PCSL. PCSL IT Consulting Institute. Windows Virus Cleaning Test Report 感染型病毒清除测试报告. Celebrating Technology Innovation

Size: px

Start display at page:

Download "PCSL. PCSL IT Consulting Institute. Windows Virus Cleaning Test Report 感染型病毒清除测试报告. Celebrating Technology Innovation"

Julie Sparks
5 years ago
Views:

1 2015 IT Consulting Institute ❷ Windows Virus Cleaning Test Report 感染型病毒清除测试报告 Celebrating Technology Innovation

2 报告目录 Table of Contents P1 P2 P3 测试背景 Background 测试流程 Test Process 待测软件 Tested Software P4 P8 P9 测试结果 Test Result 相关信息 Information 权利说明 Rights Statement P10 免责声明 Disclaimer

3 CHAP. 1 Background Virus is a computer program designed to infect files. In addition, some can have annoying, destructive or even irreparable effects on systems. When they enter a system, without the user s consent or knowledge, they are normally hosted within the code of other programs. The virus does not act until the infected program is run. Some of them are programmed to activate when a certain condition is met (a specific date, a certain user action, etc.). The term virus is used due to the similarity with biological viruses. Just as biological viruses enter the human body and infect a cell, which in turn infects new cells, computer viruses enter computers and infect files by inserting their "code". When the infected program is run, the code is activated and the virus begins to spread. The effects of viruses can be highly annoying to users as an infection of a file can lead to computer slowdowns or alteration of system behavior and functionality. Viruses normally target executable programs (files with.exe or.com extensions). However, they can also infect other types of files, such as web pages (.HTML), Word documents (.DOC), spreadsheets (.XLS), etc. Viruses can be classified according to several criteria: according to their functionality, the techniques they use to infect, the types of files they infect, the places they hide, the operating system or platforms they attack, etc. Normally, if a computer is infected by a classic virus, you need to have a security product to scan the infected PC and remove the virus. 1

4 CHAP. 2 Test Process Windows 8 X64 system will be prepared and backup images are created then. Detailed process is as follows: different pre-infected vectors are prepared and delivered to the test machine. 2. Install a security product on the test machine. 3. Update the security product and perform an on-demand recommended scan against the pre-infected vectors, use repair or clean option if there is no recommended actions to be notified. 4. Check the files after scanning and generate the result. 5. Restore the backup image and repeat the three steps above. 2

5 CHAP. 3 Tested Software Software Vendor Version 360 Antivirus Qihoo Ad-Aware Free Antivirus+ Lavasoft AhnLab V3 Internet Security AhnLab (Build 1607) Avast Free Antivirus AVAST AVG Antivirus Free AVG Avira Free Antivirus Avira Baidu Antivirus Baidu Bitdefender Antivirus Plus Bitdefender COMODO Antivirus COMODO Dr.Web Security Space Dr.Web 10.0 Emsisoft Anti-Malware Emsisoft escan for Windows MicroWorld DB ESET Smart Security ESET FortiClient Fortinet F-Secure Internet Security F-Secure build 100 G DATA ANTIVIRUS G DATA HitmanPro SurfRight IKARUS anti.virus IKARUS Immunet Protect Cisco K7 Ultimate Security K Kaspersky Internet Security Kaspersky (b) Kingsoft Duba Kingsoft 2015.SP NANO Antivirus NANO Security Norton Security Symantec Psafe Total Psafe Quick Heal AntiVirus Pro Quick Heal ( ) Tencent PC Manager Tencent Total Defense Total Defense TrustPort Antivirus TrustPort UnThreat AntiVirus Scandium Security UtilTool Antivirus UtilTool VIPRE Antivirus ThreatTrack Windows Defender Microsoft ZoneAlarm Free Antivirus + Firewall Check Point

6 CHAP. 4 Test Result Vendor Sample 1 Sample 2 Sample 3 Sample 4 Sample 5 Sample 6 AhnLab Untreated Successful Successful Untreated PE Corrupted Successful AVAST Successful Successful Successful Successful Successful Successful AVG Successful Successful Deleted Deleted Deleted Successful Avira Deleted Successful Deleted Deleted Successful Deleted Baidu Successful Successful Successful Successful Successful Successful Bitdefender Successful Successful Deleted Successful PE Corrupted Successful Check Point Successful Successful Successful Successful PE Corrupted Successful Cisco Untreated Deleted Deleted Deleted Deleted Deleted COMODO Deleted Successful Deleted Deleted Deleted Deleted Dr.Web Successful Successful PE Corrupted Successful PE Corrupted Successful Emsisoft Deleted Deleted Deleted Deleted Deleted Deleted ESET Successful Successful Successful Successful Successful Successful Fortinet Deleted Deleted Deleted Deleted Deleted Deleted F-Secure Deleted Deleted Deleted Deleted Deleted Deleted G DATA Successful Successful Deleted Successful PE Corrupted Successful IKARUS Deleted Deleted Deleted Deleted Deleted Deleted K7 Successful Successful Deleted Deleted Deleted Deleted Kaspersky Successful Successful Successful Successful PE Corrupted Successful Kingsoft Successful Untreated Successful Untreated Deleted Deleted Lavasoft Successful Successful Deleted Successful PE Corrupted Successful Microsoft Successful Successful Successful Deleted Successful Successful MicroWorld Successful Successful Deleted Successful PE Corrupted Deleted NANO Security Successful Successful Deleted Successful PE Corrupted Untreated Psafe Successful Deleted Successful Deleted Deleted Successful Qihoo 360 Successful Successful Successful Deleted Successful Successful Quick Heal Successful Successful Successful Successful Successful Successful Scandium Security Deleted Successful Successful Deleted Deleted Successful SurfRight Deleted Deleted Deleted Deleted Deleted Deleted Symantec Successful Successful Successful Deleted Deleted Successful Tencent Successful Deleted Successful Successful Successful PE Corrupted ThreatTrack Untreated Successful Successful Untreated Untreated Successful Total Defense Successful Successful Successful Deleted Successful Deleted TrustPort Successful Successful Deleted Successful PE Corrupted Successful UtilTool Deleted Deleted Deleted Deleted Deleted Deleted 4

7 Vendor Sample 7 Sample 8 Sample 9 Sample 10 Sample 11 Sample 12 AhnLab Successful Successful Successful Successful Successful Successful AVAST Successful Successful Successful Successful Successful Successful AVG Successful Deleted Deleted Successful Deleted Successful Avira Deleted Deleted Deleted Deleted Deleted Successful Baidu Successful Successful Deleted Successful Successful Successful Bitdefender Deleted Successful Deleted Successful Successful Successful Check Point Successful Successful Successful Successful Successful Successful Cisco Untreated Deleted Untreated Deleted Deleted Deleted COMODO Deleted Deleted Deleted Deleted Deleted Successful Dr.Web Successful Successful Successful Successful Successful Successful Emsisoft Deleted Deleted Deleted Deleted Deleted Deleted ESET Successful Successful Successful Successful Deleted Successful Fortinet Deleted Deleted Deleted Deleted Deleted Deleted F-Secure Deleted Deleted Deleted Deleted Deleted Deleted G DATA Deleted Successful Deleted Successful Successful Successful IKARUS Deleted Deleted Deleted Deleted Deleted Deleted K7 Deleted Successful Deleted Successful Successful Successful Kaspersky Successful Successful Successful Successful Successful Successful Kingsoft Successful Successful Successful Successful Successful Successful Lavasoft Deleted Successful Deleted Successful Successful Successful Microsoft Successful Successful Successful Successful Successful Successful MicroWorld Deleted Successful Deleted Deleted Successful Successful NANO Security Deleted Untreated Deleted Untreated Successful Successful Psafe Successful Successful Successful Successful Successful Successful Qihoo 360 Successful Successful Successful Successful Successful Successful Quick Heal Successful Successful Successful Successful Successful Successful Scandium Security Successful Successful Successful Successful Successful Successful SurfRight Deleted Deleted Deleted Deleted Deleted Deleted Symantec Successful Deleted Successful Successful Successful Successful Tencent PE Corrupted Successful Successful PE Corrupted Successful Successful ThreatTrack Successful Successful Successful Successful Successful Successful Total Defense Successful Successful Successful Deleted Successful Successful TrustPort Deleted Successful Deleted Successful Successful Successful UtilTool Deleted Deleted Deleted Deleted Deleted Deleted 5

8 Vendor Sample 13 Sample 14 Sample 15 Sample 16 Sample 17 AhnLab Successful Successful Successful Successful Successful AVAST Successful Untreated Untreated Successful Untreated AVG Successful Successful Deleted Successful Deleted Avira Deleted Successful Deleted Successful Deleted Baidu Successful Successful Deleted Successful Successful Bitdefender Successful Successful Successful Successful Successful Check Point Successful Successful Successful Successful Successful Cisco Deleted Deleted Untreated Deleted Deleted COMODO Successful Deleted Deleted Deleted Deleted Dr.Web Successful Successful Successful Successful Successful Emsisoft Deleted Deleted Deleted Deleted Deleted ESET Successful Successful Successful Successful Deleted Fortinet Deleted Deleted Deleted Deleted Deleted F-Secure Deleted Deleted Deleted Deleted Deleted G DATA Successful Deleted Successful Successful Successful IKARUS Deleted Deleted Deleted Deleted Deleted K7 Successful Successful Successful Successful Successful Kaspersky Successful Successful Successful Successful Successful Kingsoft Deleted PE Corrupted Deleted Successful Successful Lavasoft Successful Successful Successful Successful Successful Microsoft Successful Successful Successful Successful Successful MicroWorld Successful Successful Successful Successful Successful NANO Security Successful Successful Untreated Successful Deleted Psafe Successful Deleted Successful Successful Successful Qihoo 360 Successful Deleted Successful Successful Successful Quick Heal Successful Successful Successful Successful Successful Scandium Security Successful Successful Deleted Successful Deleted SurfRight Deleted Deleted Deleted Deleted Deleted Symantec Successful Successful Successful Successful Successful Tencent Successful Deleted Successful Successful Successful ThreatTrack Successful Successful Untreated Successful Untreated Total Defense Successful Successful Successful Successful Successful TrustPort Successful Successful Successful Successful Successful UtilTool Deleted Deleted Deleted Deleted Deleted 6

9 Vendor Score Quick Heal 17.0 Kaspersky 16.5 Microsoft 16.5 Check Point 16.5 Qihoo Baidu 16.0 Dr.Web 16.0 ESET 16.0 AVAST 15.5 Symantec 15.5 Total Defense 15.5 Lavasoft 15.0 Bitdefender 15.0 Psafe 15.0 TrustPort 15.0 AhnLab 14.5 G DATA 14.5 Tencent 14.5 Scandium Security 14.5 MicroWorld 14.0 K AVG 13.0 Kingsoft 12.5 ThreatTrack 12.0 Avira 11.0 NANO Security 10.5 COMODO 10.0 Emsisoft 8.5 Fortinet 8.5 F-Secure 8.5 SurfRight 8.5 IKARUS 8.5 UtilTool 8.5 Cisco 6.5 Remarks: Successful: 1 point for a successful cleaning Deleted: 0.5 point for an action of deleting vector directly PE Corrupted: 0.5 point if PE structure is corrupted after cleaning Untreated: 0 point if security product takes no actions 7

CHAP. 5 Information Jiaxing Chenxiang Information Technology Co., Ltd., is an IT product test and consulting company located in Jiaixing, Zhejiang, P. R. China.

10 CHAP. 5 Information Jiaxing Chenxiang Information Technology Co., Ltd., is an IT product test and consulting company located in Jiaixing, Zhejiang, P. R. China. As a professional tester of desktop security products and mobility security solutions, we are willing to provide references to the endpoint users for choosing security solutions and provide security vendors product improvement solutions and consulting services. Not only we test security solutions for different environment, but also we provide test and consulting reports of other IT products, e.g. battery, mobility devices, computer power, etc. Tel: Fax: Mail: info@pitci.com Website: Address: Room , Building 3, NO.3339 Linggongtang Road, Jiaxing, Zhejiang, P. R. CHINA, Attorney: Zhejiang Nanhu Law Firm 8

11 CHAP. 6 Rights Statement Unless otherwise stated, Jiaxing Chenxiang Information Technology Co., Ltd. (hereinafter referred to as Chenxiang Information Technology ) owns the copyright of this report. Without prior written consent of Chenxiang Information Technology, no other unit or individual shall have the right to alter the contents of this report and use this report for commercial purposes by any means (including but not limited to transmission, dissemination, reproduction, excerpt, etc.). Unless otherwise stated, Chenxiang Information Technology shall be the rightful owner of the trademarks, service marks of Chenxiang Information Technology used in the report. Any action of infringing upon the legal rights of Chenxiang Information Technology is prohibited, Chenxiang Information Technology shall have the right to pursue the legal liability of the infringer in accordance with the law. 9

12 CHAP. 7 Disclaimer Notice that before using the report issued by Jiaxing Chenxiang Information Technology Co. Ltd. (hereinafter referred to as Chenxiang Information Technology ), please carefully read and fully understand the terms and conditions of this disclaimer (hereinafter referred to as Disclaimer ), including the clauses of exclusion or restriction of the liabilities of Chenxiang Information Technology and the limitation the rights of users. If you have any objection to the terms and conditions of this Disclaimer, you have the right not to use this report, the act of using this report will be regarded as an acceptance and the recognition of the terms and conditions of this Disclaimer, so by using this report, you agree to the following terms and conditions: 1. The report is provided by Chenxiang Information Technology, all the contents contained herein are for reference purpose only, but will not be regarded as the suggestion, invitation or warranty for readers to choose, purchase or use the products mentioned herein. Chenxiang Information Technology will not guarantee the absolute accuracy and completeness of the contents of the report, you should not rely solely on this report or substitute the viewpoints of the report for your independent judgment. If you have any queries, please consult the relevant departments of the State and then choose, purchase or use products by your independent judgment. 2. The contents contained herein is the judgment made by Chenxiang Information Technology to the product characteristics as of the date of the report published, in the future Chenxiang Information Technology will have the right to issue the new reports which contain different contents or draw different conclusions, but Chenxiang Information Technology has no obligation or responsibility to update the original report or inform readers of the update of it, in this case, Chenxiang Information Technology will bear no responsibility for readers loss of using the original report. 3. The report may contain links to other websites, which are provided solely for readers convenience to use, the contents of the linked websites are not any part of this report. Readers shall assume the 10

13 risks and losses or bear the costs when visiting such websites, Chenxiang Information Technology will not guarantee the authenticity, completeness, accuracy and legitimacy of the contents of such websites (including but not limited to advertising, products or other information). Chenxiang Information Technology does not accept any liability (direct or indirect) for readers damages or losses arising from their clicking on or viewing such websites to obtain some information, products or service. 4. Chenxiang Information Technology may have or will have a business relationship with the companies which produce the products mentioned in this report, but has no obligation to notify readers about it, no matter there has already been or there will be such business relationship in the future. 5. The act of readers receiving this report are not regarded as the establishment of the business relationship between readers and Chenxiang Information Technology, so there is no customer relationship existing, Chenxiang Information Technology does not accept any legal liability as the readers customer. 6. The products which are used to be tested as the samples by Chenxiang Information Technology are bought through official way and legal means, so the report is proper for products bought through official way and legal means, not for products bought through unofficial way and illegal means. Therefore it s the users buying such products who will be responsible for any risk or loss arising therefrom. Chenxiang Information Technology will not have or accept any liability whatsoever for any such risk or loss. 7. Some trademarks, photos or patterns owned by units or individuals will probably be used in this report, if you think your legal right and interests are infringed, please contact Chenxiang Information Technology promptly, Chenxiang Information Technology will handle the matter as quickly as possible. Chenxiang Information Technology reserves the rights to interpret, modify and update the Disclaimer. 11

Android Malware Detection Test 手机安全软件病毒检测率测试 Mar. Celebrating Technology Innovation

Android Malware Detection Test 手机安全软件病毒检测率测试 2016 Mar Celebrating Technology Innovation 报告目录 Table of Contents P1 P2 P2 测试背景测试流程待测软件 Background Test Process Tested Software P3 P5 P5 测试结果相关信息权利说明 Test Result