Retrospective / ProActive - Test May 2004 (www.av-comparatives.org) Copyright (c) by Andreas Clementi
	Developer				H+BEDV Datentechnik			Alwil Software			Softwin			DialogueScience			Frisk Software			Trend Micro				Kaspersky Labs			Network Associates			ESET			Symantec			Panda Software			GeCAD Software			Sophos
	Product name				AntiVir Professional			Avast! Professional			BitDefender Prof.			Dr. Web			F-Prot			Internet Security				KAV Personal			McAfee VirusScan			NOD32 Anti-Virus			Norton Anti-Virus			Panda Platinum IS			RAV Desktop			Sophos Anti-Virus
	Program version				6.22.00.09			4.1.342			7.2.0.0			4.30a			3.14b			11.10				4.5.0.95			8.0.26			2.000.9			10.0.1.13			8.02.00			8.6.105			3.78
	Version of engine / signature				6.23.0.60			0401-10			N/A			4.30.0			3.14.2			6.810.1005 (757)				N/A			4.3.20 / 4322			1.617			60204d			N/A			8.11			2.18
	Date of signature				02/06/2004			02/06/2004			02/06/2004			02/06/2004			02/05/2004			02/06/2004				02/06/2004			02/04/2004			02/06/2004			02/04/2004			02/06/2004			02/05/2004			02/06/2004
	Number of virus records				79.683			N/A			70.071			46.016			103.435			N/A				84.229			85.469			N/A			64.943			69.415			89.689			87.468
	ProActive detection of ITW-samples*
	In-The-Wild samples		73		0	0%		0	0%		3	4%		5	7%		0	0%		0	0%			0	0%		11	15%		24	33%		1	1%		12	16%		2	3%		0	0%
	ProActive detection of "NEW" zoo-samples**
	DOS viruses		10		0	0%		0	0%		4	40%		0	0%		0	0%		0	0%			5	50%		0	0%		0	0%		0	0%		0	0%		0	0%		0	0%
	Windows viruses		83		5	6%		5	6%		9	11%		15	18%		29	35%		0	0%			25	30%		47	57%		33	40%		24	29%		33	40%		8	10%		5	6%
	Macro viruses		5		2	40%		0	0%		3	60%		5	100%		3	60%		1	20%			4	80%		5	100%		5	100%		0	0%		4	80%		2	40%		0	0%
	Script viruses		141		0	0%		0	0%		8	6%		24	17%		4	3%		3	2%			2	1%		29	21%		2	1%		5	4%		11	8%		4	3%		0	0%
	Worms		541		46	9%		78	14%		199	37%		177	33%		30	6%		49	9%			163	30%		241	45%		244	45%		149	28%		151	28%		147	27%		54	10%
	Backdoors		1.593		34	2%		101	6%		652	41%		812	51%		119	7%		140	9%			823	52%		821	52%		923	58%		328	21%		288	18%		378	24%		105	7%
	Trojans		818		9	1%		2	0%		29	4%		51	6%		9	1%		1	0%			48	6%		184	22%		43	5%		65	8%		26	3%		8	1%		1	0%
	other malware		80		0	0%		3	4%		3	4%		0	0%		0	0%		0	0%			4	5%		9	11%		3	4%		5	6%		0	0%		1	1%		0	0%
	OtherOS malware		80		0	0%		0	0%		1	1%		0	0%		0	0%		0	0%			58	73%		14	18%		0	0%		56	70%		0	0%		12	15%		0	0%
	TOTAL		3.351		96	3%		189	6%		908	27%		1.084	32%		194	6%		194	6%			1.132	34%		1.350	40%		1.253	37%		632	19%		513	15%		560	17%		165	5%
	ProActive detection of "already known" zoo-samples***
	DOS viruses		151		30	20%		36	24%		50	33%		132	87%		42	28%		33	22%			53	35%		35	23%		46	30%		49	32%		27	18%		51	34%		25	17%
	Windows viruses		198		71	36%		100	51%		97	49%		123	62%		112	57%		95	48%			156	79%		172	87%		129	65%		138	70%		124	63%		133	67%		85	43%
	Macro viruses		68		37	54%		40	59%		62	91%		67	99%		65	96%		58	85%			61	90%		64	94%		64	94%		64	94%		56	82%		58	85%		42	62%
	Script viruses		187		38	20%		26	14%		98	52%		73	39%		70	37%		62	33%			144	77%		126	67%		47	25%		75	40%		68	36%		62	33%		38	20%
	Worms		428		174	41%		208	49%		255	60%		300	70%		181	42%		207	48%			381	89%		366	86%		284	66%		334	78%		219	51%		283	66%		199	46%
	Backdoors		751		146	19%		163	22%		418	56%		474	63%		154	21%		291	39%			657	87%		581	77%		445	59%		473	63%		317	42%		378	50%		167	22%
	Trojans		527		97	18%		56	11%		86	16%		235	45%		100	19%		105	20%			440	83%		335	64%		125	24%		239	45%		126	24%		105	20%		56	11%
	other malware		74		2	3%		8	11%		13	18%		18	24%		18	24%		6	8%			64	86%		28	38%		12	16%		28	38%		5	7%		15	20%		10	14%
	OtherOS malware		9		1	11%		1	11%		1	11%		3	33%		1	11%		4	44%			6	67%		6	67%		2	22%		3	33%		3	33%		6	67%		3	33%
	TOTAL		2.393		596	25%		638	27%		1.080	45%		1.425	60%		743	31%		861	36%			1.962	82%		1.713	72%		1.154	48%		1.403	59%		945	39%		1.091	46%		625	26%
	Retrospective test****
	All new samples above of last 3 months		5.817		692	12%		827	14%		1.991	34%		2.514	43%		937	16%		1.055	18%			3.094	53%		3.074	53%		2.431	42%		2.036	35%		1.470	25%		1.653	28%		790	14%
	ProActive detection of other samples*****
	Adware, Spyware		156		16	10%		11	7%		17	11%		34	22%		17	11%		17	11%			76	49%		85	54%		20	13%		62	40%		8	5%		7	4%		12	8%
	Backdoor/Trojan-Like Software		215		29	13%		58	27%		58	27%		44	20%		74	34%		16	7%			144	67%		156	73%		35	16%		37	17%		52	24%		51	24%		11	5%
	Constructors, Virus-, Hackertools		113		6	5%		6	5%		2	2%		12	11%		10	9%		5	4%			34	30%		18	16%		11	10%		19	17%		4	4%		3	3%		7	6%
	Dangerous software		110		12	11%		7	6%		26	24%		24	22%		8	7%		14	13%			68	62%		38	35%		7	6%		18	16%		5	5%		6	5%		5	5%
	Dialers		151		26	17%		4	3%		2	1%		15	10%		1	1%		13	9%			50	33%		49	32%		2	1%		36	24%		1	1%		56	37%		28	19%
	Intended samples, components, etc.		1.211		264	22%		29	2%		63	5%		55	5%		110	9%		49	4%			73	6%		817	67%		34	3%		138	11%		55	5%		859	71%		27	2%
	TOTAL		1.956		353	18%		115	6%		168	9%		184	9%		220	11%		114	6%			445	23%		1.163	59%		109	6%		310	16%		125	6%		982	50%		90	5%
	It is forbidden to make available the results in full or in parts on other sites. Please just refer a link to www.av-comparatives.org																							In order to have the highest available protection and proactive detection capabilities, keep your Anti-Virus always up-to-date. Many samples were detected by generic/heuristic when
	Reason: The content, the page or the results could change and users should also read the comments that can be found on other pages of our site.																							using the last update available before the samples appeared (esp. ItW-samples).
																								This retrospective test shows the proactive detection capability of the scanners over a 3-month period. Depending of periods and samples, results could be very different.
	NOTE: All products detects now most of the samples used in this test (and 100% of the ITW-samples)
	Please update your scanner as often as possible in order to be protected!																							This test shows the on-demand proactive detection capability with the best possibly settings that the scan engines had 3 months ago. This is not a "only-heuristic" test.
	During the last 3 months (February/March/April), 7.773 samples were new for us and we sorted and used them as follows:
	* = new ITW-samples appeared during the 5. February and the 5. May
	** = new zoo-samples received during the 5. February and the 5. May and that were new to all tested scanners. This category shows the pure proactive detection capability.
	*** = new zoo-samples received during the 5. February and the 5. May that were already known by some scanners.
	**** = this category contains all new samples (eccept intended samples, Adware, dialers, etc.) that we received within the 3 months and it shows.
	***** = Other new samples received during the 5. February and the 5. May that falls better in one of the listed subcategories.
	All tested products are very good, if you update your scanner as often as possible, you should be protected.
	If you update your scanner as often as possible, some scanners can reach a proactive detection of 100% of ItW-samples.
	In order to have the highest available protection and proactive detection capabilities, keep your Anti-Virus always up-to-date.
	Many samples were detected by generic/heuristic when using the last update available before the samples appeared (esp. ItW-samples).
	This retrospective test shows the proactive detection capability of the scanners over a 3-month period. Depending of periods and samples, results could be very different.
	This test shows the on-demand proactive detection capability with the best possibly settings that the scan engines had 3 months ago. This is not a "only-heuristic" test.
	Keep in mind that you should take care of ItW-samples and not of Zoo-samples that you will most probably NEVER encounter.
	We use mainly Zoo-samples, so our results are just of theoretical importance. For tests based mainly or only on ItW-samples which are more important for the real world, please visit the sites of some other independent testing institutions that you can find in our links sections.
	Last revision of this document: 08/22/2004