Retrospective / ProActive - Test November 2008 Copyright (c) by AV-Comparatives e.V. (www.av-comparatives.org) - Tested on Windows XP Professional SP3                                                                
 
     
  Company     AVIRA     G DATA Security   Alwil Software   AVG Technologies   BitDefender     MicroWorld     ESET     F-Secure     Kaspersky Labs   McAfee     Microsoft     Norman ASA     Symantec     Sophos     Trustport     VirusBlokAda    
  Product     AntiVir Premium   AntiVirusKit (AVK)   avast! Professional   AVG Anti-Virus   BitDefender AV   eScan Anti-Virus   ESET NOD32 Antivirus   F-Secure Anti-Virus   Kaspersky AV   McAfee VirusScan+   Microsoft OneCare   Norman AV+AS   Norton Anti-Virus   Sophos E S&C   TrustPort Antivirus   VBA32 Anti-Virus  
  Program version     8.1.0.362     19.0.0.49     4.8.1229     8.0.156     11.0.17     9.0.824.217     3.0.669.0     9.00.148     8.0.0.454     12.1.110     2.5.2900.03     7.10     16.0.0.125     7.5.1     2.8.0.3006     3.12.8.2    
  Engine / signature version     8.01.01.15 / 7.00.05.212   N/A     080804-0     270.5.12/1590   N/A     N/A      3325      8.10.14240     N/A     5300.2777 / 5352     1.3807 / 1.41.18.0    5.93.01     100804c / 84315   2.75.4 / 4.31E+305   N/A     N/A    
  Number of virus records         1.533.821      unknown       unknown      unknown         1.414.639     unknown     unknown     unknown         1.045.550            437.316     753.216     1.979.741     2.043.091     447.478     unknown     unknown    
                                                         
  Certification level reached      ADVANCED       ADVANCED       STANDARD       STANDARD       STANDARD            ADVANCED+            ADVANCED       ADVANCED       ADVANCED       STANDARD       ADVANCED             STANDARD       STANDARD     
                                                             
  Number of false positives*        many       many       many      many      many      few      few      few     many     very few     very few      many      few      (very many)*     many       many     
  ProActive detection of "NEW" samples**  
  Windows viruses            540                  494 91%                  332 61%                  298 55%                  303 56%                  324 60%                  276 51%                  306 57%                  365 68%                  498 92%                  484 90%                  451 84%                    46 9%                  309 57%                  324 60%                  312 58%                  195 36%  
  Script malware            187                    45 24%                    91 49%                    79 42%                    24 13%                    36 19%                    50 27%                    20 11%                    52 28%                    53 28%                    37 20%                    82 44%                    13 7%                    50 27%                    35 19%                    30 16%                    18 10%  
  Worms         1.390               1.020 73%                  935 67%                  503 36%                  735 53%                  801 58%                  166 12%                  840 60%                  167 12%                  826 59%                  315 23%                  592 43%                  406 29%                  734 53%                  783 56%                  827 59%                  282 20%  
  Backdoors       10.120               8.114 80%               7.853 78%               6.052 60%               5.524 55%               5.908 58%                  791 8%               5.838 58%               1.187 12%               6.677 66%               4.206 42%               5.151 51%               3.412 34%               5.064 50%               6.863 68%               6.495 64%               3.649 36%  
  Trojans       33.165             20.815 63%             17.483 53%             11.016 33%             11.507 35%             14.046 42%               2.285 7%             15.979 48%               2.546 8%             19.251 58%               8.262 25%             13.777 42%               7.632 23%             13.876 42%             14.847 45%             14.460 44%               7.871 24%  
  other malware            429                  302 70%                  220 51%                  140 33%                  169 39%                  172 40%                    32 7%                  217 51%                    36 8%                  178 41%                  182 42%                  244 57%                  103 24%                  200 47%                  178 41%                  179 42%                    54 13%  
  TOTAL       45.831             30.790 67%             26.914 59%             18.088 39%             18.262 40%             21.287 46%               3.600 8%             23.200 51%               4.353 9%             27.483 60%             13.486 29%             20.297 44%             11.612 25%             20.233 44%             23.030 50%             22.303 49%             12.069 26%  
         
  Results over first week only   11.295   71%   66%   40%   43%   51%   18%   54%   20%   71%   37%   47%   25%   44%   51%   50%   26%  
         
 
It is forbidden to provide those tables in full or in parts on other sites! Please just refer a link to www.av-comparatives.org
Please read carefully the test reports and the other documents on our website to understand how to interpret the results.
* = read the reports for details ( ! ) (Report Nr. 19 and Nr. 20)
** = new unique malware appeared between the 4th and the 31st August 2008; adware, spyware, non-working stuff, etc. are not included
This retrospective test shows the proactive on-demand detection capability that the scanners had in August 2008 with highest on-demand detection settings.
To determine how good a scanner is in detecting malware on-demand in general with updated signatures, have a look on our February and August tests.
The certification levels take also the false alarm rates into account.