The test was made on 23-30 April 2007, using Windows XP Professional SP2 on a P4 3000 Mhz, 1024MB DDRAM.
All programs tested had the latest versions, upgrades and updates and they were tested using their full scanning capabilities e.g. heuristics, full scan etc.
The default settings of each program were not used, in order for each program to achieve its maximum detection rate. Because of this, there is a possibility for the tested programs to detect a few false positives.
All programs were updated on 22 April 2007, between 10.00AM and 13.00PM GMT.
The 174770 virus samples were chosen using VS2000 according to Kaspersky, F-Prot, Nod32, Dr.Web, BitDefender and McAfee antivirus programs. Each virus sample was unique by virus name, meaning that AT LEAST 1 antivirus program detected it as a new virus.
ALL virus samples were unpacked and the only samples that were kept were the ones that were packed using external-dos-packers (that means not winzip, winrar, winace etc).
The virus samples had the correct file extension using a special program (Renexts) and were unique, according to checksum32 filesize.
Most "fake" virus samples were removed, as well as "garbage" files.
The programs MKS_VIR , PER and IPArmor were not tested because there was no english demo version available.
The programs WinAntivirus , Anti-Hacker Expert , Command , Extendia AVK , GDATA AVK , BOClean , UNA , VET and Freedom were not tested because there was no demo version available.
Thorough mode was not used in VBA32 due to extremely slow scan process.
F-Prot was tested using its command line scanner (options /adware /applications /report /streams /maxdepth=4 /heurlevel=4) because its GUI kept crashing.
TheShield uses the exact same engine as VirobotExpert.
Avira uses the exact same engine as AntiVir.
Fire uses the exact same engine as Solo.
MKS_VIR uses the exact same engine as ArcaVir.
BullGuard uses the exact same engine as BitDefender free edition.
Avast Professional uses the exact same engine as Avast free edition.
AVG Anti-Malware Professional uses the exact same engine as AVG Anti-Malware free edition.
A-squared Anti-Malware Professional uses the exact same engine as A-squared free edition.
VirusBuster uses the exact same engine as Vexira.
InVircible did not include a "typical" scanner-function and could not be tested.
V-Catch checks only mail accounts and could not be tested.
Windows Live OneCare, BKAV, PC Tools kept crashing while scanning the samples.
DOS-Based scanners were not tested.
The following file types were used.
SH, ELF, COM, EXE, PL, BAT, PRC, DOC, XLS, BIN, MDB, IMG, PPT, VBS, MSG, VBA, OLE, HTM, INI, SMM, TD0, REG, CLASS, HTA, JS, VI_, URL, PHP, WMF, HLP, XML, SCR, PIF, SHS, WBT, CSC, MAC, DAT, CLS, STI, INF, HQX, XMI, SIT.
The virus samples were divided into these categories, according to the type of the virus : File = BeOS, FreeBSD, Linux, Mac, Palm, OS2, Unix, BinaryImage, BAS viruses, MenuetOS.
MS-DOS = MS-DOS viruses.
Windows = Win.*.* viruses.
Macro = Macro, Multi and Formula viruses.
Malware = Adware, DoS, Constructors, Exploit, Flooders, Nukers, Sniffers, SpamTools, Spoofers, Virus Construction Tools, Droppers, PolyEngines.
Script = ABAP, BAT, Corel, HTML, Java, Scripts, MSH, VBS, WBS, Worms, PHP, Perl, Ruby viruses.
Trojans-Backdoors = Trojan and Backdoor viruses.
Rank
1. Kaspersky version 7.0.0.43 beta - 99.23%
2. Kaspersky version 6.0.2.614 - 99.13%
3. Active Virus Shield by AOL version 6.0.0.308 - 99.13%
4. ZoneAlarm with KAV Antivirus version 7.0.337.000 - 99.13%
5. F-Secure 2007 version 7.01.128 - 98.56%
6. BitDefender Professional version 10 - 97.70%
7. BullGuard version 7.0.0.23 - 96.59%
8. Ashampoo version 1.30 - 95.80%
9. eScan version 8.0.671.1 - 94.43%
10. Nod32 version 2.70.32 - 94.00%
11. CyberScrub version 1.0 - 93.27%
12. Avast Professional version 4.7.986 - 92.82%
13. AVG Anti-Malware Professional version 7.5.465 - 92.14%
14. F-Prot version 6.0.6.4 - 91.35%
15. McAfee Enterprise version 8.5.0i+AntiSpyware module - 90.65%
16. Panda 2007 version 2.01.00 - 90.06%
17. Norman version 5.90.37 - 88.47%
18. ArcaVir 2007 - 88.24%
19. McAfee version 11.0.213 - 86.13%
20. Norton Professional 2007 - 86.08%
21. Rising AV version 19.19.42 - 85.46%22. Dr. Web version 4.33.2 - 85.09%
23. PC-Cillin 2007 version 15.00.1450 - 84.96%
24. Iolo version 1.1.8 - 83.35%
25. Virus Chaser version 5.0a - 79.51%
26. VBA32 version 3.11.4 - 77.66%
27. Sophos Sweep version 6.5.1 - 69.79%
28. ViRobot Expert version 5.0 - 69.53%
29. Antiy Ghostbusters version 5.2.1 - 65.95%
30. Zondex Guard version 5.4.2 - 63.79%
31. Vexira 2006 version 5.002.62 - 60.07%
32. V3 Internet Security version 2007.04.21.00 - 55.09%
33. Comodo version 2.0.12.47 beta - 53.94%
34. Comodo version 1.1.0.3 - 53.39%
35. Ikarus version 5.19 - 50.56%
36. ClamWin version 0.90.1 - 47.95%
37. Quick Heal version 9.00 - 38.64%
38. Solo version 5.1 build 5.7.3 - 34.52%
39. Protector Plus version 8.0.A02 - 33.13%
40. PcClear version 1.0.4.3 - 27.14%
41. VirIT version 6.1.75 - 18.78%
42. E-Trust PestPatrol version 8.0.0.6 - 11.80%
43. True Sword version 4.2 - 2.20%
44. Abacre version 1.4 - 0.00%
45. A-Squared Anti-Malware version 2.1 - 52.69%
46. Digital Patrol version 5.00.37 - 49.80%
47. AntiTrojan Shield version 2.1.0.14 - 20.25%
48. PC Door Guard version 4.2.0.35- 19.95%
49. Trojan Hunter version 4.6.930 - 19.20%
50. Trojan Remover version 6.6.0 - 10.44%
51. The Cleaner version 4.2.4319 - 7.26%
52. Hacker Eliminator version 1.2 - 1.43%
AntiVir Classic is still being tested (using the same updates of April 22nd) and will be included in the above list as soon as the test finishes. After that, the detailed results of the test will also be published.
瑞星排在21位
