New Posts  All Forums:Forum Nav:

Antivirus testing

post #1 of 57
Thread Starter 
Every spring I test as many antivirus programs to find out which one works the best. I start with a clean install of the latest Microsoft operating system (Win 7 64 SP1 this time) with no third party applications except disk imaging software. I take an image of that and store it away. Then I get it as infected as i can, take an image of that, and store it. I then try installing different antivirus programs and see how well they clean up the viruses. I grade them based on how many infected files and registry entries they find, and weather or not it really got rid of everything. after i test one antivirus, I image the drive with the infected image, and try another antivirus. After i get all those results, I put the clean image back on the drive, install an antivirus, and try to get it infected, to see if it picks the virus up with the on access scan. I do that with each antivirus, and score it based on weather or not it detected the virus, and if there were any false positives.

I just thought i would make a post here to post the results when I'm done, and ask you guys if there are any antivirus programs you think i should test.


The test rig (not that it really matters): asus maximus extreme, Intel Q6600 stock, 6 GB ddr3 1600, 250GB seagate 7200.9.

Antivirus programs I'm already planning on testing: Avira, AVG, Norton, Mcafee, avast, kapersky, clam win, nod32.

Edit here's the results data, I am working on an article which explains these results, because the numbers don't do it justice.
https://spreadsheets.google.com/ccc?...Og&hl=en#gid=0
Edited by {core2duo}werd - 4/4/11 at 10:47am
i5 build
(9 items)
 
  
CPUMotherboardGraphicsRAM
Intel Core i5 3570K Z68 Pro4 Gen4 Intel HD Graphics 4000 (GT2) G.skill ares 
RAMHard DriveCoolingOS
G.skill ares Corsair Force GT 128 GB SSD Custom WC loop Win8 pro 
Case
antec 1200 
  hide details  
Reply
i5 build
(9 items)
 
  
CPUMotherboardGraphicsRAM
Intel Core i5 3570K Z68 Pro4 Gen4 Intel HD Graphics 4000 (GT2) G.skill ares 
RAMHard DriveCoolingOS
G.skill ares Corsair Force GT 128 GB SSD Custom WC loop Win8 pro 
Case
antec 1200 
  hide details  
Reply
post #2 of 57
Pretty cool, looking forward to your results.

Are you going to give MSE a whirl?
Project Unamed
(21 items)
 
HTPC
(16 items)
 
 
CPUMotherboardGraphicsRAM
i7 920 D0 - 3913B269 Foxxconn Bloodrage Sapphire 6950 2GB flashed to 6970 BIOS 6GB G-Skill Trident 2000mhz 
Hard DriveOptical DriveCoolingOS
2x OCZ Vertex 2 160GB in RAID 0 Samsung Swiftech H2O-320 W7 Ultimate 64bit 
MonitorMonitorKeyboardPower
Acer 24" AL2423Wdr Acer 24" P243W DAS Model S & Cherry My 7000 Seasonic 860wt Platinum+ 
CaseMouseAudioAudio
In progress R.A.T. 7 Creative Titanium HD Fiio E9 
AudioAudioAudioAudio
Denon AH-D2000 AKG Q701 Grado SR225i Audio-Technica ATH-A900 
Audio
Klipsch Pro Media 2.1 
CPUGraphicsGraphicsRAM
e5700 HD6670 Ceton InfiniTV 4 4GB G-Skill DDR2 1066 
Hard DriveHard DriveOptical DriveOS
60 GB Agility 3 (OS Drive) Hitachi 3TB (TV Buffer and Recording) LG Blu-Ray Burner Windows 7 Ultimate 
MonitorCaseAudioAudio
58" Samsung Plasma DH101 Polk CS2 (Center) Polk Monitor 70 (FL/FR) 
AudioAudioAudioAudio
Polk Monitor 60 (RL/RR) Polk Monitor 40 (Surround L/R) Definitive Technology Supercube 2000 Onkyo HT-RC360 
CPUMotherboardGraphicsRAM
T9550 G51VX nVidea 260m 4GB DDR2 1066 
Hard DriveHard DriveOSMonitor
120 GB Agility 3 (OS/Programs Drive) 320GB 7200rpm (VM and Data Drive) Windows 7 Ultimate 1920 x 1080 (came with 1366 x 768) 
Case
Ventilated Bottom of Laptop Housing 
  hide details  
Reply
Project Unamed
(21 items)
 
HTPC
(16 items)
 
 
CPUMotherboardGraphicsRAM
i7 920 D0 - 3913B269 Foxxconn Bloodrage Sapphire 6950 2GB flashed to 6970 BIOS 6GB G-Skill Trident 2000mhz 
Hard DriveOptical DriveCoolingOS
2x OCZ Vertex 2 160GB in RAID 0 Samsung Swiftech H2O-320 W7 Ultimate 64bit 
MonitorMonitorKeyboardPower
Acer 24" AL2423Wdr Acer 24" P243W DAS Model S & Cherry My 7000 Seasonic 860wt Platinum+ 
CaseMouseAudioAudio
In progress R.A.T. 7 Creative Titanium HD Fiio E9 
AudioAudioAudioAudio
Denon AH-D2000 AKG Q701 Grado SR225i Audio-Technica ATH-A900 
Audio
Klipsch Pro Media 2.1 
CPUGraphicsGraphicsRAM
e5700 HD6670 Ceton InfiniTV 4 4GB G-Skill DDR2 1066 
Hard DriveHard DriveOptical DriveOS
60 GB Agility 3 (OS Drive) Hitachi 3TB (TV Buffer and Recording) LG Blu-Ray Burner Windows 7 Ultimate 
MonitorCaseAudioAudio
58" Samsung Plasma DH101 Polk CS2 (Center) Polk Monitor 70 (FL/FR) 
AudioAudioAudioAudio
Polk Monitor 60 (RL/RR) Polk Monitor 40 (Surround L/R) Definitive Technology Supercube 2000 Onkyo HT-RC360 
CPUMotherboardGraphicsRAM
T9550 G51VX nVidea 260m 4GB DDR2 1066 
Hard DriveHard DriveOSMonitor
120 GB Agility 3 (OS/Programs Drive) 320GB 7200rpm (VM and Data Drive) Windows 7 Ultimate 1920 x 1080 (came with 1366 x 768) 
Case
Ventilated Bottom of Laptop Housing 
  hide details  
Reply
post #3 of 57
will you use the freeware versions of Avira, Avast and AVG or the commercial product?

NOD32 and Bitdefender are free too but only for Linux
    
CPUMotherboardGraphicsRAM
i3 560 3.3 GHz (4.0 Ghz) Gigabite H55M-USB3 Palit GTX 660 4 GB Corsair XMS31600 
Hard DriveOptical DriveCoolingOS
6.2 TB total LG BD-R, NEC 3540A DVD-R Cooler Master Hyper 212+  WinXP SP3 32-bit, Windows 7 64-bit 
MonitorKeyboardPowerCase
23" LG W2361V 1920x1080 Logitech G510 SilverStone SST-ST65EF Nothing special 
MouseMouse PadAudio
MS SideWinder X5, Wacom Intuos4, ednet xxlpad ProGamer Realtek onboard 
  hide details  
Reply
    
CPUMotherboardGraphicsRAM
i3 560 3.3 GHz (4.0 Ghz) Gigabite H55M-USB3 Palit GTX 660 4 GB Corsair XMS31600 
Hard DriveOptical DriveCoolingOS
6.2 TB total LG BD-R, NEC 3540A DVD-R Cooler Master Hyper 212+  WinXP SP3 32-bit, Windows 7 64-bit 
MonitorKeyboardPowerCase
23" LG W2361V 1920x1080 Logitech G510 SilverStone SST-ST65EF Nothing special 
MouseMouse PadAudio
MS SideWinder X5, Wacom Intuos4, ednet xxlpad ProGamer Realtek onboard 
  hide details  
Reply
post #4 of 57
malwarebytes, superantispyware, combofix and MSE
I have yet to come across anything that can survive that combination.
post #5 of 57
Thread Starter 
Quote:
Originally Posted by tr8rjohnk View Post
Pretty cool, looking forward to your results.

Are you going to give MSE a whirl?
good one i didn't think about.
Quote:
Originally Posted by petran79 View Post
will you use the freeware versions of Avira, Avast and AVG or the commercial product?

NOD32 and Bitdefender are free too but only for Linux
I will use that 30 day trial of the paid versions.
Quote:
Originally Posted by FDS View Post
malwarebytes, superantispyware, combofix and MSE
I have yet to come across anything that can survive that combination.
I agree, but except for MSE, those are tools you run on top of your antivirus.

I'm infecting it now







and here is the viruses trying to contact home. in russia...



Edited by {core2duo}werd - 3/26/11 at 9:53am
i5 build
(9 items)
 
  
CPUMotherboardGraphicsRAM
Intel Core i5 3570K Z68 Pro4 Gen4 Intel HD Graphics 4000 (GT2) G.skill ares 
RAMHard DriveCoolingOS
G.skill ares Corsair Force GT 128 GB SSD Custom WC loop Win8 pro 
Case
antec 1200 
  hide details  
Reply
i5 build
(9 items)
 
  
CPUMotherboardGraphicsRAM
Intel Core i5 3570K Z68 Pro4 Gen4 Intel HD Graphics 4000 (GT2) G.skill ares 
RAMHard DriveCoolingOS
G.skill ares Corsair Force GT 128 GB SSD Custom WC loop Win8 pro 
Case
antec 1200 
  hide details  
Reply
post #6 of 57
Nice, I'm in for the results. I've been using Avast for years, no problems and best of all it hardly uses any resources.
Desktop
(13 items)
 
   
CPUMotherboardGraphicsRAM
i7-2600k [4.7 GHz @ 1.376v] ASUS P8P67 PRO Rev 3.1 MSI GTX 580 Lightning Extreme [950/1900/2100 1.1v] GSkill Ripjaws 8GB [2133 MHz 9-11-10-28-1T] 
Hard DriveOptical DriveOSMonitor
WD VelociRaptor 300GB / 2x Samsung F3 1TB RAID 0 Sony Optiarc 24x DVD/CD-RW Windows 8 x64 Asus VH235 23" 1920x1080 
KeyboardPowerCase
Ducky Shine DK-9008 Overclock.net Edition Corsair TX750 CoolerMaster HAF 932 Full Tower 
CPUGraphicsRAMHard Drive
Intel Core2Duo 2.26 GHz NVIDIA Quadro NVS 160M 2GB DDR2-800 160GB 7200rpm 
OSMonitor
Ubuntu 12.04 LTS 14.1" LED 
  hide details  
Reply
Desktop
(13 items)
 
   
CPUMotherboardGraphicsRAM
i7-2600k [4.7 GHz @ 1.376v] ASUS P8P67 PRO Rev 3.1 MSI GTX 580 Lightning Extreme [950/1900/2100 1.1v] GSkill Ripjaws 8GB [2133 MHz 9-11-10-28-1T] 
Hard DriveOptical DriveOSMonitor
WD VelociRaptor 300GB / 2x Samsung F3 1TB RAID 0 Sony Optiarc 24x DVD/CD-RW Windows 8 x64 Asus VH235 23" 1920x1080 
KeyboardPowerCase
Ducky Shine DK-9008 Overclock.net Edition Corsair TX750 CoolerMaster HAF 932 Full Tower 
CPUGraphicsRAMHard Drive
Intel Core2Duo 2.26 GHz NVIDIA Quadro NVS 160M 2GB DDR2-800 160GB 7200rpm 
OSMonitor
Ubuntu 12.04 LTS 14.1" LED 
  hide details  
Reply
post #7 of 57
Thread Starter 
Quote:
Originally Posted by {core2duo}werd View Post
After i get all those results, I put the clean image back on the drive, install an antivirus, and try to get it infected, to see if it picks the virus up with the on access scan. I do that with each antivirus, and score it based on weather or not it detected the virus, and if there were any false positives.
Quote:
Originally Posted by LastBucsfan View Post
Nice, I'm in for the results. I've been using Avast for years, no problems and best of all it hardly uses any resources.


Edit heyyyy woah you edited...
i5 build
(9 items)
 
  
CPUMotherboardGraphicsRAM
Intel Core i5 3570K Z68 Pro4 Gen4 Intel HD Graphics 4000 (GT2) G.skill ares 
RAMHard DriveCoolingOS
G.skill ares Corsair Force GT 128 GB SSD Custom WC loop Win8 pro 
Case
antec 1200 
  hide details  
Reply
i5 build
(9 items)
 
  
CPUMotherboardGraphicsRAM
Intel Core i5 3570K Z68 Pro4 Gen4 Intel HD Graphics 4000 (GT2) G.skill ares 
RAMHard DriveCoolingOS
G.skill ares Corsair Force GT 128 GB SSD Custom WC loop Win8 pro 
Case
antec 1200 
  hide details  
Reply
post #8 of 57
Quote:
Originally Posted by {core2duo}werd View Post


Edit heyyyy woah you edited...
Wow you caught that fast then. I edited like a second later because I had a brainfart and forgot what I read lol.
Desktop
(13 items)
 
   
CPUMotherboardGraphicsRAM
i7-2600k [4.7 GHz @ 1.376v] ASUS P8P67 PRO Rev 3.1 MSI GTX 580 Lightning Extreme [950/1900/2100 1.1v] GSkill Ripjaws 8GB [2133 MHz 9-11-10-28-1T] 
Hard DriveOptical DriveOSMonitor
WD VelociRaptor 300GB / 2x Samsung F3 1TB RAID 0 Sony Optiarc 24x DVD/CD-RW Windows 8 x64 Asus VH235 23" 1920x1080 
KeyboardPowerCase
Ducky Shine DK-9008 Overclock.net Edition Corsair TX750 CoolerMaster HAF 932 Full Tower 
CPUGraphicsRAMHard Drive
Intel Core2Duo 2.26 GHz NVIDIA Quadro NVS 160M 2GB DDR2-800 160GB 7200rpm 
OSMonitor
Ubuntu 12.04 LTS 14.1" LED 
  hide details  
Reply
Desktop
(13 items)
 
   
CPUMotherboardGraphicsRAM
i7-2600k [4.7 GHz @ 1.376v] ASUS P8P67 PRO Rev 3.1 MSI GTX 580 Lightning Extreme [950/1900/2100 1.1v] GSkill Ripjaws 8GB [2133 MHz 9-11-10-28-1T] 
Hard DriveOptical DriveOSMonitor
WD VelociRaptor 300GB / 2x Samsung F3 1TB RAID 0 Sony Optiarc 24x DVD/CD-RW Windows 8 x64 Asus VH235 23" 1920x1080 
KeyboardPowerCase
Ducky Shine DK-9008 Overclock.net Edition Corsair TX750 CoolerMaster HAF 932 Full Tower 
CPUGraphicsRAMHard Drive
Intel Core2Duo 2.26 GHz NVIDIA Quadro NVS 160M 2GB DDR2-800 160GB 7200rpm 
OSMonitor
Ubuntu 12.04 LTS 14.1" LED 
  hide details  
Reply
post #9 of 57
I jelly
send me virri/viruses as .zip?
AzuraChan
(13 items)
 
  
CPUMotherboardGraphicsRAM
Phenom II x6 1055T Asus M4A88TD-V Evo/Usb3 EVGA GTX460 1GB SC + 9800GT Phsyx 2x2GB Corsair 1333MHZ 
Hard DriveOSMonitorPower
6.8TB Total w7 + ubuntu 19" something Seasonic S12II 520W 
Case
modded antec 902 
  hide details  
Reply
AzuraChan
(13 items)
 
  
CPUMotherboardGraphicsRAM
Phenom II x6 1055T Asus M4A88TD-V Evo/Usb3 EVGA GTX460 1GB SC + 9800GT Phsyx 2x2GB Corsair 1333MHZ 
Hard DriveOSMonitorPower
6.8TB Total w7 + ubuntu 19" something Seasonic S12II 520W 
Case
modded antec 902 
  hide details  
Reply
post #10 of 57
Thread Starter 
Quote:
Originally Posted by nukefission View Post
I jelly
send me virri/viruses as .zip?
I'm letting it fester over the weekend. I'll see if i can find a safe way to send them. they could still infect from a zip, but maybe if it had a password or if it were in a passworded rar...
i5 build
(9 items)
 
  
CPUMotherboardGraphicsRAM
Intel Core i5 3570K Z68 Pro4 Gen4 Intel HD Graphics 4000 (GT2) G.skill ares 
RAMHard DriveCoolingOS
G.skill ares Corsair Force GT 128 GB SSD Custom WC loop Win8 pro 
Case
antec 1200 
  hide details  
Reply
i5 build
(9 items)
 
  
CPUMotherboardGraphicsRAM
Intel Core i5 3570K Z68 Pro4 Gen4 Intel HD Graphics 4000 (GT2) G.skill ares 
RAMHard DriveCoolingOS
G.skill ares Corsair Force GT 128 GB SSD Custom WC loop Win8 pro 
Case
antec 1200 
  hide details  
Reply
New Posts  All Forums:Forum Nav:
  Return Home
  Back to Forum: Networking & Security