Testing the on-demand detection of different AV with old malwares.

[sujay]

So you completely turned off the real time scanners for this?

Yes hell, except for Immunet case, whose detection was tested based on its detection during extraction of an archive containing the malwares.

---------- Post added at 11:46 PM ---------- Previous post was at 11:39 PM ----------

K7 and eScan are added.

---------- Post added 07-18-2010 at 12:50 AM ---------- Previous post was 07-17-2010 at 11:46 PM ----------

Added Dr.Web..

[ceyfer]

I'm also disappointed with the results of SAS and MBAM. Too bad for these users favorite.

Not that really bad my friend. General new malware detections and disinfection is the real priority of the said tools. Now if you have an AV ( realtime ) with you, it brings more confidence plus your safe computing routine and policy.

The focus of this test is only static and malware samples are quite outdated. Comparing a simple AM tool to a full AV application is unfair on my own point of view. Detection patterns ( unique signatures) of most AV are in the millions, while simple AM scanners just 200k up ( estimate my varies from vendors to vendors ). A good brand / security in scanner in theory should detect all malwares, but the technology is not yet there and it won't come to soon.

Just consider this test as an evidence that all scanners are prone to missed-detection issue.

[sujay]

Just consider this test as an evidence that all scanners are prone to missed-detection issue.

That's it.. well said Ceyfer...

[acr]

Very nice test sujay. I would like to make a couple suggestions since you indicate you are ok with testing less popular scanners for now. How about a test using Comodo av (it's supposed to be improved), also there is the AVZ tool that is a free scanner used by Kaspersky. If you choose not to test it then that's understandable- google translate page- http://translate.google.com/translat...%3Den%26sa%3DG . There is also Trend Micro Titanium that is in beta here- https://www.trendbeta.com/pages/product_info/view/594 and either Spyware Doctor with av from google pack or the free av from PC Tools site- http://pack.google.com/intl/en/learn_more_frameset.html http://www.pctools.com/free-antivirus/ and finally the MSE with its new scanning engine. Atually would be cool to see the difference between old engine and new. In order of preference I would say they are as follows-

1. Comodo
2. MSE new engine
3. MSE new engine vs old
4. Trend Micro Titanium beta
5. PC Tools Spyware Dr w/ av from Google Pack
6. PC Tools free av
7. AVZ tool

I understand these are just suggestions and you may just pick one or none or all. Anyway, nice work.

[INDRANIL]

Nice job sujay . If you can then test these 2 also Rising Antivirus & Clamwin.

[luffy]

Can you do a test for Avast free?

[sujay]

@acr: Thanks and nice suggestion. I am infect decided to try PC Tools, Comodo, Trend Titanium. btw, AVZ toolkit, isn't that signature independant?
@Indranil: I have already tested clamwin, will publish the results soon. Rising will come soon.
@luffy: sure.

[Nicks]

gr8 job Sujay....
MBAM is better dan SAS.....but i find SAS is better dan MBAM in detection rate..and Scanning Speed....
But in d Second test dey Both Failed....3% detection....
Sujay...could u pls test Avast free (as most of dem Requested above) & Comodo Av....
Once Again thanks for d test....

[sujay]

Digital Defender and Clam Cloud added. Clam cloud showed different detections compared to Immunet.

---------- Post added at 04:33 PM ---------- Previous post was at 02:41 PM ----------

Added Norman....

[lunaticcranck]

Can you Add Hitman PRO to test?