23 April-10 May 2007
Submitted by virusp on Wed, 10/03/2007 - 17:31. The test was made on 23 April-10 May 2007, using Windows XP Professional SP2 on a P4 3000 Mhz, 1024MB DDRAM.
All programs tested had the latest versions, upgrades and updates and they were tested using their full scanning capabilities e.g. heuristics, full scan etc.
The default settings of each program were not used, in order for each program to achieve its maximum detection rate. Because of this, there is a possibility for the tested programs to detect a few false positives.
All programs were updated on 22 April 2007, between 10.00AM and 13.00PM GMT.
The 174770 virus samples were chosen using VS2000 according to Kaspersky, F-Prot, Nod32, Dr.Web, BitDefender and McAfee antivirus programs. Each virus sample was unique by virus name, meaning that AT LEAST 1 antivirus program detected it as a new virus.
ALL virus samples were unpacked and the only samples that were kept were the ones that were packed using external-dos-packers (that means not winzip, winrar, winace etc).
The virus samples had the correct file extension using a special program (Renexts) and were unique, according to checksum32 filesize.
Most "fake" virus samples were removed, as well as "garbage" files.
The programs MKS_VIR , PER and IPArmor were not tested because there was no english demo version available.
The programs Anti-Hacker Expert , Command , Extendia AVK , GDATA AVK , BOClean , UNA , VET and Freedom were not tested because there was no demo version available.
Thorough mode was not used in VBA32 due to extremely slow scan process.
A-Squared Anti-Malware and eTrust PestPatrol are anti-trojan/anti-spyware programs, not antivirus programs
F-Prot was tested using its command line scanner (options /adware /applications /report /streams /maxdepth=4 /heurlevel=4) because its GUI kept crashing.
Windows Live OneCare, BKAV, PC Tools kept crashing while scanning the samples.
TheShield uses the exact same engine as VirobotExpert.
Avira uses the exact same engine as AntiVir.
Fire uses the exact same engine as Solo.
MKS_VIR uses the exact same engine as ArcaVir.
VirusBuster uses the exact same engine as Vexira.
BullGuard uses the exact same engine as BitDefender free edition.
Avast Professional uses the exact same engine as Avast free edition.
AVG Anti-Malware uses the exact same engine as AVG Antivirus free edition plus the Ewido scan engine, so it has better detection than AVG Antivirus free edition. (More information here
http://www.grisoft.com/doc/produ ... and-office/us/crp/0)
A-squared Anti-Malware Professional uses the exact same engine as A-squared free edition.
InVircible did not include a "typical" scanner-function and could not be tested.
V-Catch checks only mail accounts and could not be tested.
The following file types were used.
SH, ELF, COM, EXE, PL, BAT, PRC, DOC, XLS, BIN, MDB, IMG, PPT, VBS, MSG, VBA, OLE, HTM, INI, SMM, TD0, REG, CLASS, HTA, JS, VI_, URL, PHP, WMF, HLP, XML, SCR, PIF, SHS, WBT, CSC, MAC, DAT, CLS, STI, INF, HQX, XMI, SIT.
The virus samples were divided into these categories, according to the type of the virus :
File = BeOS, FreeBSD, Linux, Mac, Palm, OS2, Unix, BinaryImage, BAS viruses, MenuetOS.
MS-DOS = MS-DOS viruses.
Windows = Win.*.* viruses.
Macro = Macro, Multi and formula viruses.
Malware = Adware, DoS, Constructors, Exploit,
Flooders, Nukers, Sniffers, SpamTools, Spoofers, Virus Construction
Tools, Droppers, PolyEngines.
Script = ABAP, BAT, Corel, HTML, Java, Scripts, MSH, VBS, WBS, Worms, PHP, Perl, Ruby viruses.
Trojans-Backdoors = Trojan and Backdoor viruses.
Rank
1. Kaspersky version 7.0.0.43 beta - 99.23%
2. Kaspersky version 6.0.2.614 - 99.13%
3. Active Virus Shield by AOL version 6.0.0.308 - 99.13%
4. ZoneAlarm with KAV Antivirus version 7.0.337.000 - 99.13%
5. F-Secure 2007 version 7.01.128 - 98.56%
6. BitDefender Professional version 10 - 97.70%
7. BullGuard version 7.0.0.23 - 96.59%
8. Ashampoo version 1.30 - 95.80%
9. AntiVir version 7.03.01.53 Classic - 95.08%
10. eScan version 8.0.671.1 - 94.43%
11. Nod32 version 2.70.32 - 94.00%
12. CyberScrub version 1.0 - 93.27%
13. Avast Professional version 4.7.986 - 92.82%
14. AVG Anti-Malware version 7.5.465 - 92.14%
15. F-Prot version 6.0.6.4 - 91.35%
16. McAfee Enterprise version 8.5.0i+AntiSpyware module - 90.65%
17. Panda 2007 version 2.01.00 - 90.06%
18. Norman version 5.90.37 - 88.47%
19. ArcaVir 2007 - 88.24%
20. McAfee version 11.0.213 - 86.13%
21. Norton Professional 2007 - 86.08%
22. Rising AV version 19.19.42 - 85.46%
23. Dr. Web version 4.33.2 - 85.09%
24. Trend Micro Internet Security 2007 version 15.00.1450 - 84.96%
25. Iolo version 1.1.8 - 83.35%
26. Virus Chaser version 5.0a - 79.51%
27. VBA32 version 3.11.4 - 77.66%
28. Sophos Sweep version 6.5.1 - 69.79%
29. ViRobot Expert version 5.0 - 69.53%
30. Antiy Ghostbusters version 5.2.1 - 65.95%
31. Zondex Guard version 5.4.2 - 63.79%
32. Vexira 2006 version 5.002.62 - 60.07%
33. V3 Internet Security version 2007.04.21.00 - 55.09%
34. Comodo version 2.0.12.47 beta - 53.94%
35. Comodo version 1.1.0.3 - 53.39%
36. A-Squared Anti-Malware version 2.1 - 52.69%
37. Ikarus version 5.19 - 50.56%
38. Digital Patrol version 5.00.37 - 49.80%
39. ClamWin version 0.90.1 - 47.95%
40. Quick Heal version 9.00 - 38.64%
41. Solo version 5.1 build 5.7.3 - 34.52%
42. Protector Plus version 8.0.A02 - 33.13%
43. PcClear version 1.0.4.3 - 27.14%
44. AntiTrojan Shield version 2.1.0.14 - 20.25%
45. PC Door Guard version 4.2.0.35 - 19.95%
46. Trojan Hunter version 4.6.930 - 19.20%
47. VirIT version 6.1.75 - 18.78%
48. E-Trust PestPatrol version 8.0.0.6 - 11.80%
49. Trojan Remover version 6.6.0 - 10.44%
50. The Cleaner version 4.2.4319 - 7.26%
51. True Sword version 4.2 - 2.20%
52. Hacker Eliminator version 1.2 - 1.43%
53. Abacre version 1.4 - 0.00%
