Jump to content
Sign in to follow this  
Bruceleeon

Anti Virus Software Tested

Recommended Posts

2008-06, 1-21 June

Submitted by virusp on Mon, 06/23/2008 - 18:54.

The test was made on 01-21 June 2008, using Windows XP Professional SP2 on a P4 3200 Mhz, 2048MB DDRAM.

All programs tested had the latest versions, upgrades and updates and they were tested using their full scanning capabilities e.g. heuristics, full scan etc.

The default settings of each program were not used, in order for each program to achieve its maximum detection rate. Because of this, there is a possibility for the tested programs to detect a few false positives.

All programs were updated on 31 May 2008, between 09.00AM and 12.00PM GMT.

The 246705 virus samples were chosen using VS2000 according to Kaspersky, F-Prot, Nod32, Dr.Web, BitDefender and McAfee antivirus programs. Each virus sample was unique by virus name, meaning that AT LEAST 1 antivirus program detected it as a new virus.

MS-DOS based virus samples were not used.

ALL virus samples were unpacked and the only samples that were kept were the ones that were packed using external-dos-packers (that means not winzip, winrar, winace etc).

The virus samples had the correct file extension using a special program (Renexts) and were unique, according to checksum32 filesize.

Most "fake" virus samples were removed, as well as "garbage" files.

The program PER was not tested because there was no english demo version available.

The programs Command and Extendia AVK were not tested because there was no demo version available.

Thorough mode was not used in VBA32 due to extremely slow scan process.

The program A-Squared Anti-Malware is anti-trojan/anti-spyware program, not antivirus program.

The program F-Prot was tested using its command line scanner (options fpscan j:\avtest\trobo /adware /applications /output=fpscan_report.log /streams /maxdepth=4 /heurlevel=4) because its GUI kept crashing.

The programs Kingsoft and ZondexGuard were not tested because they could not be updated.

The programs Windows Live OneCare , BKAV and MoonSecureAV kept crashing while scanning the samples.

The program Avira uses the exact same engine as AntiVir.

The program Fire uses the exact same engine as Solo.

The program MKS_VIR uses the exact same engine as ArcaVir.

The program Vexira uses the exact same engine as VirusBuster.

The program BullGuard uses the exact same engine as BitDefender free edition.

The program Avast Professional uses the exact same engine as Avast free edition.

The program AVG Anti-Malware uses the exact same engine as AVG Antivirus free edition.

The program A-squared Anti-Malware Professional uses the exact same engine as A-squared free edition.

InVircible did not include a "typical" scanner-function and could not be tested.

V-Catch checks only mail accounts and could not be tested.

DOS-Based scanners were not tested.

The following file types were used.

SH, ELF, COM, EXE, PL, BAT, PRC, DOC, XLS, BIN, MDB, IMG, PPT, VBS, MSG, VBA, OLE, HTM, INI, SMM, TD0, REG, CLASS, HTA, JS, VI_, URL, PHP, WMF, HLP, XML, SCR, PIF, SHS, WBT, CSC, MAC, DAT, CLS, STI, INF, HQX, XMI, SIT.

The virus samples were divided into these categories, according to the type of the virus :

File = BeOS, FreeBSD, Linux, Mac, Palm, OS2, Unix, BinaryImage, BAS viruses, MenuetOS.

Windows = Win.*.* viruses.

Macro = Macro, Multi and Formula viruses.

Malware = Adware, DoS, Constructors, Exploit, Flooders, Nukers, Sniffers, SpamTools, Spoofers, Virus Construction Tools, Droppers, PolyEngines, Rootkits, Packed.

Script = ABAP, BAT, Corel, HTML, Java, Scripts, MSH, VBS, WBS, Worms, PHP, Perl, Ruby, Python, WHS, TSQL, ASP, SAP, QNX, Matlab viruses.

Trojans-Backdoors = Trojan and Backdoor viruses.

Rank

1. G DATA 2008 version 18.2.7310.844 - 99.05%

2. F-Secure 2008 version 8.00.103 - 98.75%

3. TrustPort version 2.8.0.1835 - 98.06%

4. Kaspersky version 8.0.0.357 - 97.95%

5. eScan version 9.0.742.1 - 97.44%

6. The Shield 2008 - 97.43%

7. AntiVir version 8.1.00.331 Premium - 97.13%

8. Ashampoo version 1.61 - 97.09%

9. Ikarus version 1.0.82 - 96.05%

10. AntiVir version 8.1.00.295 Classic - 95.54%

11. AVG version 8.0.100 Free - 94.85%

12. BitDefender 2008 version 11.0.16 - 94.70%

13. Avast version 4.8.1201 Professional - 93.78%

14. Nod32 version 3.0.650.0 - 93.36%

15. F-Prot version 6.0.9.1 - 91.87%

16. BitDefender version 10 Free - 91.32%

17. ArcaVir 2008 - 88.65%

18. Norman version 5.92.08 - 87.72%

19. Vba32 version 3.12.6.6 - 87.21%

20. McAfee Enterpise version 8.5.0i - 86.57%

21. McAfee version 12.0.177 - 86.39%

22. Rising AV version 20.46.52 - 85.87%

23. Norton 2008 - 83.34%

24. Dr. Web version 4.44.5 - 82.87%

25. Antiy Ghostbusters version 5.2.3 - 80.23%

26. VirusBuster version 5.002.62 - 77.19%

27. Outpost version 6.0.2294.253.0490 - 75.35%

28. V3 Internet Security version 2008.05.31.00 - 75.23%

29. ViRobot Expert version 5.5 - 74.50%

30. Virus Chaser version 5.0a - 73.65%

31. A-squared Anti-Malware version 3.5 - 71.66%

32. PC Tools version 4.0.0.26 - 69.82%

33. Trend Micro Antivirus+Antispyware 2008 version 16.10.1079 - 67.28%

34. Iolo version 4.325 - 63.98%

34. Panda 2008 version 3.01.00 - 61.41%

36. Sophos Sweep version 7.3.2 - 54.71%

37. ClamWin version 0.93 - 54.68%

38. CA Anti-Virus version 9.00.170 - 51.08%

39. Quick Heal version 9.50 - 47.97%

40. Comodo version 2.0.17.58 - 43.15%

41. Trojan Hunter version 5.0.962 - 31.39%

42. Solo version 7.0 - 21.10%

43. Protector Plus version 8.0.C03 - 20.14%

44. PCClear version 1.0.8.0 - 19.63%

45. AntiTrojan Shield version 2.1.0.14 - 14.74%

46. Trojan Remover version 6.6.9 - 13.49%

47. VirIT version 6.2.94 - 8.63%

48. True Sword version 4.2 - 3.42%

49. Abacre έκδοση version 1.4 - 0.00%

Share this post


Link to post
Share on other sites
Guest
You are commenting as a guest. If you have an account, please sign in.
Reply to this topic...

×   Pasted as rich text.   Paste as plain text instead

  Only 75 emoji are allowed.

×   Your link has been automatically embedded.   Display as a link instead

×   Your previous content has been restored.   Clear editor

×   You cannot paste images directly. Upload or insert images from URL.

Loading...
Sign in to follow this  

×