http://www.malware-test.
com
AntiSpyware Detection
Comparison Report
(2006-01-03)
Revision History
Revision No. Revised By Date of Change Description
1.0 Samplas Jan 3, 2006 Create this document.
Copyright © 2006 Malware-Test Lab. All rights reserved. 1
http://www.malware-test.com
Contents
Revision History ..............................................................................................1
Test Summary ................................................................................................3
Spyware Sample Collection ..............................................................................5
Detailed Test Report .......................................................................................6
Issues with Vendors ........................................................................................7
Contact Information ........................................................................................7
Appendix A: Test Platform and Testing Subjects ...............................................9
Appendix B: Testing Methodology ..................................................................20
Copyright © 2006 Malware-Test Lab. All rights reserved. 2
http://www.malware-test.com
Test Summary
The following table shows detection rate for different antivirus or antispyware
vendors.
Antivirus or AntiSpyware Software’s Name Detection Rate
BitDefender Internet Security v10 94.85%
ESET NOD32 2.7 89.12%
Kaspersky Internet Security 6.0 88.86%
Grisoft AVG Anti-Spyware 7.5 (ewido anti-spyware 4.0) 88.50%
Alwil avast! 4.7 Home Edition (free) 84.47%
Norman Virus Control 5.82 79.41%
Rising Antivirus 2006 69.11%
F-Secure Internet Security 2007 68.20%
Sunbelt CounterSpy 1.5 67.51%
Panda Internet Security 2007 65.79%
Spyware Terminator 1.5 (with WinClamAV 1.1) 65.57%
AVIRA AntiVir PersonalEdition Classic 7.0 (free) 57.57%
Trend Micro PC-cillin Internet Security 2007 49.18%
EMSISoftware a-square free 2.1 (free) 40.61%
McAfee Internet Security 2007 38.35%
Microsoft Windows Defender 1.1 (free) 33.88%
ZoneAlarm Security Suite 6.5 32.12%
PC Tools Spyware Doctor 4.0 31.70%
Trend Micro Anti-Spyware 3.5 28.30%
SUPERAntiSpyware 3.4 23.75%
AhnLab SpyZero 2007 23.45%
Comodo AntiVirus 1.1 (free) 17.57%
Webroot Spy Sweeper 5.2 16.51%
Symantec Norton Internet Security 2007 13.33%
Lavasoft Ad-Aware SE Personal (free) 12.42%
CA Internet Security 2007 (antispyware part only) 9.92%
CyberDefender AntiSpyware 2006 3.08%
Outpost Firewall Pro 4.0 0.93%
Tenebril SpyCatcher Express 4.0 (free) 0.52%
TrojanHunter 4.6 0.00%
Copyright © 2006 Malware-Test Lab. All rights reserved. 3
http://www.malware-test.com
For detailed information, please refer to the Detailed Test Report section.
Copyright © 2006 Malware-Test Lab. All rights reserved. 4
http://www.malware-test.com
Spyware Sample Collection
In this report, the samples we use are collected daily from Honeypot.
Copyright © 2006 Malware-Test Lab. All rights reserved. 5
http://www.malware-test.com
Detailed Test Report
AntiSpyware Detection Test
Total spyware files are 16,126, including spywares, adwares, remote application
tools, hacker tools and so on.
The following table shows the date-type distribution of all spyware files:
Data Type File Count
ASPACK EXE 164
PETITE EXE 41
UPX EXE 1925
WIN32 EXE 13967
WWPACK EXE 1
Others 1770
If you want to verify our test result, please refer to the following:
For SHA1 value of all spyware files, please download it from our Forum
(http://malware-test.com/smf/index.php?board=9.0).
For all antivirus or antispyware scan logs, please download them from our
Forum (http://malware-test.com/smf/index.php?board=9.0).
Copyright © 2006 Malware-Test Lab. All rights reserved. 6
http://www.malware-test.com
Issues with Vendors
Please note the following issues:
1. Some antispyware or antivirus softwares cannot scan specified folders.
Trend Micro PC-cillin 2007 (AntiSpyware part only)
SpyBot S&D 1.4 (we cannot test it)
McAfee Internet Security 2007
FaceTime X-Cleaner build 38995 (it is available in the deluxe version)
ZoneAlarm Security Suite 6.5
2. Some antispyware or antivirus softwares have no scan log files, so we
cannot get accurate scan results, sometimes it will affect test result (perhaps
it is incorrect).
McAfee Internet Security 2007
Tenebril SpyCatcher Express 4.0
CA Internet Security 2007
CyberDefender AntiSpyware 2006
Outpost Firewall Pro 4.0 (record detection name only)
ZoneAlarm Security Suite 6.5
Microsoft Windows Defender 1.1
Symantec Norton Internet Security 2007
3. Symantec Norton Internet Security 2007 needs to spend long time to take
action and has no configuration of action, we do not know why (they can
reproduce the problem very easily)?
4. Avira AntiVir PersonalEdition Classic 7.0 cannot disable alert sound for virus
found.
5. FBM ZeroSpyware needs flash player 7, after we follow their instructions to
install it, but we still cannot use it.
6. Kingsoft Internet Security 2007 has simple-chinese version of registration, so
we cannot test it.
Note that if you read above, please help inform the vendors. Thanks.
Contact Information
If you have any questions or suggestions about this report or test methodology,
please feel free to contact us.
Copyright © 2006 Malware-Test Lab. All rights reserved. 7
http://www.malware-test.com
E-Mail: [email protected]
Copyright © 2006 Malware-Test Lab. All rights reserved. 8
http://www.malware-test.com
Appendix A: Test Platform and Testing Subjects
Malware-Test Lab uses the following specification in producing any data
presented in this document.
OS: Windows XP Profession, English Version with Service Pack 2.
IE Version: 6.0 with Service Pack1.
Test Machine: Intel® Core™2 CPU with 2GB RAM.
List of Antivirus vendors to be tested and their setting at the time being tested:
All antivirus or antispyware softwares are tested by using full scanning
capabilities and the default settings are not used.
AhnLab SpyZero 2007
Alwil avast! 4.7 Home Edition (free)
Copyright © 2006 Malware-Test Lab. All rights reserved. 9
http://www.malware-test.com
AVIRA AntiVir PersonallEdition Classic 7.0 (free)
BitDefender Internet Security v10
Copyright © 2006 Malware-Test Lab. All rights reserved. 10
http://www.malware-test.com
CA Internet Security 2007 (antispyware part only)
Comodo AntiVirus 1.1 (free)
CyberDefender AntiSpyware 2006
EMSISoftware a-square free 2.1 (free)
Copyright © 2006 Malware-Test Lab. All rights reserved. 11
http://www.malware-test.com
ESET NOD32 2.7
F-Secure Internet Security 2007
Copyright © 2006 Malware-Test Lab. All rights reserved. 12
http://www.malware-test.com
Grisoft AVG Anti-Spyware 7.5 (ewido anti-spyware 4.0)
Kaspersky Internet Security 6.0
Copyright © 2006 Malware-Test Lab. All rights reserved. 13
http://www.malware-test.com
Lavasoft Ad-Aware SE Personal (free)
McAfee Internet Security 2007
Copyright © 2006 Malware-Test Lab. All rights reserved. 14
http://www.malware-test.com
Microsoft Windows Defender 1.1 (free)
Norman Virus Control 5.82
Outpost Firewall Pro 4.0
Copyright © 2006 Malware-Test Lab. All rights reserved. 15
http://www.malware-test.com
Panda Internet Security 2007
PC Tools Spyware Doctor 4.0
Rising Antivirus 2006
Copyright © 2006 Malware-Test Lab. All rights reserved. 16
http://www.malware-test.com
Spyware Terminator 1.5 (with WinClamAV 1.1)
Sunbelt CounterSpy 1.5
SUPERAntiSpyware 3.4
Copyright © 2006 Malware-Test Lab. All rights reserved. 17
http://www.malware-test.com
Symantec Norton Internet Security 2007: No information
Tenebril SpyCatcher Express 4.0 (free)
Trend Micro Anti-Spyware 3.5
Trend Micro PC-cillin Internet Security 2007
TrojanHunter 4.6
Copyright © 2006 Malware-Test Lab. All rights reserved. 18
http://www.malware-test.com
Webroot Spy Sweeper 5.2
ZoneAlarm Security Suite 6.5
Copyright © 2006 Malware-Test Lab. All rights reserved. 19
http://www.malware-test.com
Appendix B: Testing Methodology
Please refer to http://www.malware-test.com for detailed test methodology.
Copyright © 2006 Malware-Test Lab. All rights reserved. 20
