You Might Be a Geek If Best Lite Apps Tips and Tricks Where to go when you’re bored Tweak Your Desktop
Collapsed This Week Collapsed CyberNotes
Collapsed Last Week

Best Antivirus Programs Fail VB100!

December 6th, 2007
25 Comments Written by Ryan

Failed Antivirus


I think the image above that I put together sums things up quite well. Virus Bulletin did another “in the wild” test to see how many of the best antivirus solutions available would be able to catch every known virus they threw at it. Normally out of the 30+ apps that are tested 5 or 6 of them fail, but this time around over 50% of them came up short.

I know I know, there are a lot of no name antivirus programs out there that are seemingly doomed to failure, but some of the most widely used programs couldn’t even get things right. The complete list of failed programs is below, but among them are Avast!, AntiVir, Kaspersky, Norman, Sophos, and Trend Micro. All big names that couldn’t even identify viruses the entire world knows about. *sigh* It’s not like they created their own viruses just for the test.

Here are the results of the test, which were all done on a Windows 2000 machine:

Antivirus Applications that Failed VB100:

  1. AEC Trustport Antivirus - 7 misses
  2. Avast! - 2 false positives
  3. Avira AntiVir - 4 false positives
  4. CA Antivirus - 40 misses
  5. Doctor Web - 22 misses and 4 false positives
  6. Fortinet Forticlient - 4 misses
  7. Frisk F-PROT
  8. Ikarus Virus Utilities - 18 misses and 26 false positives
  9. Iolo Antivirus - 66 misses
  10. Kaspersky Anti-Virus - 1 miss

  11. Kingsoft AntiVirus - 120 misses
  12. Norman Virus Control - 14 misses and 6 false positives
  13. PCTools Spyware Doctor - 2 false positives
  14. Redstone Redprotect - 2 misses
  15. Rising Antivirus - 3 misses and 3 false positives
  16. Sophos Anti-Virus - 8 misses
  17. Trend Micro - 4 misses

Antivirus Applications that Passed VB100:

  1. Agnitum Outpost
  2. BitDefender AntiVirus
  3. Bullguard
  4. CA eTrust
  5. ESET NOD32

    ESET - Download NOD32 Here!
  6. F-Secure Anti-Virus 2008
  7. GDATA Anti-virus
  8. Grisoft AVG
  9. McAfee VirusScan
  10. Microsoft Forefront
  11. MWTI eScan
  12. PCTools Anti-Virus
  13. Quick Heal
  14. Symantec
  15. VirusBuster

Looking back through the history of the VB100 awards ESET NOD32 has one of the best track records with 47 successful tests and only 3 failures (not counting the ones that have only been tested a handful of times). Here are some of the stats for the antivirus applications that have been tested over 40 times:

  • Avast! - 24 successes and 20 failures (55% success)
  • CA eTrust - 32 successes and 13 failures (71% success)
  • Doctor Web - 25 successes and 22 failures (53% success)
  • ESET NOD32 - 47 successes and 3 failures (94% success)
  • F-Secure - 27 successes and 13 failures (68% success)
  • Grisoft - 19 successes and 22 failures (46% success)
  • Kaspersky - 40 successes and 15 failures (73% success)
  • McAfee - 34 successes and 19 failures (64% success)
  • Norman - 38 successes and 14 failures (73% success)
  • Sophos - 39 successes and 14 failures (74% success)
  • Symantec - 41 successes and 6 failures (87% success)

So it looks like from the VB100 tests that ESET NOD32 and Symantec are the best performers when it comes to catching viruses that are already in the wild!

[via PC World]
Thanks for the tip CoryC!

RSS Icon Enjoyed the post? Subscribe to our feed to get a daily dose of CyberNet!

Tags: Software, Windows, , ,

Previous ArticleNext Article
 

Related Posts:


25 Unread Comment Tracking CyberMark This Article
RSS Icon
25

  1. Avatar

    …and ESET NOD32, as compared to Symantec, has a much smaller footprint. I’ve found that it is typically “faster” as well. So, faster, lighter and more accurate!!!

  2. Avatar
    not Sol wrote:
    …and ESET NOD32, as compared to Symantec, has a much smaller footprint. I’ve found that it is typically “faster” as well. So, faster, lighter and more accurate!!!

    No doubt about that! ESET NOD32 is really the best all around solution that’s available in my opinion.

  3. Avatar

    I have a few words for Symantec, “87% success rate is NOT acceptable.”

  4. Avatar

    I’ve tried out the trial for Eset’s Smart Security suite. It seems to be working pretty well but are there detection rate reviews out for it yet?

  5. Avatar

    Avast! only failed because of 2 false positives? I don’t find that bad. I would rather have false positives than misses….

  6. Avatar

    Pardon my ignorance, but what’s so special about this VB100 thing?

  7. Avatar

    This isn’t entirely fair to Avira AntiVir. “4 false positives” is a pretty good result. True, Avira is well known for false positives, but it did not miss a single actual virus, which is the really critical measure.

    I now run ESS on 3 computers at home, and it’s pretty slick. It’s good to know it fares so well in AV tests.

    Before that I had used Avira for a few years, and only dropped it because I wanted a suite that included a firewall, and Avira’s suite was giving me bluescreens (the firewall, not the AV component). The redesigned UI in ESS also won me over.

    For those who still have to decide which AV to use: one thing I’ve noticed after the switch is that Avira’s real-time scanner is much, MUCH faster than ESS or NOD-32. I pretty much had to restrict the real-time scanner only to specified extensions, disable advanced heuristics and disable runtime packer scanning, otherwise I had to wait a couple of seconds for file access on regular-sized executables and documents - and I have a pretty fast, custom built system. ESS was taking something like 10 (ten) seconds to scan a 30 MB plain text (.txt) file! For some reason it scans executable files of the same size almost instantly, but it seems to have a problem with certain filetypes.

    So I get a little miffed when NOD-32 is paraded as the fastest AV engine, also by ESET themselves, and would advise anyone to test for themselves.

  8. Avatar

    There seems to be a lot of conflicting information about the best antivirus software. A new test has reported how well different antivirus products deal with detecting new, unknown malware before it reaches the vendors’ labs.. but it tells a differnt story from VB100

    http://www.sophos.com/pressoff.....-test.html

  9. Avatar

    I’m still going to stick with F-Secure Internet Security 2007 until the licence runs out in June even though it takes forever to finish a scan.
    Ill try out ESET Internet Security after that, hopefully thats quicker.

  10. Avatar
    Marcus wrote:
    There seems to be a lot of conflicting information about the best antivirus software. A new test has reported how well different antivirus products deal with detecting new, unknown malware before it reaches the vendors’ labs.. but it tells a differnt story from VB100

    http://www.sophos.com/pressoff.....-test.html

    The problem with that link is that it is hosted by the developer of the “winner.” While I think that Sophos is a pretty honest company, I still don’t see how their study should be taken any more seriously than the studies found on ESET’s site or any other major dev.

  11. Avatar
    Dave wrote:
    I’ve tried out the trial for Eset’s Smart Security suite. It seems to be working pretty well but are there detection rate reviews out for it yet?

    It uses NOD32 for the antivirus, so it would be the same results as NOD32. I haven’t seen any tests on the firewall yet though.

    dtanderson wrote:
    Avast! only failed because of 2 false positives? I don’t find that bad. I would rather have false positives than misses….

    True, but it means it still needs a little work.

    Max wrote:
    Pardon my ignorance, but what’s so special about this VB100 thing?

    If an antivirus program can’t detect viruses that are already known then that is a critical flaw.

    marek wrote:
    I now run ESS on 3 computers at home, and it’s pretty slick. It’s good to know it fares so well in AV tests.

    Before that I had used Avira for a few years, and only dropped it because I wanted a suite that included a firewall, and Avira’s suite was giving me bluescreens (the firewall, not the AV component). The redesigned UI in ESS also won me over.

    I haven’t used Avira before, but ESS was a great buy for myself. I’ve never noticed a delay with the realtime scanner though, like you have. Everything seems to be purring like a kitten.

    Marcus wrote:
    There seems to be a lot of conflicting information about the best antivirus software. A new test has reported how well different antivirus products deal with detecting new, unknown malware before it reaches the vendors’ labs.. but it tells a differnt story from VB100

    http://www.sophos.com/pressoff.....-test.html

    We’ve written about that kind of test before, but it still only tells one side of the story. Antivirus applications need to catch viruses that have been released as well as ones that haven’t.

  12. Avatar

    There is no “best” antivirus. Each one has its weakness….though some of those are inexcusable (Norton’s ridiculous scan times comes to mind).

  13. Avatar

    Grisoft AVG free version passed and it’s a truely free version, not adware crap. Realtime and email scanning are the same as the full commercial version. You can’t set your own automated scanning other than once a day. BFD. Scan once and turn that off.

    Sure would be nice if they’d also test the various freeware and shareware Linux firewalls like Astaro.

  14. Avatar

    What difference do the PAST results make? They’re nothing but a slight indicator of PAST performance which isn’t the same as current performance. They’re not even a good predictor of the future. Author X finds his scanner Y failed on virus type Z so he improves the scanner. That was then, this is now.

  15. Avatar

    My only hope is that ESET won’t be “bought out” by some bloated giant like Symantec.

  16. Avatar

    i use nod32 and i have had absolutely no problems from the past 2 years….3 cheers for eset nod32..

  17. Avatar

    what about clamwin? better still clamav + ubuntu. cheers

  18. Avatar

    Although I was pleased to see that my firewall of choice, bitdefender, had passed, it should always be kept in mind that the results of antivirus tests will vary with the methodology used. (That said, I do agree that catching known viruses is an absolute bottom-line entry point for competency.)
    And then, there’s an old adage in science: “Absence of proof is not proof of absence”. When your antivirus tells you “no viruses found” it means exactly that: the program didn’t *find* any viruses, but that does not necessarily mean that there *are no* viruses in your computer.
    It’s a shame that making multiple antivirus programs live happily on a single computer is difficult…
    Anyhoo

  19. Avatar

    I think 2 false positives is good enough for me to stick with Avast! It is lean enough for me to prefer it over Symantec.

  20. Avatar
    Amak wrote:
    There is no “best” antivirus. Each one has its weakness….though some of those are inexcusable (Norton’s ridiculous scan times comes to mind).

    I didn’t say it was the best…I agree with you on this one.

    Francis Sim wrote:
    I think 2 false positives is good enough for me to stick with Avast! It is lean enough for me to prefer it over Symantec.

    If you want to roll out anti-virus on a corporate level to servers and workstations, the ESET is still very good…and Avast! [in my opinion] not as robust…but on the personal use front - Avast! is free for home use and fails on 2 false positives. So what do you think I run at home?

  21. Avatar
    Fred Thompson wrote:
    Sure would be nice if they’d also test the various freeware and shareware Linux firewalls like Astaro.

    They do actually test some of the Linux antivirus applications in a separate test, and I might do a write up about that.

    Fred Thompson wrote:
    What difference do the PAST results make? They’re nothing but a slight indicator of PAST performance which isn’t the same as current performance. They’re not even a good predictor of the future. Author X finds his scanner Y failed on virus type Z so he improves the scanner. That was then, this is now.

    I have to disagree with that. I think that you can look at the past results as a good indicator of how the apps will perform in the future. Look at how many times ESET has passed compared to the others. That means they have had to fix very little as a result of the tests.

    Anonymous wrote:
    My only hope is that ESET won’t be “bought out” by some bloated giant like Symantec.

    That would be absolutely terrible, but I don’t think ESET will sell out like that.

    Francis Sim wrote:
    I think 2 false positives is good enough for me to stick with Avast! It is lean enough for me to prefer it over Symantec.

    I would definitely use Avast! over Symantec. You won’t see me disagreeing with that.

  22. Avatar

    Always used Norton, Always will. I sooner give up some system resources for good protection than use something like AVG.

  23. Avatar
    dtanderson wrote:
    Avast! only failed because of 2 false positives? I don’t find that bad. I would rather have false positives than misses….

    Even if that false positive is a critical operating system file that’s gets removed and then the OS won’t boot?

    Accuracy matters.

  24. Avatar
    Anonymous wrote:
    Always used Norton, Always will. I sooner give up some system resources for good protection than use something like AVG.

    [Poor performance] + [Uses massive system resources] = [Bad anti-virus]

  25. Avatar

    ALL OF YOU ARE BULLSHIT ESET HAS NO WEAKNESS AND IT HAS THE BEST SECURITY EVER BUILT IT SOME FIVE YEARS IT WILL RELEASE IT LATEST DETECTION OF HEURISTICS FOR 99.99 PERCENT OF FREE FROM ANYTHING.

    (eset s.p.r.o.l DAVID software progrmmer)

:mrgreen: :| :twisted: :arrow: 8O :) :? 8) :evil: :D :idea: :oops: :P :roll: ;) :cry: :o :lol: :x :( :!: :?:

Note: All links posted in comments will automatically be hyperlinked.

↓ Expand Text Area  or  Decrease Text Area ↑

 Find out how to track new comments!


 

  1. There aren't any trackbacks or pings yet. You can be the first by using this trackback URL.