http://www.virus.gr/english/fullxml/default.asp?id=72&mnu=72The test was made on 14-22 December 2005, using Windows XP Professional SP1 on a P4 2800 Mhz, 512MB DDRAM.
All programs tested had the latest versions, upgrades and updates and they were tested using their full scanning capabilities e.g. heuristics, full scan etc. The default settings of each program were not used, in order for each program to achieve its maximum detection rate. Because of this, there is a possibility for the tested programs to detect a few false positives.
The 113334 virus samples were chosen using VS2000 according to Kaspersky, F-Prot, Nod32, Dr.Web and McAfee antivirus programs. Each virus sample was unique by virus name, meaning that AT LEAST 1 antivirus program detected it as a new virus.
ALL virus samples were unpacked and the only samples that were kept were the ones that were packed using external-dos-packers (that means not winzip, winrar, winace etc).
The virus samples had the correct file extension using a special program (Renexts) and were unique, according to checksum32 filesize.
Most of the virus samples used were not previously replicated at the time the test was made, which means that some of them, although probably only a few, may be false positives. The procedure of testing each and every virus sample is still under process.
The program PER was not tested because there was no english demo version available.
The programs WinAntivirus , Anti-Hacker Expert , Command , Extendia AVK , BOClean , VET , Titan , RisingAV , Ikarus and Freedom were not tested because there was no demo version available.
Thourough mode was not used in VBA32 due to extremely slow scan process.
Advanced heuristics were not used in Tauscan due to extremely slow scan process.
VirusBuster uses the exact same engine as Vexira.
TheShield uses the exact same engine as VirobotExpert.
AntiVir uses the exact same engine as Avira.
MKS_VIR uses the exact same engine as ArcaVir.
The program InVircible did not include a "typical" scanner-function and could not be tested.
The program V-Catch checks only mail accounts and could not be tested.
DOS-Based scanners were not tested.
The following file types were used.
EXE, ELF, SH, COM, VBS, SIT, BAT, DOC, XLS, MDB, BIN, VBA, OLE, PPT, CLS, SMM, HTM, CLASS, JS, VI_, HTA, INI, PL, HLP, PHP, TPU, SCR, IMG, TD0, PRC, PIF, XML, REG, SHS, MAC, CSC, INF.
The virus samples were divided into these categories, according to the type of the virus :
File = BeOS, FreeBSD, Linux, Mac, Palm, OS2, Unix, BinaryImage, BAS viruses, MenuetOS.
MS-DOS = MS-DOS viruses.
Windows = Win.*.* viruses.
Macro = Macro, Multi and Formula viruses.
Malware = Adware, DoS, Constructors, Exploit, Flooders, Nukers, Sniffers, SpamTools, Spoofers, Virus Construction Tools, Droppers, PolyEngines.
Script = ABAP, BAT, Corel, HTML, Java, Scripts, MSH, VBS, WBS, Worms, PHP, Perl, Ruby viruses.
Trojans-Backdoors = Trojan and Backdoor viruses.
Rank
1. Kaspersky Personal Pro version 5.0.390- 99.46%
Kaspersky 2006 beta version 6.0.15.222- 99.46%
2. F-Secure 2006 version 6.10.330 - 96.92%
3. CyberScrub version 1.0 - 96.62%
4. eScan Virus Control version 2.6.522.9 - 95.21%
5. McAfee version 10.0.27 - 94.80%
6. BitDefender version 9 - 90.75%
7. Nod32 version 2.50.41 - 88.79%
8. AntiVir version 6.32.00.51 - 86.55%
9. MKS_VIR 2005 - 86.16%
10. Norton Professional version 2006 - 85.17%
11. F-Prot version 3.16d - 84.96%
12. Dr. Web version 4.33 - 84.68%
13. Panda Titanium 2006 version 5.01.00 - 82.02%
14. Virus Chaser version 5.0a - 79.37%
15. AVG version 7.1.371 - 77.97%
16. PC-Cillin 2006 version 14.00.1341 - 77.84%
17. Avast version 4.6.744 - 76.93%
18. BullGuard version 6 - 74.02%
19. UNA version 1.83 - 69.83%
20. Norman version 5.83.07 - 69.13%
21. Sophos Sweep version 3.99 - 67.76%
22. VBA32 version 3.10.5 - 63.36%
23. Zondex Guard version 5.3.3 - 56.81%
24. Vexira 2005 version 5.001.32 - 51.62%
25. ClamWin version 0.87.1 - 48.45%
26. E-Trust version 7.0.6.7 - 47.84%
27. ZoneAlarm with VET Antivirus έκδοση 6.1.737.000 - 47.70%
28. Digital Patrol version 5.00.08 - 47.02%
29. Ewido version 3.5 - 46.31%
30. V3Pro 2004 - 44.16%
31. Solo 4.0 version 3.1.0 - 42.45%
32. Fire version 2.7 - 38.38%
33. Protector Plus version 7.2.H01 - 38.06%
34. A Squared Personal version 1.6 - 35.31%
35. Quick Heal version 8.00 - 33.76%
36. ViRobot Expert version 4.0 - 32.37%
37. AntiTrojan Shield version 2.1.0.14 - 26.45%
38. PC Door Guard version 4.2.0.35- 26.05%
39. Trojan Hunter version 4.2.908 - 11.53%
40. VirIT version 5.2.53 - 10.33%
41. Tauscan version 1.70.1414 - 7.21%
42. Trojan Remover version 6.4.4 - 7.19%
43. The Cleaner version 4.1.42.52 - 5.97%
44. CounterSpy version 1.5.82 - 5.87%
45. SpySweeper version 4.5.7.642 - 2.99%
46. IP Armor version 5.46.0703 - 2.46%
47. Hacker Eliminator version 1.2 - 1.77%
48. Spyware Doctor version 3.2.2.453 - 1.55%
49. Abacre 1.3 - 0.00%
50. SpyHunter 2.0 - 0.00%
