Miyuki's Antivirus Software Test

[Miyuki]

Just some antivirus testing by myself, and using some of the malware links that I found in the internet.

Rather than reading those reviews made by some sites...I decided to try the antivirus software myself since...it's hard to believe if you didn't even try it yourself. And probably some of those "review comments" were being "paid" anyway...so, yeah.

Anyhow, the antivirus software I tested are those freeware andtivirus such as AVG, Avira and as well commercial antivirus software such as Kaspersky, Norton Antivirus.

I've tested them using virtualization software, and not on a real machine. And it's not advisable to do the real test on your own actualy machine, unless you've other pc to play on.

This is purely tested on my own, and not some copies from other website. probably there's some other antivirus software I missed out, but you can suggest me to try on it, and I'll try to test them.

This might helps on those members who kinda confused or not sure which antivirus to try/buy.

Well...actually I was..bored, so why don't I just try them up ;x

Setup:

Host PC

- AMD Phenom X4 2.3Ghz
- 2GB RAM
- Windows 7 64 bit
- Sun VirtualBox

Virtualization environment setup:

- Intel/AMD Compatible running on only 1 core.
- AMD-V, Nested Paging enabled.
- Windows XP Pro SP 3, fully updated.
- 512MB of RAM
- Resizeable HDD space.

Tools I used:

- Sun VirtualBox - VirtualBox
- BootRacer to measure the boot-up to desktop time. - BootRacer - Test your Windows boot speed

Free Antivirus

- AVG 9.0 Free Antivirus
- Avast
- Avira
- Comodo Internet Security [AV only]
- MS Security Essential
- PCTools Antivirus
- Panda CloudAntivirus
- Rising Antivirus

Commercial Antivirus

- ESET NOD32 Antivirus
- Kaspersky Antivirus 2010
- McAfee VirusScan
- Norton Antivirus 2010
- TrendMicro Antivirus + Spyware

The Malware

- Trojan-Clicker.Win32.Liah
- Trojan.Win32.Sasfis.uoo
- HTML/Infected.WebPage.Gen
- Web exploits
- Web exploits
- Trojan-GameThief.Win32.OnLineGames.vuez
- Trojan.Win32.Refroso.qng
- RogueAV
- Trojan-Downloader.Win32.CodecPack.kgo
- RogueAntiSpyware
- Website exploits, spyware/trojan [rootkit]
- W32.Downloader

Please take note, I tested this inside virtualization [VirtualBox], it's like a sandbox where you can just deletes/reverts to original state once you've finishes your work.

Also, the bootup time might be vary to different computers.

[Miyuki]

AVG 9 Free Antivirus
Website: AVG Antivirus and Security Software - Real-time protection against viruses, spyware and malicious websites
Download link: Download AVG Free Edition 9.0.707 - FileHippo.com

Setup

- Standard installations
- Full update

Before Install [Clean Install, applies to others as well]
Bootup to desktop:
32 seconds

After Install
Bootup to desktop, ready to use:
58 seconds

Memory usage:
27MB

Malware test count: 12
Detected: 6
Not detected: 6

Detected Malware:

- Trojan-Clicker.Win32.Liah [Detected]
- Trojan.Win32.Sasfis.uoo [Not Detected]
- HTML/Infected.WebPage.Gen [Detected]
- Web exploits [Detected]
- Web exploits [Detected]
- Trojan-GameThief.Win32.OnLineGames.vuez [Partially detected, doesn't prevent malware being installed, winsock/svchost corrupted]
- Trojan.Win32.Refroso.qng [Detected]
- RogueAV [Detected]
- Trojan-Downloader.Win32.CodecPack.kgo [Not Detected]
- RogueAntiSpyware [Not Detected]
- Website exploits, spyware/trojan [rootkit] [Not Detected]
- W32.Downloader [Not Detected]

Conclusion:

Decent antivirus software, decent detection rate as well. Antivirus toolbar act as linkscanner as well, but some people might find the addon toolbar+yahoo kinda annoying.

[Miyuki]

Avast! Antivirus Free
Website: avast! - Download antivirus software for spyware and virus protection
Download Link: Download FREE antivirus software - avast! Home Edition

Setup

- Standard installations
- Full update

Before Install [Clean Install, applies to others as well]
Bootup to desktop:
32 seconds

After Install
Bootup to desktop, ready to use:
1 minute 6 seconds

Memory usage:
98MB

Malware test count: 12
Detected: 9
Not detected: 3

Detected Malware:

- Trojan-Clicker.Win32.Liah [Detected]
- Trojan.Win32.Sasfis.uoo [Not Detected]
- HTML/Infected.WebPage.Gen [Not Detected]
- Web exploits [Detected]
- Web exploits [Detected]
- Trojan-GameThief.Win32.OnLineGames.vuez [Detected]
- Trojan.Win32.Refroso.qng [Detected]
- RogueAV [Detected]
- Trojan-Downloader.Win32.CodecPack.kgo [Detected]
- RogueRegistryCleaner [Not Detected]
- Website exploits, spyware/trojan [rootkit] [Detected]
- W32.Downloader [Detected]

Conclusion:

Fast detection rate, can block drive-by downloads so user won't accidentally download the wrong/malware files, also able to block web exploit websites as well. User can register for the free key via their website, slightly higher memory usage due to it's web scanner, hopefully it will be improved on their next version [still in beta atm]. The user interface might not be that fancy, and might annoys some users, but they can replace it with custom skin, next version should have better skin than this one. Recommended antivirus software for most of the users that wanted free and yet better protection, if can put aside the memory usage for the webscanner feature.

[Miyuki]

Avira Free Antivirus
Website: Anti virus for Linux, Windows and more with firewall, antispam, recovery security - Avira AntiVir
Download Link: Free antivirus - Avira AntiVir

Setup

- Standard installations
- Full update

Before Install [Clean Install, applies to others as well]
Bootup to desktop:
32 seconds

After Install
Bootup to desktop, ready to use:
1 minute 2 seconds

Memory usage:
17MB

Malware test count: 12
Detected: 8
Not detected: 4 [doesn't have web-scan feature in free version]

The Malware

- Trojan-Clicker.Win32.Liah [Detected]
- Trojan.Win32.Sasfis.uoo [Not Detected]
- HTML/Infected.WebPage.Gen [Detected]
- Web exploits [Not Detected]
- Web exploits [Not Detected]
- Trojan-GameThief.Win32.OnLineGames.vuez [Detected]
- Trojan.Win32.Refroso.qng [Detected]
- RogueAV [Detected]
- Trojan-Downloader.Win32.CodecPack.kgo [Not Detected]
- RogueRegistryCleaner [Detected]
- Website exploits, spyware/trojan [rootkit] [Detected]
- W32.Downloader [Detected]

Conclusion:

Pretty fast detection rate and heuristic detection, prevented users from installing rogue software. It's recommended for those who need antivirus protection yet it's free. Although the downside for the free version that it doesn't have web scanning, so probably users will be exposed to some web exploit sites. Also, users might get annoyed by the nag screen that asks you to buy paid version, and also sometime the update server is unavailable.

[Miyuki]

COMODO Internet Security [Antivirus Only]
Website: AntiVirus and SSL Certificates - Internet Security Software | Comodo
Download Link: AntiVirus Download Comodo Free Anti Virus Software Internet Security

Setup

- Standard installations
- Full update

Before Install [Clean Install, applies to others as well]
Bootup to desktop:
32 seconds

After Install
Bootup to desktop, ready to use:
1 minute 9 seconds

Memory usage:
26MB

Malware test count: 12
Detected: 5
Not detected: 7

The Malware

Unavailable atm, I forgot to record/mark it ._. ...will test it more afterward

Conclusion:

Hopsurf bar, as other typical linkscanner bar alike, and added some search engine as well..tho normally user will opt-out from installing it.
Strong detection and Defense+ feature as well, but lacking in Threatcast function and confusing users on what should it do...but isn't antivirus supposed to ...delete the malware automatically instead of asking users to allow it or block it? The notification screens and pop-ups will make some users confused, whether it's a malware or trusted software. Only for advanced/pro users, and not recommended for newbie computer users.

[Miyuki]

Microsoft Security Essentials
Website: http://www.microsoft.com/Security_Essentials/
Download Link: http://www.microsoft.com/Security_Essentials/

Setup

- Standard installations
- Full update

Before Install [Clean Install, applies to others as well]
Bootup to desktop:
32 seconds

After Install
Bootup to desktop, ready to use:
53 seconds

Memory usage:
8MB

Malware test count: 12
Detected: 3
Not detected: 9

The Malware

- Trojan-Clicker.Win32.Liah [Detected]
- Trojan.Win32.Sasfis.uoo [Not Detected]
- HTML/Infected.WebPage.Gen [Detected]
- Web exploits [Not Detected]
- Web exploits [Not Detected]
- Trojan-GameThief.Win32.OnLineGames.vuez [Detected]
- Trojan.Win32.Refroso.qng [Not Detected]
- RogueAV [Not Detected]
- Trojan-Downloader.Win32.CodecPack.kgo [Not Detected]
- RogueRegistryCleaner [Not Detected]
- Website exploits, spyware/trojan [rootkit] [Not Detected]
- W32.Downloader [Not Detected]

Conclusion:

Fine detection rate, although doesn't prevent rogue software from being installed and also lack of web exploit protection. Probably they need to improve on these field for time being. Also, this antivirus from Microsoft only installs on Genuine Microsoft Windows, with passed Windows Genuine Validation.

[Miyuki]

PC Tools Antivirus
Website: PC Tools AntiVirus - Free Anti Virus Download and Removal
Download Link: Download PC Tools AntiVirus - Free Software for Windows XP and Vista

Setup

- Standard installations
- Full update

Before Install [Clean Install, applies to others as well]
Bootup to desktop:
32 seconds

After Install
Bootup to desktop, ready to use:
1 minute 6 seconds

Memory usage:
8MB

Malware test count: 12
Detected: 1
Not detected: 11

The Malware

- Trojan-Clicker.Win32.Liah Detected
- Trojan.Win32.Sasfis.uoo [Not Detected]
- HTML/Infected.WebPage.Gen [Not Detected]
- Web exploits [Not Detected]
- Web exploits [Not Detected]
- Trojan-GameThief.Win32.OnLineGames.vuez [Not Detected]
- Trojan.Win32.Refroso.qng [Not Detected]
- RogueAV [Not Detected]
- Trojan-Downloader.Win32.CodecPack.kgo [Not Detected]
- RogueRegistryCleaner [Not Detected]
- Website exploits, spyware/trojan [rootkit] [Not Detected]
- W32.Downloader [Not Detected]

Conclusion:

Failed to protect the system, can't prevent user from accidentally installs the malware. Totally poor detection and heuristic detection as well. Not recommended and avoid from using this antivirus.

[Miyuki]

Panda CloudAntivirus
Website: Panda Cloud Antivirus, The first free cloud antivirus against viruses, spyware, rootkits and adware
Download Link: Panda Cloud Antivirus Free Edition - Reviews and free Panda Cloud Antivirus Free Edition downloads at Download.com

Setup

- Standard installations
- Full update

Before Install [Clean Install, applies to others as well]
Bootup to desktop:
32 seconds

After Install
Bootup to desktop, ready to use:
45 seconds

Memory usage:
33MB

Malware test count: 12
Detected: 7
Not detected: 5

The Malware

Forgot to check on this part too ._. ...will test afterward

Conclusion:

Good detection. Users MUST signup for the cloudantivirus account, basic-easy-to-navigate UI and doesn't protect users from some web exploit.

[Miyuki]

Rising Antivirus Free
Website: RISING FREE Antivirus - Anti-Virus,Worms,Trojans,Spywares,Adwares
Download Link: Rising Antivirus 2009 Free Edition - Free software downloads and software reviews - CNET Download.com

Setup

- Standard installations
- Full update

Before Install [Clean Install, applies to others as well]
Bootup to desktop:
32 seconds

After Install
Bootup to desktop, ready to use:
52 seconds

Memory usage:
31MB

Malware test count: 12
Detected: 2
Not detected: 10

The Malware

- Trojan-Clicker.Win32.Liah Detected
- Trojan.Win32.Sasfis.uoo Detected
- HTML/Infected.WebPage.Gen Not detected
- Web exploits Not detected
- Web exploits Not detected
- Trojan-GameThief.Win32.OnLineGames.vuez Not detected
- Trojan.Win32.Refroso.qng Not detected
- RogueAV Not detected
- Trojan-Downloader.Win32.CodecPack.kgo Not detected
- RogueRegistryCleaner Not detected
- Website exploits, spyware/trojan [rootkit] Not detected
- W32.Downloader Not detected

Conclusion:

Decent detection rate, but it's late to protect the user. There's a logo of bear...lion...or was it tiger on the Windows Logon/Shutdown screen [ok, it's a lion, the website says so]. Installer is outdated, and user have to update it [via update function] to the latest version, so user might be exposed if they didn't update the antivirus before using the computer. There's some confusing file naming, for an example "RavMonD.exe" would leads to LoveGate virus when you google it, but actually it's a part of the antivirus itself. Doesn't protect windows files system from being modified, and totally slow detection rate, where it detects the malware after already being installed. Not recommended.

[Miyuki]

ESET NOD32
Website: ESET - Antivirus Software with Spyware and Malware Protection
Download Link: Free Antivirus Download from ESET

Setup

- Standard installations
- Full update

Before Install [Clean Install, applies to others as well]
Bootup to desktop:
32 seconds

After Install
Bootup to desktop, ready to use:
1 minute 28 seconds

Memory usage:
49MB

Malware test count: 12
Detected: 4
Not detected: 8

The Malware

- Trojan-Clicker.Win32.Liah Detected
- Trojan.Win32.Sasfis.uoo Detected
- HTML/Infected.WebPage.Gen Detected
- Web exploits Not detected
- Web exploits Not detected
- Trojan-GameThief.Win32.OnLineGames.vuez Detected
- Trojan.Win32.Refroso.qng Not detected
- RogueAV Not detected
- Trojan-Downloader.Win32.CodecPack.kgo Not detected
- RogueRegistryCleaner Not detected
- Website exploits, spyware/trojan [rootkit] Not detected
- W32.Downloader Not detected

Conclusion:

Now it's kinda surprising results, it perform poorer than AVG Free Antivirus, doesn't block drive-by downloads and rogue software installations.

[Miyuki]

Kaspersky Antivirus 2010
Website: Home Computer Security - Kaspersky Lab United States
Download Link: Kaspersky Anti Virus 2010 Free Trial

Setup

- Standard installations
- Full update

Before Install [Clean Install, applies to others as well]
Bootup to desktop:
32 seconds

After Install
Bootup to desktop, ready to use:
1 minute 16 seconds

Memory usage:
18MB

Malware test count: 12
Detected: 10
Not detected: 2

The Malware

- Trojan-Clicker.Win32.Liah Detected
- Trojan.Win32.Sasfis.uoo Detected
- HTML/Infected.WebPage.Gen Detected
- Web exploits Detected
- Web exploits Not detected
- Trojan-GameThief.Win32.OnLineGames.vuez Detected
- Trojan.Win32.Refroso.qng Detected
- RogueAV Detected
- Trojan-Downloader.Win32.CodecPack.kgo Detected
- RogueRegistryCleaner Not detected
- Website exploits, spyware/trojan [rootkit] Detected
- W32.Downloader Detected

Conclusion:

Big brother of the security industry, ask anyone they'll surely recommends Kaspersky to you. Fast detection rate and able to block drive-by malware. Kaspersky update process might take sometime, I hope that will be fixed. Additional Security+ module will analyzes your current web browsers and applies some "fixes" to make them secure. Highly recommended for those users willing to spend on paid version and to get the protection as well worth the money they spend.

[Miyuki]

McAfee VirusScan
Website: McAfee-Antivirus Software and Intrusion Prevention Solutions
Download Link: https://home.mcafee.com/Secure/Prote...px?ps=register

Setup

- Standard installations
- Full update

Before Install [Clean Install, applies to others as well]
Bootup to desktop:
32 seconds

After Install
Bootup to desktop, ready to use:
55 seconds

Memory usage:
110MB

Malware test count: 12
Detected: 7
Not detected: 5

The Malware

- Trojan-Clicker.Win32.Liah Detected
- Trojan.Win32.Sasfis.uoo Detected
- HTML/Infected.WebPage.Gen Detected
- Web exploits Not detected
- Web exploits Not detected
- Trojan-GameThief.Win32.OnLineGames.vuez Detected
- Trojan.Win32.Refroso.qng Not detected
- RogueAV Detected
- Trojan-Downloader.Win32.CodecPack.kgo Detected
- RogueRegistryCleaner Not detected
- Website exploits, spyware/trojan [rootkit] Detected
- W32.Downloader Not detected

Conclusion:

Memory usage is quite high compared to other commercial software, decent detection rate. Some programs might have conflicts with McAfee Antivirus tho.

[Miyuki]

Norton Antivirus 2010
Website: Antivirus Software - Spyware Remover | Norton AntiVirus
Download Link: Antivirus Free - Download Norton Antivirus 2010 Free Trial Software

Setup

- Standard installations
- Full update

Before Install [Clean Install, applies to others as well]
Bootup to desktop:
32 seconds

After Install
Bootup to desktop, ready to use:
50 seconds

Memory usage:
12MB

Malware test count: 12
Detected: 5
Not detected: 7

The Malware

- Trojan-Clicker.Win32.Liah Detected
- Trojan.Win32.Sasfis.uoo Not detected
- HTML/Infected.WebPage.Gen Detected
- Web exploits Not detected
- Web exploits Not detected
- Trojan-GameThief.Win32.OnLineGames.vuez Detected
- Trojan.Win32.Refroso.qng Detected
- RogueAV Detected
- Trojan-Downloader.Win32.CodecPack.kgo Not detected
- RogueRegistryCleaner Not detected
- Website exploits, spyware/trojan [rootkit] Not detected
- W32.Downloader Not detected

Conclusion:

Fast detection, and with SONAR detection as well. Norton Antivirus doesn't slows the system or using too much resources as it's predecessor. The Antivirus lack of what the Internet Security version offer, and have poorer performance than NIS version has to offer, probably user might want to get IS version for more better protection [somehow a marketing scheme?]

[Miyuki]

TrendMicro Antivirus
Website: Home and Home Office Products - Trend Micro USA
Download Link: Buy Trend Antivirus Plus Antispyware Now and Save! - Trend Micro USA

Setup

- Standard installations
- Full update

Before Install [Clean Install, applies to others as well]
Bootup to desktop:
32 seconds

After Install
Bootup to desktop, ready to use:
58 seconds

Memory usage:
17MB

Malware test count: 12
Detected: 2
Not detected: 10

The Malware

- Trojan-Clicker.Win32.Liah Detected
- Trojan.Win32.Sasfis.uoo Detected
- HTML/Infected.WebPage.Gen Not detected
- Web exploits Not detected
- Web exploits Not detected
- Trojan-GameThief.Win32.OnLineGames.vuez Not detected
- Trojan.Win32.Refroso.qng Failed Test
- RogueAV Failed Test
- Trojan-Downloader.Win32.CodecPack.kgo Failed Test
- RogueRegistryCleaner Failed Test
- Website exploits, spyware/trojan [rootkit] Failed Test
- W32.Downloader Failed Test

Conclusion:

Failed to run other tests, since the system totally crashes after the last infection. [svhost errors]. It uses silent blocking, but didn't tell the user what virus/malware and what steps it took to tackle it.

[Miyuki]

That's all for this time tests, if you guys have other antivirus software that you'd like me to test on, and have malware links [please do use pm function for this] that you might want me to try on those antivirus then please discuss it here.

For now, recommended antivirus for

Recommended Free Antivirus: Avast! Home Free Antivirus
Recommended Paid Antivirus: Kaspersky Antivirus 2010

Hope these helps.

[zgmfx19a]

Nicely done Miyoo. Can't repped you cause I needa spread some, but yeah... x_x

Anyway, if I surf net carefully, then the web protection is not that important right?

If so, wouldn't Avira be better?

[Miyuki]

It should be fine, unless the website/page being hijacked by malware code then probably Avira won't able to detect properly [example like iframe exploit].

And not miyoo.

[GV8J6SDK29ASJH0D]

Wow, I'm really surprised Microsoft Security Essentials didn't detect as much as I thought it would, because I heard it's really good and stuff, I use it for some months now, and I love it, the simple interface etc.

Also, I knew that Avast would score better than others, but I got annoyed of it's messy interface. >:

What about testing BitDefender?

[zgmfx19a]

Okay. Thanks Miyuu. <3

[Miyuki]

Originally Posted by Yobanashi

Wow, I'm really surprised Microsoft Security Essentials didn't detect as much as I thought it would, because I heard it's really good and stuff, I use it for some months now, and I love it, the simple interface etc.

Also, I knew that Avast would score better than others, but I got annoyed of it's messy interface. >:

What about testing BitDefender?

Yeah, I kinda surprised that it would perform poorer than other free antivirus software...probably some "marketing scheme"?

Sure, I'll give BitDefender [commercial] a try.

Originally Posted by zgmfx19a

Okay. Thanks Miyuu. <3

Your welcome x3.