2015
❷
PCSL PC
SL
IT C
on
sultin
g In
stitute
… Celebrating Technology Innovation
Windows Virus Cleaning Test Report
感染型病毒清除测试报告
报告目录
Table of Contents
P1 P2 P3 测试背景 Background
测试流程 Test Process
待测软件 Tested Software
P4 P8 P9 测试结果 Test Result
相关信息 Information
权利说明 Rights Statement
P10
免责声明 Disclaimer
Windows Virus Cleaning Test Report 2015 Feb.
CHAP. 1
Background
Virus is a computer program designed to infect files. In addition, some can have annoying, destructive or even irreparable effects on systems.
When they enter a system, without the user’s consent or knowledge, they are normally hosted within the code of other programs. The virus does not act until the infected program is run. Some of them are programmed to activate when a certain condition is met (a specific date, a certain user action, etc.).
The term “virus” is used due to the similarity with biological viruses. Just as biological viruses enter the human body and infect a cell, which in turn infects new cells, computer viruses enter computers and infect files by inserting their "code". When the infected program is run, the code is activated and the virus begins to spread.
The effects of viruses can be highly annoying to users as an infection of a file can lead to computer slowdowns or alteration of system behavior and functionality.
Viruses normally target executable programs (files with .EXE or .COM extensions). However, they can also infect other types of files, such as web pages (.HTML), Word documents (.DOC), spreadsheets (.XLS), etc.
Viruses can be classified according to several criteria: according to their functionality, the techniques they use to infect, the types of files they infect, the places they hide, the operating system or platforms they attack, etc.
Normally, if a computer is infected by a classic virus, you need to have a security product to scan the infected PC and remove the virus.
1 PCSL
Windows Virus Cleaning Test Report 2015 Feb.
CHAP. 2
Test Process
Windows 8 X64 system will be prepared and backup images are created then.
Detailed process is as follows:
1. 17 different pre-infected vectors are prepared and delivered to the test machine.
2. Install a security product on the test machine.
3. Update the security product and perform an on-demand recommended scan against the pre-infected vectors, use repair or clean option if there is no recommended actions to be notified.
4. Check the files after scanning and generate the result.
5. Restore the backup image and repeat the three steps above.
2 PCSL
Windows Virus Cleaning Test Report 2015 Feb.
CHAP. 3 Tested Software
Software Vendor Version
360 Antivirus Qihoo 360 5.0.0.5104
Ad-Aware Free Antivirus+ Lavasoft 11.5.202.7299
AhnLab V3 Internet Security AhnLab 8.0.8.4 (Build 1607)
Avast Free Antivirus AVAST 2015.10.0.2208
AVG Antivirus Free AVG 2015.0.5645
Avira Free Antivirus Avira 14.0.7.468
Baidu Antivirus Baidu 3.0.0.4791
Bitdefender Antivirus Plus Bitdefender 18.19.0.1369
COMODO Antivirus COMODO 8.0.0.4344
Dr.Web Security Space Dr.Web 10.0
Emsisoft Anti-Malware Emsisoft 9.0.0.4799
eScan for Windows MicroWorld 14.0.1400.4640 DB
ESET Smart Security ESET 8.0.304.1
FortiClient Fortinet 5.2.2.0624
F-Secure Internet Security F-Secure 14.115 build 100
G DATA ANTIVIRUS G DATA 25.0.2.2
HitmanPro SurfRight 3.7.9.234
IKARUS anti.virus IKARUS 2.7.30
Immunet Protect Cisco 3.1.13.9671
K7 Ultimate Security K7 14.2.0257
Kaspersky Internet Security Kaspersky 15.0.0.463(b)
Kingsoft Duba Kingsoft 2015.SP0.5.012210
NANO Antivirus NANO Security 0.30.0.64812
Norton Security Symantec 22.1.0.9
Psafe Total Psafe 5.1.0.1069
Quick Heal AntiVirus Pro Quick Heal 16.00 (9.0.0.9)
Tencent PC Manager Tencent 10.7.16059.213
Total Defense Total Defense 9.0.0.141
TrustPort Antivirus TrustPort 15.0.0.5420
UnThreat AntiVirus Scandium Security 6.2.37.37024
UtilTool Antivirus UtilTool 3.3.67
VIPRE Antivirus ThreatTrack 8.0.5.3
Windows Defender Microsoft 4.0.9200.16384
ZoneAlarm Free Antivirus + Firewall Check Point 13.3.209.000
3 PCSL
Windows Virus Cleaning Test Report 2015 Feb.
CHAP. 4 Test Result
Vendor Sample 1 Sample 2 Sample 3 Sample 4 Sample 5 Sample 6
AhnLab Untreated Successful Successful Untreated PE Corrupted Successful
AVAST Successful Successful Successful Successful Successful Successful
AVG Successful Successful Deleted Deleted Deleted Successful
Avira Deleted Successful Deleted Deleted Successful Deleted
Baidu Successful Successful Successful Successful Successful Successful
Bitdefender Successful Successful Deleted Successful PE Corrupted Successful
Check Point Successful Successful Successful Successful PE Corrupted Successful
Cisco Untreated Deleted Deleted Deleted Deleted Deleted
COMODO Deleted Successful Deleted Deleted Deleted Deleted
Dr.Web Successful Successful PE Corrupted Successful PE Corrupted Successful
Emsisoft Deleted Deleted Deleted Deleted Deleted Deleted
ESET Successful Successful Successful Successful Successful Successful
Fortinet Deleted Deleted Deleted Deleted Deleted Deleted
F-Secure Deleted Deleted Deleted Deleted Deleted Deleted
G DATA Successful Successful Deleted Successful PE Corrupted Successful
IKARUS Deleted Deleted Deleted Deleted Deleted Deleted
K7 Successful Successful Deleted Deleted Deleted Deleted
Kaspersky Successful Successful Successful Successful PE Corrupted Successful
Kingsoft Successful Untreated Successful Untreated Deleted Deleted
Lavasoft Successful Successful Deleted Successful PE Corrupted Successful
Microsoft Successful Successful Successful Deleted Successful Successful
MicroWorld Successful Successful Deleted Successful PE Corrupted Deleted
NANO Security Successful Successful Deleted Successful PE Corrupted Untreated
Psafe Successful Deleted Successful Deleted Deleted Successful
Qihoo 360 Successful Successful Successful Deleted Successful Successful
Quick Heal Successful Successful Successful Successful Successful Successful
Scandium Security Deleted Successful Successful Deleted Deleted Successful
SurfRight Deleted Deleted Deleted Deleted Deleted Deleted
Symantec Successful Successful Successful Deleted Deleted Successful
Tencent Successful Deleted Successful Successful Successful PE Corrupted
ThreatTrack Untreated Successful Successful Untreated Untreated Successful
Total Defense Successful Successful Successful Deleted Successful Deleted
TrustPort Successful Successful Deleted Successful PE Corrupted Successful
UtilTool Deleted Deleted Deleted Deleted Deleted Deleted
4 PCSL
Windows Virus Cleaning Test Report 2015 Feb.
Vendor Sample 7 Sample 8 Sample 9 Sample 10 Sample 11 Sample 12
AhnLab Successful Successful Successful Successful Successful Successful
AVAST Successful Successful Successful Successful Successful Successful
AVG Successful Deleted Deleted Successful Deleted Successful
Avira Deleted Deleted Deleted Deleted Deleted Successful
Baidu Successful Successful Deleted Successful Successful Successful
Bitdefender Deleted Successful Deleted Successful Successful Successful
Check Point Successful Successful Successful Successful Successful Successful
Cisco Untreated Deleted Untreated Deleted Deleted Deleted
COMODO Deleted Deleted Deleted Deleted Deleted Successful
Dr.Web Successful Successful Successful Successful Successful Successful
Emsisoft Deleted Deleted Deleted Deleted Deleted Deleted
ESET Successful Successful Successful Successful Deleted Successful
Fortinet Deleted Deleted Deleted Deleted Deleted Deleted
F-Secure Deleted Deleted Deleted Deleted Deleted Deleted
G DATA Deleted Successful Deleted Successful Successful Successful
IKARUS Deleted Deleted Deleted Deleted Deleted Deleted
K7 Deleted Successful Deleted Successful Successful Successful
Kaspersky Successful Successful Successful Successful Successful Successful
Kingsoft Successful Successful Successful Successful Successful Successful
Lavasoft Deleted Successful Deleted Successful Successful Successful
Microsoft Successful Successful Successful Successful Successful Successful
MicroWorld Deleted Successful Deleted Deleted Successful Successful
NANO Security Deleted Untreated Deleted Untreated Successful Successful
Psafe Successful Successful Successful Successful Successful Successful
Qihoo 360 Successful Successful Successful Successful Successful Successful
Quick Heal Successful Successful Successful Successful Successful Successful
Scandium Security Successful Successful Successful Successful Successful Successful
SurfRight Deleted Deleted Deleted Deleted Deleted Deleted
Symantec Successful Deleted Successful Successful Successful Successful
Tencent PE Corrupted Successful Successful PE Corrupted Successful Successful
ThreatTrack Successful Successful Successful Successful Successful Successful
Total Defense Successful Successful Successful Deleted Successful Successful
TrustPort Deleted Successful Deleted Successful Successful Successful
UtilTool Deleted Deleted Deleted Deleted Deleted Deleted
Windows Virus Cleaning Test Report 2015 Feb.
PCSL 5
Vendor Sample 13 Sample 14 Sample 15 Sample 16 Sample 17
AhnLab Successful Successful Successful Successful Successful
AVAST Successful Untreated Untreated Successful Untreated
AVG Successful Successful Deleted Successful Deleted
Avira Deleted Successful Deleted Successful Deleted
Baidu Successful Successful Deleted Successful Successful
Bitdefender Successful Successful Successful Successful Successful
Check Point Successful Successful Successful Successful Successful
Cisco Deleted Deleted Untreated Deleted Deleted
COMODO Successful Deleted Deleted Deleted Deleted
Dr.Web Successful Successful Successful Successful Successful
Emsisoft Deleted Deleted Deleted Deleted Deleted
ESET Successful Successful Successful Successful Deleted
Fortinet Deleted Deleted Deleted Deleted Deleted
F-Secure Deleted Deleted Deleted Deleted Deleted
G DATA Successful Deleted Successful Successful Successful
IKARUS Deleted Deleted Deleted Deleted Deleted
K7 Successful Successful Successful Successful Successful
Kaspersky Successful Successful Successful Successful Successful
Kingsoft Deleted PE Corrupted Deleted Successful Successful
Lavasoft Successful Successful Successful Successful Successful
Microsoft Successful Successful Successful Successful Successful
MicroWorld Successful Successful Successful Successful Successful
NANO Security Successful Successful Untreated Successful Deleted
Psafe Successful Deleted Successful Successful Successful
Qihoo 360 Successful Deleted Successful Successful Successful
Quick Heal Successful Successful Successful Successful Successful
Scandium Security Successful Successful Deleted Successful Deleted
SurfRight Deleted Deleted Deleted Deleted Deleted
Symantec Successful Successful Successful Successful Successful
Tencent Successful Deleted Successful Successful Successful
ThreatTrack Successful Successful Untreated Successful Untreated
Total Defense Successful Successful Successful Successful Successful
TrustPort Successful Successful Successful Successful Successful
UtilTool Deleted Deleted Deleted Deleted Deleted
Windows Virus Cleaning Test Report 2015 Feb.
PCSL 6
Vendor Score
Quick Heal 17.0
Kaspersky 16.5
Microsoft 16.5
Check Point 16.5
Qihoo 360 16.0
Baidu 16.0
Dr.Web 16.0
ESET 16.0
AVAST 15.5
Symantec 15.5
Total Defense 15.5
Lavasoft 15.0
Bitdefender 15.0
Psafe 15.0
TrustPort 15.0
AhnLab 14.5
G DATA 14.5
Tencent 14.5
Scandium Security 14.5
MicroWorld 14.0
K7 14.0
AVG 13.0
Kingsoft 12.5
ThreatTrack 12.0
Avira 11.0
NANO Security 10.5
COMODO 10.0
Emsisoft 8.5
Fortinet 8.5
F-Secure 8.5
SurfRight 8.5
IKARUS 8.5
UtilTool 8.5
Cisco 6.5
Windows Virus Cleaning Test Report 2015 Feb.
Remarks:
Successful: 1 point for a successful cleaning
Deleted: 0.5 point for an action of deleting vector directly
PE Corrupted: 0.5 point if PE structure is corrupted after cleaning
Untreated: 0 point if security product takes no actions
PCSL 7
CHAP. 5
Information
Jiaxing Chenxiang Information Technology Co., Ltd., is an IT product test and consulting company located in Jiaixing, Zhejiang, P. R. China. As a professional tester of desktop security products and mobility security solutions, we are willing to provide references to the endpoint users for choosing security solutions and provide security vendors product improvement solutions and consulting services. Not only we test security solutions for different environment, but also we provide test and consulting reports of other IT products, e.g. battery, mobility devices, computer power, etc.
Tel: +86 573 82809089
Fax: +86 573 82808561
Mail: [email protected]
Website: https://www.pitci.com
Address: Room 3304-3306, Building 3, NO.3339 Linggongtang Road, Jiaxing, Zhejiang, P. R. CHINA, 314000
Attorney: Zhejiang Nanhu Law Firm
8 PCSL
Windows Virus Cleaning Test Report 2015 Feb.
CHAP. 6
Rights Statement
Unless otherwise stated, Jiaxing Chenxiang Information Technology Co., Ltd. (hereinafter referred to as “Chenxiang Information Technology”) owns the copyright of this report. Without prior written consent of Chenxiang Information Technology, no other unit or individual shall have the right to alter the contents of this report and use this report for commercial purposes by any means (including but not limited to transmission, dissemination, reproduction, excerpt, etc.).
Unless otherwise stated, Chenxiang Information Technology shall be the rightful owner of the trademarks, service marks of Chenxiang Information Technology used in the report. Any action of infringing upon the legal rights of Chenxiang Information Technology is prohibited, Chenxiang Information Technology shall have the right to pursue the legal liability of the infringer in accordance with the law.
PCSL 9
Windows Virus Cleaning Test Report 2015 Feb.
CHAP. 7
Disclaimer
Notice that before using the report issued by Jiaxing Chenxiang Information Technology Co. Ltd. (hereinafter referred to as “Chenxiang Information Technology”), please carefully read and fully understand the terms and conditions of this disclaimer (hereinafter referred to as “Disclaimer“), including the clauses of exclusion or restriction of the liabilities of Chenxiang Information Technology and the limitation the rights of users. If you have any objection to the terms and conditions of this Disclaimer, you have the right not to use this report, the act of using this report will be regarded as an acceptance and the recognition of the terms and conditions of this Disclaimer, so by using this report, you agree to the following terms and conditions:
1. The report is provided by Chenxiang Information Technology, all the contents contained herein are for reference purpose only, but will not be regarded as the suggestion, invitation or warranty for readers to choose, purchase or use the products mentioned herein. Chenxiang Information Technology will not guarantee the absolute accuracy and completeness of the contents of the report, you should not rely solely on this report or substitute the viewpoints of the report for your independent judgment. If you have any queries, please consult the relevant departments of the State and then choose, purchase or use products by your independent judgment.
2. The contents contained herein is the judgment made by Chenxiang Information Technology to the product characteristics as of the date of the report published, in the future Chenxiang Information Technology will have the right to issue the new reports which contain different contents or draw different conclusions, but Chenxiang Information Technology has no obligation or responsibility to update the original report or inform readers of the update of it, in this case, Chenxiang Information Technology will bear no responsibility for readers’ loss of using the original report.
3. The report may contain links to other websites, which are provided solely for readers’ convenience to use, the contents of the linked websites are not any part of this report. Readers shall assume the
PCSL 10
Windows Virus Cleaning Test Report 2015 Feb.
risks and losses or bear the costs when visiting such websites, Chenxiang Information Technology will not guarantee the authenticity, completeness , accuracy and legitimacy of the contents of such websites (including but not limited to advertising, products or other information). Chenxiang Information Technology does not accept any liability (direct or indirect) for readers’ damages or losses arising from their clicking on or viewing such websites to obtain some information, products or service.
4. Chenxiang Information Technology may have or will have a business relationship with the companies which produce the products mentioned in this report, but has no obligation to notify readers about it, no matter there has already been or there will be such business relationship in the future.
5. The act of readers’receiving this report are not regarded as the establishment of the business relationship between readers and Chenxiang Information Technology, so there is no customer relationship existing, Chenxiang Information Technology does not accept any legal liability as the readers’ customer.
6. The products which are used to be tested as the samples by Chenxiang Information Technology are bought through official way and legal means, so the report is proper for products bought through official way and legal means, not for products bought through unofficial way and illegal means. Therefore it’s the users buying such products who will be responsible for any risk or loss arising therefrom. Chenxiang Information Technology will not have or accept any liability whatsoever for any such risk or loss.
7. Some trademarks, photos or patterns owned by units or individuals will probably be used in this report, if you think your legal right and interests are infringed, please contact Chenxiang Information Technology promptly, Chenxiang Information Technology will handle the matter as quickly as possible.
Chenxiang Information Technology reserves the rights to interpret, modify and update the Disclaimer.
11 PCSL
Windows Virus Cleaning Test Report 2015 Feb.