Antivirus testing - Page 2

I'll figure it out and pm you.
I will if you want me to. that and CA antivirus.

after doing some testing I'm going to change how i rate them. Different programs tell you about the infections they cleaned differently, so instead of rating them on how many files/registry entries, they find, I'm rating them on how many infected items malware bytes finds after it's done cleaning, and how many i can find in a hijackthis log.

after microsoft security essentials was done cleaning there were still bits of the virus left over. the background was still messed up, there were still links to infected files on the desktop, and in the start menu.
I scanned with MBAM, and it found 18 additional infected items. After that, I ran hijackthis, and the log was clean.

ok... so my image got corrupted, and I'm going to have to start over again... This time i'm just going to do this in a virtual machine, and make a copy of the virtual disk.

I put the same virus files on the virtual machine, but got a different result, so new results for microsoft security essentials...
after mse cleaned everything up malware bytes found 4 additional infected items, and a hijackthis log contained 3 infections.

Then i tested McAfee: After it scanned and cleaned MBAM found 14 additional infections, then i found one more in the hijackthis log.

Then I tested Norton, and the virus disabled it right off the bat. as soon as it detected norton on the system, it put in a registry entry which made it ask you what program you want to use to open exe files. Also somehow it disabled the on access scanner, live update, etc so when you clicked on the taskbar icon no menu popped up, and the UI didn't open. I replicated the same problem multiple times with norton, but not with the one's i had tested before it. I had to use the norton power eraser to remove part of the virus, then remove the rest with the regular UI. Interestingly enough once I did that, norton only left behind one infected file for MBAM, and 2 infected entries in the hijackthis log. That's the best so far.

I also tested Avast, which has a great UI, and is snappy. unfortunately it had the same problem as norton where it made the exe registry entry. It ran when you selected run as administrator, but left 10 infected files for malware bytes, and 1 hijackthis entry. it also didn't remove the exe registry entry, while Norton did, and didn't change the common proxy entry that keeps you from getting to the internet by telling it to use the loopback address as a proxy server.