AV Testing

chubalz said:

Its really funny.

Avast Free compared to Paid Norton Internet Security

Did you try Avast Internet Security? I mean did you try sandbox?

I do hope norton has sandbox?

100% of your system is safe using sandbox even new malware.

AV's cant detect new malwares it need to update your AV's right?

Sandbox dont need to update. Even latest malware cant harm your system.

If Norton has sandbox then i would agree norton is the safest AV's or Internet Security of all.

The testing I conducted has nothing to do with firewalls or sandbox's. It is AV testing.

Today I scanned 1 infected flash drive using Avast and Vipre AV>
While Avast managed to catch just 2 infections, Vipre caught 4 infections.




Vipre also blocked 5-6 files from automatically opening while Avast didn't notify about any infection.
I still dont mean that Vipre is better than Avast or vice-versa. All I want to say is that no AV is 100% perfect.

OK, so some interesting results last night. Finished up pretty late so posting the results this morning. Included in the test (I ran out of time for any others) were:

1. Avast Free 5
2. ClamWin
3. G Data
4. Immunet Protect
5. Kaspersky
6. Norman
7. Norton AntiVirus 2010
8. Panda AntiVirus Pro

All latest versions I could download, all allowed to update any required information (program and signatures) and all set to default out-of-the-box settings. All tested in shadow mode using Shadow Defender and all done on Windows 7 64-bit.

Used 25 malware links that were found that day (some consider these zero day threats, while others may say one day threats). Included in those were rogues, bots, droppers, etc. No real focus on any one thing. Just lots of nasties, including a rogue AV called PC Defender. Not really sure how nasty it was, but it got by everyone except for one.

Stopped/Reported means just that, the AV reported there was a threat and it had been stopped or dealt with. No Reported Threat means the AV didn't say anything and it appeared the threat got through. How dangerous the threat was is anyone's guess. MBAM Infections Found means that once the test was over, Malwareybytes Antimalware was loaded, updated and ran (just a simple quick scan) and the # of infections found was reported.

Results (Worst to Best):

8. ClamWin

Stopped/Reported: 0
No Reported Threat: 25
MBAM Infections Found: 45

Overall: 0%

7. Immunet Protect

Stopped/Reported: 5
No Reported Threat: 20
MBAM Infections Found: 35

Overall: 20%

6. Norman

Stopped/Reported: 5
No Reported Threat: 20
MBAM Infections Found: 33

Overall: 20%

5. Panda AntiVirus Pro

Stopped/Reported: 12
No Reported Threat: 13
MBAM Infections Found: 35

Overall: 48%

4. Norton AntiVirus 2010

Stopped/Reported: 13
No Reported Threat: 12
MBAM Infections Found: 22

Overall: 52%

3. Avast

Stopped/Reported: 16
No Reported Threat: 9
MBAM Infections Found: 27

Overall: 64%

2. G Data

Stopped/Reported: 18
No Reported Threat: 7
MBAM Infections Found: 22

Overall: 72%

1. Kaspersky

Stopped/Reported: 20
No Reported Threat: 5
MBAM Infections Found: 2

Overall: 80%

So there you have it. Avast finally not perfect anymore and neither is Kaspersky, although Kaspersky did an excellent job and was the ONLY one to not allow the rogue AV PC Defender to get in and start displaying pop-ups and tray alerts. Kaspersky also had a note that a reboot was required, so it might have even removed the other two upon a reboot, but I could not reboot to see while running in shadow mode. I think it would be fair to almost give Kaspersky an honorary 100%.

Couple of other side notes. G Data was a huge download, and was the only one that required a reboot after install as well as a reboot after updating. What a pain. It did really well though, although it did also give me a prompt when downloading and installing MBAM (looked like some sort of HIPS prompt), so I'm not sure if it was prompting for just about everything, or it truly was doing as well as it did.

Also, I had to go on the hunt for something to uninstall Panda because it immediately displayed an error when I tried to uninstall it. That was also a pain. Even a reinstall and another uninstall would not work. It's great if the AV does not require a reboot after installing because all of it can be done in shadow mode, allowing me to simply reboot and move on the the next test, although I installed Panda by accident not in shadow mode, thus the trouble.

So again, not saying one is any better than the other and these tests are not professional or scientific by any means, but more links used this time. So take from this test what you will.

Apparently it was an assumption on my part that AV software actually acts as AV software and has realtime protection, but nope, ClamWin does not, so I guess we can ignore the results of ClamWin. Wow, what a waste of time. From their site: Please note that ClamWin Free Antivirus does not include an on-access real-time scanner. You need to manually scan a file in order to detect a virus or spyware

Hi, how is G Data according to you?