【转帖】世界各知名杀软年终大比武

lkj1025 发表于 2007-12-6 22:14

在雨林木风论坛，版主发起了一个专门针对微点的测试。版主发了6个据说过微点的病毒包，和一个含有36个最新病毒文件的包来测试各杀软的扫描能力。微点的用户都知道，微点是没有扫描功能的。那在这样的扫描测试中，微点的结果是什么样的呢？事实证明，微点在此次测试中，尽管没有扫描，但一样能报出36个中的32个（同号称具有最大病毒库的卡吧一样），余下的4个根本就不是病毒。可见，微点的主动防御是值得信任的，扫描对微点来说没多大用。下面就是各网友的测试结果，大家一看便知。（病毒样本就不上传了，有兴趣的可以去雨林亲自测试）

友情提醒：测试前先备份系统，或在影子、虚拟机下进行
附件为号称可以过微点的样本
36个新病毒下载地址
http://www.fs2you.com/zh-cn/file ... -8150-0014221f4662/
这个不需要影子或虚拟机，直接用杀软右键扫描压缩包，但不要解压

KIS7.0
http://www.luobo.cc/attachment/29_14435_6dc178290a4e210.jpg
卡巴最新版，号称世界上最大的病毒库。备受国内网友的推崇，已经被神话了。本次测试果然不负众望，36个文件中查出了32个病毒。经过检验，剩下的4个文件根本不是病毒，而是无法运行的垃圾文件。

微点
http://www.luobo.cc/attachment/29_14435_a930aeadaaebc88.gif
虽然微点没有扫描功能，但是依靠他独有的行为判断技术查到了31一个已知病毒，1个未知病毒。同样查出了32个病毒。

RSING2008
http://www.luobo.cc/attachment/29_14435_9a41c779ddcbb95.jpg瑞星对新病毒的查杀能力是如此的差......
我们曾经的骄傲啊。最新版2008虽然增加了主动防御功能，但是成了摆式。而号称70万的病毒库已经超越了卡巴的病毒库。
总文件数36个，瑞星居然查出了32个文件，可是病毒却只查出来11个病毒，最令人费解的是显示的查杀率居然是100%，那剩下的21个病毒哪里去了？难道是查到几个病毒都杀了就叫查杀率100%？太无奈了，现在瑞星的技术居然糊弄到如此地步.....

KV2008
http://www.luobo.cc/attachment/29_14435_6c01bbf2be4c519.jpg
KV表现也非常好，一样是查出来32个病毒，现在江民真是一门心思钻研技术了。已经超越了瑞星。

NOD32
http://www.luobo.cc/attachment/29_14435_425fb2fcf89f210.jpg
备受网友推崇的NOD32啊，很多网友都说NOD32的杀毒能力多强，这次测试查杀了13个病毒，不过他报了17个可疑文件，让我上报到ESET去分析....这次测试的表现说明了一切。

AVG系ewido anti-spyware
http://bbs.ylmf.com/attachment/Day_071108/10_887148_42f36f8392a5582.jpg
ewido只扫描到三个，汗一个！再次说明AVG系不能取代杀软

大家也都看看自己现在所有的杀软的表现吧.
原帖地址:http://bbs.ylmf.com/read-ylmf-ti ... toread--page-1.html

linchen 发表于 2007-12-6 22:26

用卡巴的路过,,,

DarkClouds 发表于 2007-12-6 22:36

里面貌似没有咖啡哦

shifeifeishi 发表于 2007-12-6 23:12

这么简单的测试不能说明问题。我承认瑞星比较垃圾。

jarodpeach 发表于 2007-12-6 23:16

测试不全面不科学

华西虎 发表于 2007-12-6 23:17

cxcx 发表于 2007-12-6 23:40

小红伞好像发现了33个：

AntiVir PersonalEdition Premium
Report file date: 2007年12月6日23:40

Scanning for 961767 virus strains and unwanted programs.

Licensed to:    my name
Serial number: 8888888888-ABCDEFG-9999
Platform:       Windows XP
Windows version:(Service Pack 2)
Username:       Administrator
Computer name: my pc

Version information:
BUILD.DAT : 308       17199 Bytes 2007-9-19 13:44:00
AVSCAN.EXE : 7.0.6.1    290856 Bytes 2007-9-5 17:03:42
AVSCAN.DLL : 7.0.6.0    49192 Bytes 2007-9-5 17:03:42
LUKE.DLL : 7.0.5.3    147496 Bytes 2007-9-5 17:03:42
LUKERES.DLL: 7.0.6.1    10280 Bytes 2007-9-5 17:03:42
ANTIVIR0.VDF : 6.40.0.0 11030528 Bytes 2007-7-18 17:24:28
ANTIVIR1.VDF : 7.0.0.0 1640448 Bytes 2007-9-13 02:03:36
ANTIVIR2.VDF : 7.0.1.30 1575424 Bytes2007-11-30 01:46:54
ANTIVIR3.VDF : 7.0.1.49    86528 Bytes 2007-12-5 04:10:19
AVEWIN32.DLL : 7.6.0.34 3125760 Bytes 2007-11-7 13:05:43
AVWINLL.DLL: 1.0.0.7    14376 Bytes 2007-2-26 03:36:26
AVPREF.DLL : 7.0.2.2    25640 Bytes 2007-9-5 17:03:42
AVREP.DLL : 7.0.0.1    155688 Bytes 2007-9-5 05:01:08
AVPACK32.DLL : 7.3.0.15 360488 Bytes 2007-8-24 02:53:16
AVREG.DLL : 7.0.1.6    30760 Bytes 2007-9-5 17:03:42
AVARKT.DLL : 1.0.0.20 278568 Bytes 2007-9-5 17:03:41
AVEVTLOG.DLL : 7.0.0.20    86056 Bytes 2007-9-5 17:03:42
NETNT.DLL : 7.0.0.0    7720 Bytes 2007-3-8 04:09:42
RCIMAGE.DLL: 7.0.1.30 2576424 Bytes 2007-9-5 17:03:35
RCTEXT.DLL : 7.0.62.0    86056 Bytes 2007-9-5 17:03:35
SQLITE3.DLL: 3.3.17.1 339968 Bytes 2007-9-5 17:03:42

Configuration settings for the scan:
Jobname..........................: ShlExt
Configuration file...............: C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\a231c9a5.avp
Logging..........................: low
Primary action...................: repair
Secondary action.................: ignore
Scan master boot sector..........: off
Scan boot sector.................: on
Boot sectors.....................: D:,
Scan memory......................: on
Process scan.....................: off
Scan registry....................: off
Search for rootkits..............: off
Scan all files...................: Intelligent file selection
Scan archives....................: on
Recursion depth..................: 20
Smart extensions.................: on
Macro heuristic..................: on
File heuristic...................: high
Skipped files....................: C:\Program Files\LKT898C\MODEM.DLL,

Start of the scan: 2007年12月6日23:40

Starting the file scan:

Begin scan in 'D:\zfiles\viruspackage\新建文件夹'
D:\zfiles\viruspackage\新建文件夹\1.dll
   Contains detection pattern of the Ad- or Spyware ADSPY/Vapsup.JR
         A backup was created as '47bc1821.qua'( QUARANTINE )
D:\zfiles\viruspackage\新建文件夹\10.exe
   Contains a detection pattern of the (dangerous) backdoor program BDS/Visel.AL Backdoor server programs
         A backup was created as '47861823.qua'( QUARANTINE )
D:\zfiles\viruspackage\新建文件夹\11.exe
   Contains a detection pattern of the (dangerous) backdoor program BDS/Hupigon.uyn Backdoor server programs
         A backup was created as '47861824.qua'( QUARANTINE )
D:\zfiles\viruspackage\新建文件夹\12.exe
   Contains a detection pattern of the (dangerous) backdoor program BDS/Hupigon.Gen Backdoor server programs
         A backup was created as '47861825.qua'( QUARANTINE )
D:\zfiles\viruspackage\新建文件夹\13.exe
   Is the Trojan horse TR/PSW.OnlineGames.gmu
         A backup was created as '47861826.qua'( QUARANTINE )
D:\zfiles\viruspackage\新建文件夹\14.exe
   Contains a detection pattern of the (dangerous) backdoor program BDS/Hupigon.Gen Backdoor server programs
         A backup was created as '47861827.qua'( QUARANTINE )
D:\zfiles\viruspackage\新建文件夹\15.exe
   Contains a detection pattern of the (dangerous) backdoor program BDS/Hupigon.Gen Backdoor server programs
         A backup was created as '47861828.qua'( QUARANTINE )
D:\zfiles\viruspackage\新建文件夹\16.exe
   Contains a detection pattern of the (dangerous) backdoor program BDS/Graybird.GN.187392 Backdoor server programs
         A backup was created as '47861829.qua'( QUARANTINE )
D:\zfiles\viruspackage\新建文件夹\17.exe
   Is the Trojan horse TR/Dldr.VB.bqb
         A backup was created as '4786182a.qua'( QUARANTINE )
D:\zfiles\viruspackage\新建文件夹\18.exe
   Is the Trojan horse TR/Hook.Shell.360
         A backup was created as '4786182b.qua'( QUARANTINE )
D:\zfiles\viruspackage\新建文件夹\19.exe
   Contains suspicious code HEUR/Crypted
         The file was moved to '4786182c.qua'!
D:\zfiles\viruspackage\新建文件夹\2.dll
   Is the Trojan horse TR/Vundo.Gen
         A backup was created as '461d1c8a.qua'( QUARANTINE )
D:\zfiles\viruspackage\新建文件夹\20.exe
   Contains a detection pattern of the (dangerous) backdoor program BDS/Hupigon.1093 Backdoor server programs
         A backup was created as '46271c8c.qua'( QUARANTINE )
D:\zfiles\viruspackage\新建文件夹\21.exe
   Contains a detection pattern of the (dangerous) backdoor program BDS/Delf.ccq Backdoor server programs
         A backup was created as '46271c8d.qua'( QUARANTINE )
D:\zfiles\viruspackage\新建文件夹\22.exe
   Contains a detection pattern of the (dangerous) backdoor program BDS/Bifrose.NQ.657 Backdoor server programs
         A backup was created as '46271c8e.qua'( QUARANTINE )
D:\zfiles\viruspackage\新建文件夹\23.exe
   Contains detection pattern of the Ad- or Spyware ADSPY/Vapsup.JQ
         A backup was created as '46271c8f.qua'( QUARANTINE )
D:\zfiles\viruspackage\新建文件夹\25.exe
   Contains a detection pattern of the (dangerous) backdoor program BDS/Hupigon.uyt Backdoor server programs
         A backup was created as '46271c81.qua'( QUARANTINE )
D:\zfiles\viruspackage\新建文件夹\26.bin
   Is the Trojan horse TR/Crypt.NSPM.Gen
         A backup was created as '46271c82.qua'( QUARANTINE )
D:\zfiles\viruspackage\新建文件夹\28.exe
   Is the Trojan horse TR/Agent.ckk.1
         A backup was created as '46271c84.qua'( QUARANTINE )
D:\zfiles\viruspackage\新建文件夹\29.exe
   Is the Trojan horse TR/Drop.Agent.bct.1
         A backup was created as '46271c85.qua'( QUARANTINE )
D:\zfiles\viruspackage\新建文件夹\30.exe
   Is the Trojan horse TR/Spy.Agent.aiz.2
         A backup was created as '46271c80.qua'( QUARANTINE )
D:\zfiles\viruspackage\新建文件夹\31.exe
   Is the Trojan horse TR/Crypt.NSAnti.Gen
         A backup was created as '47861838.qua'( QUARANTINE )
D:\zfiles\viruspackage\新建文件夹\32.exe
   Is the Trojan horse TR/Spy.Delf.PS.13
         A backup was created as '4786182d.qua'( QUARANTINE )
D:\zfiles\viruspackage\新建文件夹\34.exe
   Is the Trojan horse TR/Crypt.NSPM.Gen
         A backup was created as '46271c83.qua'( QUARANTINE )
D:\zfiles\viruspackage\新建文件夹\35.exe
   Contains a detection pattern of the (dangerous) backdoor program BDS/Hupigon.Gen Backdoor server programs
         A backup was created as '46271c86.qua'( QUARANTINE )
D:\zfiles\viruspackage\新建文件夹\36.exe
   Is the Trojan horse TR/Copiet.B.1
         A backup was created as '4786182e.qua'( QUARANTINE )
D:\zfiles\viruspackage\新建文件夹\37.exe
   Contains a detection pattern of the (dangerous) backdoor program BDS/Hupigon.uys Backdoor server programs
         A backup was created as '4786182f.qua'( QUARANTINE )
D:\zfiles\viruspackage\新建文件夹\39.exe
   Contains a detection pattern of the (dangerous) backdoor program BDS/Hupigon.Gen Backdoor server programs
         A backup was created as '46271c98.qua'( QUARANTINE )
D:\zfiles\viruspackage\新建文件夹\4.exe
   Contains a detection pattern of the (dangerous) backdoor program BDS/Hupigon.Gen Backdoor server programs
         A backup was created as '47bd1822.qua'( QUARANTINE )
D:\zfiles\viruspackage\新建文件夹\5.exe
   Contains detection pattern of the dropper DR/Delphi.Gen
         A backup was created as '461c1c8b.qua'( QUARANTINE )
D:\zfiles\viruspackage\新建文件夹\6.exe
   Contains a detection pattern of the (dangerous) backdoor program BDS/Graybird.AK Backdoor server programs
         A backup was created as '47bd1824.qua'( QUARANTINE )
D:\zfiles\viruspackage\新建文件夹\7.exe
   Contains a detection pattern of the (dangerous) backdoor program BDS/Hupigon.1093.3 Backdoor server programs
         A backup was created as '461c1c8d.qua'( QUARANTINE )
D:\zfiles\viruspackage\新建文件夹\8.exe
   Contains a detection pattern of the (dangerous) backdoor program BDS/Hupigon.Gen Backdoor server programs
         A backup was created as '47bd1826.qua'( QUARANTINE )
D:\zfiles\viruspackage\新建文件夹\9.exe
   Contains detection pattern of the dropper DR/BHO.K.1
         A backup was created as '461c1c8f.qua'( QUARANTINE )

End of the scan: 2007年12月6日23:40
Used time: 00:03 min

The scan has been done completely.

   1 Scanning directories
36 Files were scanned
33 viruses and/or unwanted programs were found
   1 Files were classified as suspicious:
   0 files were deleted
   0 files were repaired
34 files were moved to quarantine
   0 files were renamed
   0 Files cannot be scanned
   3 Files not concerned
   0 Archives were scanned
   0 Warnings
   0 Notes

[ Edited bycxcx on 2007-12-6 23:42 ]

shooirn 发表于 2007-12-7 00:29

用SAV的路过，感觉微点的广告力度很大。

andoon 发表于 2007-12-7 09:51

看了这个结果～～我还是用NOD32不为别的占系统资源少～· 偶P3的机器供不起卡巴～～要是CORE我就用卡吧了

齐鲁隐农 发表于 2007-12-7 10:24

F-Secure找到31个

juior 发表于 2007-12-7 10:41

这样评比不见得科学，因为样本数太少了吧。

liujirong 发表于 2007-12-7 10:45

下载了病毒库，我用MCAFEE试一试，稍后报道查杀战况

liujirong 发表于 2007-12-7 10:52

我用MCAFEE 的 VirusScan Eenterprise＋AntiSpyware Enterprise 8.5.0i补丁包是patch 4 查杀出24个，晕倒，难道MCAFEE也不行了吗？详细查杀战况如下图

华西虎 发表于 2007-12-7 11:00

slideaway 发表于 2007-12-7 11:06

算是微点的枪文吗？？

realise624 发表于 2007-12-7 11:23

病毒样本太少，没有参考价值
如果是枪文的话，完全可以找其它杀软杀不掉的来做这个包子

quesha 发表于 2007-12-7 11:24

怎么不测一下诺顿的杀毒软件啊

华西虎 发表于 2007-12-7 11:42

spookygao 发表于 2007-12-7 13:30

我也用的小红伞，P版的，没有辜负我的期望啊，我的T61软件安全就靠他了。

老佛爷 发表于 2007-12-7 13:48

axc 发表于 2007-12-7 14:04

nod32 查出27个病毒库2708

axc 发表于 2007-12-7 14:27

avg 7.5 查出31 个 12月7日病毒库

cxcx 发表于 2007-12-7 14:47

Posted by axc on 2007-12-7 14:04 http://www.ibmnb.com/images/common/back.gif
nod32 查出27个病毒库2708
估计是有人上报样本给NOD32然后病毒库更新过了^u^

realise624 发表于 2007-12-7 14:54

刚注意到标题是“世界知名杀软年终大比武”……里面居然有瑞星、江民，无语了*.*lll

华西虎 发表于 2007-12-7 18:43

华西虎 发表于 2007-12-7 19:14

wwwpx 发表于 2007-12-7 19:56

回复 #24 realise624 的帖子

好歹也是国内“知名”吧。。

华西虎 发表于 2007-12-7 22:24

Amilon 发表于 2007-12-7 23:41

nod32 查出28个，3.0汉化+最新病毒库

shinyue 发表于 2007-12-9 02:14

呵呵,看图说话吧. 不知雨林木风是怎么测试的？
小红伞P版和瑞星2008

[ Edited byshinyue on 2007-12-9 02:15 ]

页: [1] 2

专门网's Archiver

【转帖】世界各知名杀软年终大比武

回复 #24 realise624 的帖子