2005 ANTIVIRUS vs 2026 MALWARE!

Overview

A tech comparison video tests whether an “old-school” antivirus can still stop malware in a “modern” test setup—specifically Norton Antivirus 2005 (installed on Windows XP) versus malware samples.

Test setup & malware sources

The test uses two malware folders:

• “New”: 6 recent samples (claimed to be from “malware bizarre”), with hashes available for checking.
• “Classic”: older threats including Desktop Security 2010, NovaShield, JPS Virus Maker, Croton, and a CryptoLocker variant.

The “classic” threats are included to see how Norton 2005 performs against malware from its era (and near that timeframe).

Norton 2005 installation & update behavior

• Norton 2005 installs successfully on a fully updated Windows XP system.
• During setup:
  • It requests restart(s).
  • It grants a 90-day subscription.
  • The initial UI reports virus protection is out of date, with definitions dated Aug 11, 2004.
• The presenter verifies that LiveUpdate still connects to liveupdate.symantec…, and claims the website still exists—implying updates can be pulled.

How Norton 2005 detects threats (signature vs. heuristic)

The video contrasts older AV approaches with modern ones:

• Norton 2005 is shown as relying more on file signatures (or signature-like threat knowledge).
• The presenter notes that modern AV tends to be more behavioral, using process/network/activity-based detection.

In Norton’s settings, the presenter enables higher protection features, including early “behavioral” style options:

• AutoProtect / smart scanning
• Script blocking and scanning options
• “Bloodhound” heuristics, set to maximum in the demo

Scanning results against “new” malware samples

• A scan finds nothing.
• Later scans are also reported to have no meaningful detections.
• The “new” malware samples are then executed. The presenter observes dropped files/configs for at least one sample, but Norton still does not meaningfully detect or stop the activity.

Scanning results against “classic” malware

Even with max Bloodhound heuristics enabled, Norton does not reliably detect the “classic” threats:

• The presenter creates/executes a “virus” using JPS Virus Maker that disables Command Prompt.
  • Norton does not prevent the effect (“worked without Norton doing anything”).
• Some classic malware is run:
  • Croton runs.
  • CryptoLocker does not appear to behave as expected in this environment.
• The ransomware-style test is not successful in a way Norton could detect.

Overall, the main takeaway is Norton’s inability to stop these threats.

Behavioral failures during the “classic malware” run

Once the presenter starts running the “classic” rogues/malware:

• Desktop Security 2010 produces alarms such as:
  • “system making an unauthorized personal data transfer”
  • warnings about serious compromise, including bizarre claims like potentially wiping the BIOS chip
• NavaShield appears:
  • “license has expired”
  • warnings about disconnecting from the internet
  • then it appears to vanish/disappear after attempts
• Rogue browser alerts:
  • Internet Explorer repeatedly attempts to open suspicious pages
  • UI restrictions make it harder to close tabs/windows
• The presenter describes a “triple threat” feeling:
  • Norton not stopping the malware, and
  • multiple rogue security products actively interfering

Final conclusion

The video’s answer to the core question is effectively:

Norton Antivirus 2005 cannot handle malware—even malware close to its timeline.

Norton is shown scanning tens of thousands of files (the presenter mentions ~54,655) and reporting no/insignificant detections, while visible malicious side effects and rogue security popups occur.

Main speakers / sources

• Main speaker: The video’s single presenter (no other named speakers).
• Malware sample source referenced: “malwarebizarre” (for the “new” samples).
• Brands/products demonstrated: Norton Antivirus 2005, plus malware/rogues resembling Desktop Security 2010 and NovaShield.