New VIRUS.GR virus report! Best on the net!


Recommended Posts

http://www.virus.gr/english/fullxml/default.asp?id=69&mnu=69

2-16 April 2005 (NEW!!!)

-The test was made on 02-16 April 2005, using Windows XP Professional SP1 on a P4 2600 Mhz, 512MB DDRAM.

-All programs tested had the latest versions, upgrades and updates and they were tested using their full scanning capabilities e.g. heuristics, full scan etc.

-The 91202 virus samples were chosen using VS2000 according to Kaspersky, F-Prot, RAV, Nod32, Dr.Web, Sweep, BitDefender and McAfee antivirus programs. Each virus sample was unique by virus name, meaning that AT LEAST 1 antivirus program detected it as a new virus.

-ALL virus samples were unpacked and the only samples that were kept were the ones that were packed using external-dos-packers (that means not winzip, winrar, winace etc).

-The virus samples had the correct file extension using a special program (Renexts) and were unique, according to checksum32 filesize.

-Most "fake" virus samples were removed, as well as "garbage" files.

-The program PER was not tested because there was no english demo version available.

-The programs Extendia AVK , BOClean , VET , Titan , RisingAV and Freedom were not tested because there was no demo version available.

-The program InVircible did not include a "typical" scanner-function and could not be tested.

-The program V-Catch checks only mail accounts and could not be tested.

-The following file types were used.

BAT, ΒΙΝ, CLA, CLASS, CLS, COM, CSC, DAT, DOC, ELF, EML, EXE, HLP, HQX, HTA, HTM, IMG, INF, INI, JS, MAC, MDB, MSG, OLE, PHP, PIF, PL, PPT, PRC, REG, SCR, SH, SHS, SMM, STI, TD0, TPU, VBA, VBS, WBT, XLS, XMI, XML.

The virus samples were divided into these categories, according to the type of the virus :

File = BeOS, FreeBSD, Linux, Palm, OS2, Unix, BinaryImage, BAS viruses, MenuetOS viruses.

MS-DOS = MS-DOS and HLL*. viruses.

Windows = Win.*.* viruses.

Macro = Macro and Formula viruses.

Malware = Adware, DoS, Constructors, Exploit, Flooders, Hoax, Jokes, Nukers, Sniffers, Spoofers, Virus Construction Tools, Virus Tools, Corrupted, Droppers, Intended, PolyEngines.

Script = BAT, Corel, HTML, Java, Scripts, VBS, WBS, Worms, PHP, Perl viruses.

Trojans-Backdoors = Trojan and Backdoor viruses.

Rank

1. Kaspersky Personal Pro version 5.0.20 - 99.28%

2. AVK version 15.0.5 - 97.93%

3. F-Secure 2005 version 5.10.450 - 97.55%

4. eScan Virus Control version 2.6.518.8 - 96.75%

5. Norton Corporate version 9.0.3.1000 - 91.64%

6. Norton Professional version 2005 - 91.57%

7. McAfee version 9.0.10 - 89.75%

8. Virus Chaser version 5.0 - 88.31%

9. BitDefender version 8.0.137 - 88.13%

10. CyberScrub version 1.0 - 87.87%

11. Panda Platinum 2005 version 9.01.02 - 87.75%

12. Arcavir - 87.73%

13. MKS_VIR 2005 - 87.70%

14. RAV version 8.6.105 - 87.26%

15. F-Prot version 3.16b - 87.07%

16. Panda Titanium version 4.01.02 - 86.27%

17. PC-Cillin 2005 version 12.1.1034 - 85.98%

18. Nod32 version 2.12.4 - 85.66%

19. Command version 4.92.7 - 84.92%

20. AntiVir version 6.30.00.17 - 84.50%

21. Avast version 4.6.623 - 76.65%

22. Dr. Web version 4.32b - 78.71%

23. Sophos Sweep version 3.91 - 73.79%

24. UNA version 1.83 - 73.49%

25. BullGuard version 4.5 - 70.24%

26. Norman version 5.80.05 - 65.32%

27. Ikarus version 5.16 - 60.97%

28. AVG version 7.0.308 - 54.07%

29. E-Trust version 7.0.5.3 - 52.35%

30. ZoneAlarm with VET Antivirus version 5.5.062.011 - 52.32%

31. Vexira 2005 version 5.0.56 - 51.74%

32. VirusBuster 2005 version 5.0.147 - 51.51%

33. Solo 3.0 version 2.7.1 - 49.16%

34. Fire version 2.7 - 48.86%

35. ClamWin version 0.83 - 48.44%

36. Digital Patrol version 5.00.08 - 48.10%

37. V-Buster Pro - 46.33%

38. Protector Plus version 7.2.G01 - 45.81%

39. V3Pro 2004 - 38.87%

40. Ewido version 3.0 - 38.67%

41. ViRobot Expert version 4.0 - 38.10%

42. Quick Heal version 7.03 - 37.75%

43. VirScan Plus version 14.703 - 36.20%

44. MR2S version 2.0.104 - 35.05%

45. RHBVS version 4.60.821 - 32.96%

46. A Squared 2 version 1.6 - 25.37%

47. VirIT version 5.2.10 - 22.83%

48. TDS version 3.2.0 - 21.09%

49. Wave version 2.0 - 16.49%

50. AntiTrojan Shield version 1.4.0.15 - 11.91%

51. PC Door Guard version 3.0.0.15- 11.91%

52. Trojan Hunter version 4.2.908 - 10.19%

53. Tauscan version 1.70.1414 - 6.99%

54. Trojan Remover version 6.3.6 - 6.67%

55. The Cleaner version 4.1.42.52 - 6.28%

56. IP Armor version 5.46.0703 - 2.77%

57. Hacker Eliminator version 1.2 - 2.67%

58. Anti-Hacker & Trojan Expert 2003 version 1.6 - 0%

DETAIL TEST RESULTS (.rar compressed file)

I just personally decided to try NOD32 this past week since so many people say they like it. It's nice, but it does *not* have the best detection rate ever. I tested it against a collection of virii and it missed many small-time viruses that competitors found.

http://www.wilderssecurity.com/showthread.php?t=77033

I wouldn't take much notice of these tests.

How comes at least two of the products that utilise the same engine are so wildly different in detection rate?

I have no doubt KAV is very likely to be one of the best AV products, but that is probably the only truth I can see in those tests. I'm not even going to ask why anti-trojan products are considered anti viral. :p

I just personally decided to try NOD32 this past week since so many people say they like it.  It's nice, but it does *not* have the best detection rate ever.  I tested it against a collection of virii and it missed many small-time viruses that competitors found.

585822593[/snapback]

Were they actual viruses, or test viruses? NOD32 does not detect fake viruses and WILL NOT detect them at all (this is by design) - that is why some reviews give it a bad score.

I would imagine the score for NOD32 is not great because of fake viruses (it only say "most" were removed) and/or not detecting adware.

Were they actual viruses, or test viruses? NOD32 does not detect fake viruses and WILL NOT detect them at all (this is by design) - that is why some reviews give it a bad score.

I would imagine the score for NOD32 is not great because of fake viruses (it only say "most" were removed) and/or not detecting adware.

585822659[/snapback]

They were actual viruses I collected "in the wild" so to speak. The heuristics engine detected a great number of them which is a plus, but when you put the complete misses together with the number of heuristics hits, it seemed clear that the actual detection database itself was rather lacking.

I think the reason that the detection database is less as if an AV supplier were to add every virus to its database, the intensity of the resource demands of the product would be extremelly high. It is usually up to those behind the product to choose the severity of the threats. With NOD32, I see the heuristics as the first line defence with rules aiding as a backup.

One interesting thing brought up in the Wilder's thread was if all of the AVs were licensed or trialed. I know with NOD, a lot of the default settings are insufficient. I am not even sure heuristics are enabled off-the-shelf. A lot of other products do have limited availability in trial/shareware items, for example: ewido paid can scan inside of archives while the free solution cannot.

I am not greatly surprised with the results, a lot of the test samples were malware/trojans, while IMO, it does usually take seperate products to provide greater protection in specialised areas (AVs for virus, ATs for trojans, etc). I would however, be interested in seeing the test categorised more so with anti-trojans being used solely on virus, solely on malware or a similar structured approach.

This topic is now closed to further replies.
  • Recently Browsing   0 members

    • No registered users viewing this page.
  • Posts

    • For some reason I suddenly have the urge to go shopping at Sears.
    • So I did a quick test based on 3+ different public instances from the litany at searx.space ... and it spins everything rather differently. It seems that SearXNG is a meta-search engine (queries multiple search indexes rather than only Google's or Bing's or Wikipedia's or Reddit's) that operates in two modes: > public instances ... each instance opens itself to outside users who piggyback on its cached search history; this instance's own identity becomes known/tracked but end-users are hidden similar to an anonymization proxy; this instance's querying of major search indexes may be API based [rated limited, blocked, etc.]). > private instances ... your private install/instance that itself queries multiple (configurable) search indexes of crawled web content; every major Search Engine associates all traffic to your private instance (so your traffic is tracked via network usages) but client-side tracking (your own browser/computer specs) is flushed because it's a "server" doing the querying rather than your browser. My test asked the same 1 question to the 3+ engines and they all returned vastly different results: some had CAPTCHA failures against Google, some had failures against Wikipedia, and the actual results were also different -- some had auto-complete enabled, others returned a wikipedia highlighted excerpt despite the Wikipedia failure (hinting at results being cached from previous keyword matching), and others just gave an Are-You-Human non-CAPTCHA loop before returning random results. So this begs the caveat: Search query results will vary based on which instance is used because every instance queries the other search indexes separate (and thus its results are influenced on that instance's aggregate search history and index-access limitations). The major distinctions for SearXNG versus DDG or Brave: > The search UI is 'untracked' since no UI trackers are baked-in which would phone home or lay cookies into your browser (for DDG/Brave usage stats), > There is no 'crawler' that canvasses the Internet to discover fresh content (it leaves that to the major search indexes), > Queries multiple search indexes ("meta-search engine") based on the configurations and usage history of the server instance, > Privacy-friendly due to its ability to shield user tracking via standing up a non-local server instance connectable to major VPN providers: queries would all appear to come from general VPN/Proxy providers rather than your private instance (whether installed locally or on your own VPS in the cloud). PS: I've previously come across specialized search engines of this nature that indexes searches across media assets like YT, OF, etc. SearXNG seems to be a good backbone...if the rate-limiting/captcha/etc. issues were resolved.
    • For a guy who claims to hate Farage and the ignorant, gullible, rightwing racist skinheads sponsored by Putin that his lies represent, you sure are quoting them time and time and time again, mate. I guess you're conveniently ignoring the fact that your country and commonwealth just happened to work much better when it was still part of the E.U.? Denial isn't just a river in Egypt.
    • Do you live in the U.K? Do any of the people here that are against the UK leaving the E.U, live in the U.K? If not then why are you bothered? If you do live here then it is a different thing . Brexit was a good idea, should have done it years before, it was done badly, but the idea was good. You are saying the same thing as remainers do, oh we did what Putin wanted, we listened to the lies and Farage. I hate Farage and never believed most of what he said, certainly did not believe the £350m a week for the NHS. But we did pay a lot of money to the E.U and yes some of it came back, but what is the point of paying it out for only some of it to come back? Get out of the E.U, no money to them and in theory we can use the money to do things in the country. I said in theory, but our governments are a total and complete waste of space. No matter what colour rosette they wear. You and others say it was a mistake and yet the two main parties in the U.K are not looking at rejoining the EU, I wonder why that is? I was not tricked by anyone. Makes no odds now, we are out and have been for 10 years, what we need is a decent government to run the country. All they do is shout at each other like a load of kids and seems to do nothing and make this country more into a police and nanny state. Getting more like China all the time.
    • 4TB TEAMGROUP MP44Q, 2TB T-Force G50, and 2TB WD My Passport SSDs drop to great prices by Fiza Ali Prime Day may be over, but there are still worthwhile storage deals available, including discounts on SSDs for shoppers who missed the event or are looking to upgrade their storage solution. Particularly, 2TB Western Digital My Passport, 2TB TEAMGROUP T-Force G50, and 4TB TEAMGROUP MP44Q SSD are selling at great prices with up to 23% off. The 2TB TEAMGROUP T-Force G50 is an M.2 2280 PCIe 4.0 x4 NVMe SSD with sequential read speeds of up to 5,000MB/s and sequential write speeds of up to 4,500MB/s. The drive has an endurance rating of 1,300 TBW (terabytes written) and features a DRAM-less design. The company specifies a mean time between failures (MTBF) of 3 million hours. The drive includes an "ultra-thin" graphene heat spreader that helps dissipate heat without significantly increasing the drive's thickness. It also supports S.M.A.R.T. monitoring, allowing compatible software to monitor drive health and operating status. The SSD is rated for operating temperatures from 0°C to 70°C, with a storage temperature range of -40°C to 85°C. The drive is backed by a five-year limited warranty as well. 2TB TEAMGROUP T-Force G50 SSD: $269.99 (Amazon US) The TEAMGROUP MP44Q is an M.2 2280 PCIe 4.0 x4 NVMe SSD that delivers sequential read speeds of up to 7,000MB/s and sequential write speeds of up to 5,900MB/s. It uses 3D QLC NAND flash memory to provide 4TB of storage capacity for games, applications, media files, and other data. The drive has an endurance rating of 2,000 TBW and an MTBF of 1.6 million hours. The SSD features a DRAM-less design and supports TEAMGROUP's S.M.A.R.T. monitoring software, allowing users to monitor drive health, temperature, and remaining lifespan. For thermal management, the MP44Q also includes an "ultra-thin" graphene heat spreader. It is designed to operate at temperatures between 0°C and 70°C and can be stored at temperatures ranging from -40°C to 85°C. The SSD is also backed by a five-year limited warranty. 4TB TEAMGROUP MP44Q SSD: $478.99 (Amazon US) The 2TB WD My Passport SSD connects via a USB-C port using the USB 3.2 Gen 2 interface. It delivers sequential read speeds of up to 1,050MB/s and sequential write speeds of up to 1,000MB/s through NVMe technology. In terms of security features, the drive includes password protection with 256-bit AES hardware encryption. The SSD is also designed to resist shock and vibration and is rated to withstand drops from heights of up to 6.5 feet. The recommended operating temperature range is 5°C to 35°C, while the non-operating temperature range is -20°C to 65°C. This drive is also backed by a five-year limited warranty. 2TB Western Digital My Passport SSD: $279.99 (Amazon US) Good to know This Amazon deal is U.S. specific, and not available in other regions unless specified. We only use first-party seller links (at the time of article publishing); ensure that you purchase from a first-party seller link only. Check out Today's Deals on Amazon | or our recent tech deals. Become a Prime member (for Students or SNAP) via Neowin Get Prime Access - Prime for half price (for qualifying Medicaid, EBT, SNAP) Subscribe to Prime Video, Audible Plus, Music Unlimited or Kindle Unlimited via Neowin As an Amazon Associate, we earn from qualifying purchases.
  • Recent Achievements

    • Week One Done
      flexorcist earned a badge
      Week One Done
    • One Month Later
      Woland13 earned a badge
      One Month Later
    • Week One Done
      Woland13 earned a badge
      Week One Done
    • One Year In
      bernmeister earned a badge
      One Year In
    • Week One Done
      Scoobystu earned a badge
      Week One Done
  • Popular Contributors

    1. 1
      +primortal
      491
    2. 2
      +Edouard
      225
    3. 3
      PsYcHoKiLLa
      147
    4. 4
      Steven P.
      74
    5. 5
      FloatingFatMan
      71
  • Tell a friend

    Love Neowin? Tell a friend!