On The Rocks

• The test was made on 23 April-10 May 2007, using Windows XP Professional SP2 on a P4 3000 Mhz, 1024MB DDRAM.
• All programs tested had the latest versions, upgrades and updates and they were tested using their full scanning capabilities e.g. heuristics, full scan etc.
• The default settings of each program were not used, in order for each program to achieve its maximum detection rate. Because of this, there is a possibility for the tested programs to detect a few false positives.
• All programs were updated on 22 April 2007, between 10.00AM and 13.00PM GMT.
• The 174770 virus samples were chosen using VS2000 according to Kaspersky, F-Prot, Nod32, Dr.Web, BitDefender and McAfee antivirus programs. Each virus sample was unique by virus name, meaning that AT LEAST 1 antivirus program detected it as a new virus.
• ALL virus samples were unpacked and the only samples that were kept were the ones that were packed using external-dos-packers (that means not winzip, winrar, winace etc).
• The virus samples had the correct file extension using a special program (Renexts) and were unique, according to checksum32 filesize.
• Most “fake” virus samples were removed, as well as “garbage” files.
• The programs MKS_VIR , PER and IPArmor were not tested because there was no english demo version available.
• The programs Anti-Hacker Expert , Command , Extendia AVK , GDATA AVK , BOClean , UNA , VET and Freedom were not tested because there was no demo version available.
• Thorough mode was not used in VBA32 due to extremely slow scan process.
• A-Squared Anti-Malware and eTrust PestPatrol are anti-trojan/anti-spyware programs, not antivirus programs
• F-Prot was tested using its command line scanner (options /adware /applications /report /streams /maxdepth=4 /heurlevel=4) because its GUI kept crashing.
• Windows Live OneCare, BKAV, PC Tools kept crashing while scanning the samples.
• TheShield uses the exact same engine as VirobotExpert.
• Avira uses the exact same engine as AntiVir.
• Fire uses the exact same engine as Solo.
• MKS_VIR uses the exact same engine as ArcaVir.
• VirusBuster uses the exact same engine as Vexira.
• BullGuard uses the exact same engine as BitDefender free edition.
• Avast Professional uses the exact same engine as Avast free edition.
• AVG Anti-Malware uses the exact same engine as AVG Antivirus free edition plus the Ewido scan engine, so it has better detection than AVG Antivirus free edition. (More information here http://www.grisoft.com/doc/products-comparison-home-and-office/us/crp/0)
• A-squared Anti-Malware Professional uses the exact same engine as A-squared free edition.
• InVircible did not include a “typical” scanner-function and could not be tested.
• V-Catch checks only mail accounts and could not be tested.
• DOS-Based scanners were not tested.
• The following file types were used.
• SH, ELF, COM, EXE, PL, BAT, PRC, DOC, XLS, BIN, MDB, IMG, PPT, VBS, MSG, VBA, OLE, HTM, INI, SMM, TD0, REG, CLASS, HTA, JS, VI_, URL, PHP, WMF, HLP, XML, SCR, PIF, SHS, WBT, CSC, MAC, DAT, CLS, STI, INF, HQX, XMI, SIT.
• The virus samples were divided into these categories, according to the type of the virus :
• File = BeOS, FreeBSD, Linux, Mac, Palm, OS2, Unix, BinaryImage, BAS viruses, MenuetOS.
• MS-DOS = MS-DOS viruses.
• Windows = Win.*.* viruses.
• Macro = Macro, Multi and Formula viruses.
• Malware = Adware, DoS, Constructors, Exploit, Flooders, Nukers, Sniffers, SpamTools, Spoofers, Virus Construction Tools, Droppers, PolyEngines.
• Script = ABAP, BAT, Corel, HTML, Java, Scripts, MSH, VBS, WBS, Worms, PHP, Perl, Ruby viruses.
• Trojans-Backdoors = Trojan and Backdoor viruses.

Rank

1. Kaspersky version 7.0.0.43 beta - 99.23%

2. Kaspersky version 6.0.2.614 - 99.13%

3. Active Virus Shield by AOL version 6.0.0.308 - 99.13%

4. ZoneAlarm with KAV Antivirus version 7.0.337.000 - 99.13%

5. F-Secure 2007 version 7.01.128 - 98.56%

6. BitDefender Professional version 10 - 97.70%

7. BullGuard version 7.0.0.23 - 96.59%

8. Ashampoo version 1.30 - 95.80%

9. AntiVir version 7.03.01.53 Classic - 95.08%

10. eScan version 8.0.671.1 - 94.43%

11. Nod32 version 2.70.32 - 94.00%

12. CyberScrub version 1.0 - 93.27%

13. Avast Professional version 4.7.986 - 92.82%

14. AVG Anti-Malware version 7.5.465 - 92.14%

15. F-Prot έκδοση 6.0.6.4 - 91.35%

16. McAfee Enterprise version 8.5.0i+AntiSpyware module - 90.65%

17. Panda 2007 version 2.01.00 - 90.06%

18. Norman version 5.90.37 - 88.47%

19. ArcaVir 2007 - 88.24%

20. McAfee version 11.0.213 - 86.13%

21. Norton Professional 2007 - 86.08%

22. Rising AV version 19.19.42 - 85.46%

23. Dr. Web version 4.33.2 - 85.09%

24. Trend Micro Internet Security 2007 version 15.00.1450 - 84.96%

25. Iolo version 1.1.8 - 83.35%

26. Virus Chaser version 5.0a - 79.51%

27. VBA32 version 3.11.4 - 77.66%

28. Sophos Sweep version 6.5.1 - 69.79%

29. ViRobot Expert version 5.0 - 69.53%

30. Antiy Ghostbusters version 5.2.1 - 65.95%

31. Zondex Guard version 5.4.2 - 63.79%

32. Vexira 2006 version 5.002.62 - 60.07%

33. V3 Internet Security version 2007.04.21.00 - 55.09%

34. Comodo version 2.0.12.47 beta - 53.94%

35. Comodo version 1.1.0.3 - 53.39%

36. A-Squared Anti-Malware version 2.1 - 52.69%

37. Ikarus version 5.19 - 50.56%

38. Digital Patrol version 5.00.37 - 49.80%

39. ClamWin version 0.90.1 - 47.95%

40. Quick Heal version 9.00 - 38.64%

41. Solo version 5.1 build 5.7.3 - 34.52%

42. Protector Plus version 8.0.A02 - 33.13%

43. PcClear version 1.0.4.3 - 27.14%

44. AntiTrojan Shield version 2.1.0.14 - 20.25%

45. PC Door Guard version 4.2.0.35- 19.95%

46. Trojan Hunter version 4.6.930 - 19.20%

47. VirIT version 6.1.75 - 18.78%

48. E-Trust PestPatrol version 8.0.0.6 - 11.80%

49. Trojan Remover version 6.6.0 - 10.44%

50. The Cleaner version 4.2.4319 - 7.26%

51. True Sword version 4.2 - 2.20%

52. Hacker Eliminator version 1.2 - 1.43%

53. Abacre version 1.4 - 0.00%

Link to New Antivirus Rankings&Kaspersky Still on Top - CyberNet News