 927

    i use avast 5 on my parents pc, xp home 512 mb ram without any slowdown but its important to clean up msconfig/autostart. thats the best way way to free ram (and dont use adobe reader).
    very common apps thats runs on windows startup *junk*
    [TkBellExe] “c:\program files\common files\real\update_ob\realsched.exe” -osboot
    mRun: [Adobe Reader Speed Launcher] “c:\program files\adobe\reader 9.0\reader\Reader_sl.exe”
    [QuickTime Task] “c:\program files\quicktime\qttask.exe” -atboottime

  • Erik

    @malwarekilla – Maybe you should tell clients with 512 MBs of ram or less to just get a mac and that would fix all there problems…haha.(:

  • croatian sensation

    @Johan

    You might be right, i was kinda sleepy while watching the video, i might have missed that.

    Croatian

  • Johan

    @croatian sensation!

    No Problems Mate :)

  • Adam

    @ Martin

    I was going to recommend that as well. One more thing it does, is highlights new processes in Green and processes that just ended in Red. So when you run a piece of maware just look for a green line, then you know a new process just started on the virtual machine.

  • JimBob

    Matt,
    Just curious how you think MS Security Essentials is anything but lightweight? I use it on client computers with low RAM, *because* it’s so light on RAM. My test computer is running MS Sec. Ess. and it’s using a tiny 4MB of RAM. The most I’ve ever seen it use is about 50MB…which is still tiny.

  • OtakuWrath

    @JimBob

    Well i can say with experience, it seemed to suck up my CPU like it was candy.. my computer was always working really hard.. i put it on my aunts computer and she reported a decrease in performance.. with Firefox taking 70% of my CPU i can’t really use Firefox along with my other heavy duty programs. MSE was bad enough that i started to keep it turned off until i wanted to run a scan.. i eventually got rid of it.. pretty good AV, but it was heavy duty and system scans would make my CPU skyrocket.

    (just thought i would share my experience with it.)

  • JimBob

    @OtakuWrath

    That’s odd…my experience with MSE has been just the opposite. In fact, on my personal PC, it’s dropped since my last post from 4MB to 2MB of memory being used. As far as CPU, it’s using a whopping ZERO%.

  • Tweak

    On the subject of Panda Cloud, taking a page from your book Matt I found the same results with exe exploits getting snagged but a few others slip through the cracks, hopeful that improves in the next release though. I also notice it slow some things like when you click the Windows orb and it takes a few seconds to populate the listings, it is apparently a known issue according to their forums with Win7. As for MSE, it seems to be luck of the draw, I do see it more often being lightweight but on the rare PC I have seen it cause severe slowdowns, nothing obvious stands out but it does happen often enough to be easily recalled when I think back on different systems. Overall thanks Matt and thanks Panda, I look forward to the progression of this app and others like it such as Immunet Protect to name one example.

  • Tweak

    Since Immunet Protect is similar I just wanted to drop a line here to say the next version 2.x is due out probably within the next 2 weeks or so and I’d like to see/hear your opinion on it Matt, it isn’t intended to be a stand-alone solution but the next version will have multiple engines and offer cloud and real-time protection. As a side note I as others have mentioned would love to see HitMan offer a real-time protection as well someday.
    You can checkout the next version with some screenies here for any interested. http://community.immunet.com/immunet/topics/immunet_version_2_rc1

  • http://infocarnivore.com Daniel Snyder

    Great review, thanks. I’m relatively new to Panda products, and I’ve been quite impressed and what I see. I posted your video to my blog with a link to your site! thanx.

  • C C

    @ OtakuWrath

    I am in the Malware Hunters Group at Malwarebytes and you should install an AV product on your PC. Malwarebytes is a great tool but does not replace an AV product. Malwarebytes Anti-Malware does not detect java exploits or pdf’s exploits, etc. The module does block malware URL’s in the paid version but this is still not an meant to be an AV replacement. You could be putting your PC at risk by not running an AV,

  • Frank

    I’m curious about Matt’s comment regarding MSE as well. I’m running it and it’s using around 800K (yes, that’s kilobyte).

  • C C

    End of Support for Windows XP SP2, Windows 2000 Server and Professional on July 13, 2010
    Support (including new security updates) ends July 13, 2010 for Windows XP Service Pack 2 (SP2), Windows 2000 Server and Professional. Migration to the latest OS or installation of the current service pack is recommended.

  • Dan

    @ JimBob

    Have you seen that MSE uses 2 processes..

    1. AntiMalware Service Executable (MsMpEng.exe), and that around 80mb of ram.

    2. Microsoft Security Essentials User Interface (msseces.exe),and thats around 4-8 mb of ram..

    So, i think that you havent seen the MsMpEng.exe, when you say that its only uses ~2-4mb of ram

  • JimBob

    @Dan

    Yeah, you’re right…that second service doesn’t show by default in Vista or Win7. Either way, the second service is using Zero CPU and about 35MB of memory on my Windows 7 computer, and 42MB on my XP computer, and 40MB on my Vista computer… That’s still really, really small.

  • Nevi

    Hi Matt..
    Thanks for the vid.Something could look like they have started to take it serious.Soon it will probably be better than MSE.I wouldnt be surpriced.

  • LR

    Matt, will you be reviewing Immunet Cloud AV ? It is no longer in beta and can be run at the same time as your regular AV (i.e. Avira, Avast, Norton, etc)

  • LR

    Matt, will you be reviewing Immunet Cloud AV ? It is no longer in beta and can be run at the same time as your regular AV (i.e. Avira, Avast, Norton, etc)

  • Trinidad318

    Just wanna say you guys are awesome,I’m a+ certified,but it’s hard to learn when you don’t know anyone who loves this stuff too.so thank you guys for the ineresting conversations,I owe u all.

    • malwarekilla

      @Trinidad31 – thanks!