【转帖】世界各知名杀软年终大比武

lkj1025

在雨林木风论坛，版主发起了一个专门针对微点的测试。版主发了6个据说过微点的病毒包，和一个含有36个最新病毒文件的包来测试各杀软的扫描能力。微点的用户都知道，微点是没有扫描功能的。那在这样的扫描测试中，微点的结果是什么样的呢？事实证明，微点在此次测试中，尽管没有扫描，但一样能报出36个中的32个（同号称具有最大病毒库的卡吧一样），余下的4个根本就不是病毒。可见，微点的主动防御是值得信任的，扫描对微点来说没多大用。下面就是各网友的测试结果，大家一看便知。（病毒样本就不上传了，有兴趣的可以去雨林亲自测试）

友情提醒：测试前先备份系统，或在影子、虚拟机下进行
附件为号称可以过微点的样本
36个新病毒下载地址
http://www.fs2you.com/zh-cn/file ... -8150-0014221f4662/
这个不需要影子或虚拟机，直接用杀软右键扫描压缩包，但不要解压


KIS7.0

卡巴最新版，号称世界上最大的病毒库。备受国内网友的推崇，已经被神话了。本次测试果然不负众望，36个文件中查出了32个病毒。经过检验，剩下的4个文件根本不是病毒，而是无法运行的垃圾文件。

微点

虽然微点没有扫描功能，但是依靠他独有的行为判断技术查到了31一个已知病毒，1个未知病毒。同样查出了32个病毒。

RSING2008
瑞星对新病毒的查杀能力是如此的差......
我们曾经的骄傲啊。最新版2008虽然增加了主动防御功能，但是成了摆式。而号称70万的病毒库已经超越了卡巴的病毒库。
总文件数36个，瑞星居然查出了32个文件，可是病毒却只查出来11个病毒，最令人费解的是显示的查杀率居然是100%，那剩下的21个病毒哪里去了？难道是查到几个病毒都杀了就叫查杀率100%？太无奈了，现在瑞星的技术居然糊弄到如此地步.....

KV2008

KV表现也非常好，一样是查出来32个病毒，现在江民真是一门心思钻研技术了。已经超越了瑞星。

NOD32

备受网友推崇的NOD32啊，很多网友都说NOD32的杀毒能力多强，这次测试查杀了13个病毒，不过他报了17个可疑文件，让我上报到ESET去分析....这次测试的表现说明了一切。

AVG系ewido anti-spyware

ewido只扫描到三个，汗一个！再次说明AVG系不能取代杀软

大家也都看看自己现在所有的杀软的表现吧.
原帖地址:http://bbs.ylmf.com/read-ylmf-ti ... toread--page-1.html

linchen

用卡巴的路过,,,

DarkClouds

里面貌似没有咖啡哦

shifeifeishi

这么简单的测试不能说明问题。我承认瑞星比较垃圾。

jarodpeach

测试不全面不科学

cxcx

小红伞好像发现了33个：



AntiVir PersonalEdition Premium
Report file date: 2007年12月6日  23:40

Scanning for 961767 virus strains and unwanted programs.

Licensed to:      my name
Serial number:    8888888888-ABCDEFG-9999
Platform:         Windows XP
Windows version:  (Service Pack 2)  [5.1.2600]
Username:         Administrator
Computer name:    my pc

Version information:
BUILD.DAT    : 308           17199 Bytes   2007-9-19 13:44:00
AVSCAN.EXE   : 7.0.6.1      290856 Bytes    2007-9-5 17:03:42
AVSCAN.DLL   : 7.0.6.0       49192 Bytes    2007-9-5 17:03:42
LUKE.DLL     : 7.0.5.3      147496 Bytes    2007-9-5 17:03:42
LUKERES.DLL  : 7.0.6.1       10280 Bytes    2007-9-5 17:03:42
ANTIVIR0.VDF : 6.40.0.0    11030528 Bytes   2007-7-18 17:24:28
ANTIVIR1.VDF : 7.0.0.0     1640448 Bytes   2007-9-13 02:03:36
ANTIVIR2.VDF : 7.0.1.30    1575424 Bytes  2007-11-30 01:46:54
ANTIVIR3.VDF : 7.0.1.49      86528 Bytes   2007-12-5 04:10:19
AVEWIN32.DLL : 7.6.0.34    3125760 Bytes   2007-11-7 13:05:43
AVWINLL.DLL  : 1.0.0.7       14376 Bytes   2007-2-26 03:36:26
AVPREF.DLL   : 7.0.2.2       25640 Bytes    2007-9-5 17:03:42
AVREP.DLL    : 7.0.0.1      155688 Bytes    2007-9-5 05:01:08
AVPACK32.DLL : 7.3.0.15     360488 Bytes   2007-8-24 02:53:16
AVREG.DLL    : 7.0.1.6       30760 Bytes    2007-9-5 17:03:42
AVARKT.DLL   : 1.0.0.20     278568 Bytes    2007-9-5 17:03:41
AVEVTLOG.DLL : 7.0.0.20      86056 Bytes    2007-9-5 17:03:42
NETNT.DLL    : 7.0.0.0        7720 Bytes    2007-3-8 04:09:42
RCIMAGE.DLL  : 7.0.1.30    2576424 Bytes    2007-9-5 17:03:35
RCTEXT.DLL   : 7.0.62.0      86056 Bytes    2007-9-5 17:03:35
SQLITE3.DLL  : 3.3.17.1     339968 Bytes    2007-9-5 17:03:42

Configuration settings for the scan:
Jobname..........................: ShlExt
Configuration file...............: C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\a231c9a5.avp
Logging..........................: low
Primary action...................: repair
Secondary action.................: ignore
Scan master boot sector..........: off
Scan boot sector.................: on
Boot sectors.....................: D:,
Scan memory......................: on
Process scan.....................: off
Scan registry....................: off
Search for rootkits..............: off
Scan all files...................: Intelligent file selection
Scan archives....................: on
Recursion depth..................: 20
Smart extensions.................: on
Macro heuristic..................: on
File heuristic...................: high
Skipped files....................: C:\Program Files\LKT898C\MODEM.DLL,

Start of the scan: 2007年12月6日  23:40

Starting the file scan:

Begin scan in 'D:\zfiles\viruspackage\新建文件夹'
D:\zfiles\viruspackage\新建文件夹\1.dll
      [DETECTION] Contains detection pattern of the Ad- or Spyware ADSPY/Vapsup.JR
      [INFO]      A backup was created as '47bc1821.qua'  ( QUARANTINE )
D:\zfiles\viruspackage\新建文件夹\10.exe
      [DETECTION] Contains a detection pattern of the (dangerous) backdoor program BDS/Visel.AL Backdoor server programs
      [INFO]      A backup was created as '47861823.qua'  ( QUARANTINE )
D:\zfiles\viruspackage\新建文件夹\11.exe
      [DETECTION] Contains a detection pattern of the (dangerous) backdoor program BDS/Hupigon.uyn Backdoor server programs
      [INFO]      A backup was created as '47861824.qua'  ( QUARANTINE )
D:\zfiles\viruspackage\新建文件夹\12.exe
      [DETECTION] Contains a detection pattern of the (dangerous) backdoor program BDS/Hupigon.Gen Backdoor server programs
      [INFO]      A backup was created as '47861825.qua'  ( QUARANTINE )
D:\zfiles\viruspackage\新建文件夹\13.exe
      [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.gmu
      [INFO]      A backup was created as '47861826.qua'  ( QUARANTINE )
D:\zfiles\viruspackage\新建文件夹\14.exe
      [DETECTION] Contains a detection pattern of the (dangerous) backdoor program BDS/Hupigon.Gen Backdoor server programs
      [INFO]      A backup was created as '47861827.qua'  ( QUARANTINE )
D:\zfiles\viruspackage\新建文件夹\15.exe
      [DETECTION] Contains a detection pattern of the (dangerous) backdoor program BDS/Hupigon.Gen Backdoor server programs
      [INFO]      A backup was created as '47861828.qua'  ( QUARANTINE )
D:\zfiles\viruspackage\新建文件夹\16.exe
      [DETECTION] Contains a detection pattern of the (dangerous) backdoor program BDS/Graybird.GN.187392 Backdoor server programs
      [INFO]      A backup was created as '47861829.qua'  ( QUARANTINE )
D:\zfiles\viruspackage\新建文件夹\17.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.bqb
      [INFO]      A backup was created as '4786182a.qua'  ( QUARANTINE )
D:\zfiles\viruspackage\新建文件夹\18.exe
      [DETECTION] Is the Trojan horse TR/Hook.Shell.360
      [INFO]      A backup was created as '4786182b.qua'  ( QUARANTINE )
D:\zfiles\viruspackage\新建文件夹\19.exe
      [DETECTION] Contains suspicious code HEUR/Crypted
      [INFO]      The file was moved to '4786182c.qua'!
D:\zfiles\viruspackage\新建文件夹\2.dll
      [DETECTION] Is the Trojan horse TR/Vundo.Gen
      [INFO]      A backup was created as '461d1c8a.qua'  ( QUARANTINE )
D:\zfiles\viruspackage\新建文件夹\20.exe
      [DETECTION] Contains a detection pattern of the (dangerous) backdoor program BDS/Hupigon.1093 Backdoor server programs
      [INFO]      A backup was created as '46271c8c.qua'  ( QUARANTINE )
D:\zfiles\viruspackage\新建文件夹\21.exe
      [DETECTION] Contains a detection pattern of the (dangerous) backdoor program BDS/Delf.ccq Backdoor server programs
      [INFO]      A backup was created as '46271c8d.qua'  ( QUARANTINE )
D:\zfiles\viruspackage\新建文件夹\22.exe
      [DETECTION] Contains a detection pattern of the (dangerous) backdoor program BDS/Bifrose.NQ.657 Backdoor server programs
      [INFO]      A backup was created as '46271c8e.qua'  ( QUARANTINE )
D:\zfiles\viruspackage\新建文件夹\23.exe
      [DETECTION] Contains detection pattern of the Ad- or Spyware ADSPY/Vapsup.JQ
      [INFO]      A backup was created as '46271c8f.qua'  ( QUARANTINE )
D:\zfiles\viruspackage\新建文件夹\25.exe
      [DETECTION] Contains a detection pattern of the (dangerous) backdoor program BDS/Hupigon.uyt Backdoor server programs
      [INFO]      A backup was created as '46271c81.qua'  ( QUARANTINE )
D:\zfiles\viruspackage\新建文件夹\26.bin
      [DETECTION] Is the Trojan horse TR/Crypt.NSPM.Gen
      [INFO]      A backup was created as '46271c82.qua'  ( QUARANTINE )
D:\zfiles\viruspackage\新建文件夹\28.exe
      [DETECTION] Is the Trojan horse TR/Agent.ckk.1
      [INFO]      A backup was created as '46271c84.qua'  ( QUARANTINE )
D:\zfiles\viruspackage\新建文件夹\29.exe
      [DETECTION] Is the Trojan horse TR/Drop.Agent.bct.1
      [INFO]      A backup was created as '46271c85.qua'  ( QUARANTINE )
D:\zfiles\viruspackage\新建文件夹\30.exe
      [DETECTION] Is the Trojan horse TR/Spy.Agent.aiz.2
      [INFO]      A backup was created as '46271c80.qua'  ( QUARANTINE )
D:\zfiles\viruspackage\新建文件夹\31.exe
      [DETECTION] Is the Trojan horse TR/Crypt.NSAnti.Gen
      [INFO]      A backup was created as '47861838.qua'  ( QUARANTINE )
D:\zfiles\viruspackage\新建文件夹\32.exe
      [DETECTION] Is the Trojan horse TR/Spy.Delf.PS.13
      [INFO]      A backup was created as '4786182d.qua'  ( QUARANTINE )
D:\zfiles\viruspackage\新建文件夹\34.exe
      [DETECTION] Is the Trojan horse TR/Crypt.NSPM.Gen
      [INFO]      A backup was created as '46271c83.qua'  ( QUARANTINE )
D:\zfiles\viruspackage\新建文件夹\35.exe
      [DETECTION] Contains a detection pattern of the (dangerous) backdoor program BDS/Hupigon.Gen Backdoor server programs
      [INFO]      A backup was created as '46271c86.qua'  ( QUARANTINE )
D:\zfiles\viruspackage\新建文件夹\36.exe
      [DETECTION] Is the Trojan horse TR/Copiet.B.1
      [INFO]      A backup was created as '4786182e.qua'  ( QUARANTINE )
D:\zfiles\viruspackage\新建文件夹\37.exe
      [DETECTION] Contains a detection pattern of the (dangerous) backdoor program BDS/Hupigon.uys Backdoor server programs
      [INFO]      A backup was created as '4786182f.qua'  ( QUARANTINE )
D:\zfiles\viruspackage\新建文件夹\39.exe
      [DETECTION] Contains a detection pattern of the (dangerous) backdoor program BDS/Hupigon.Gen Backdoor server programs
      [INFO]      A backup was created as '46271c98.qua'  ( QUARANTINE )
D:\zfiles\viruspackage\新建文件夹\4.exe
      [DETECTION] Contains a detection pattern of the (dangerous) backdoor program BDS/Hupigon.Gen Backdoor server programs
      [INFO]      A backup was created as '47bd1822.qua'  ( QUARANTINE )
D:\zfiles\viruspackage\新建文件夹\5.exe
      [DETECTION] Contains detection pattern of the dropper DR/Delphi.Gen
      [INFO]      A backup was created as '461c1c8b.qua'  ( QUARANTINE )
D:\zfiles\viruspackage\新建文件夹\6.exe
      [DETECTION] Contains a detection pattern of the (dangerous) backdoor program BDS/Graybird.AK Backdoor server programs
      [INFO]      A backup was created as '47bd1824.qua'  ( QUARANTINE )
D:\zfiles\viruspackage\新建文件夹\7.exe
      [DETECTION] Contains a detection pattern of the (dangerous) backdoor program BDS/Hupigon.1093.3 Backdoor server programs
      [INFO]      A backup was created as '461c1c8d.qua'  ( QUARANTINE )
D:\zfiles\viruspackage\新建文件夹\8.exe
      [DETECTION] Contains a detection pattern of the (dangerous) backdoor program BDS/Hupigon.Gen Backdoor server programs
      [INFO]      A backup was created as '47bd1826.qua'  ( QUARANTINE )
D:\zfiles\viruspackage\新建文件夹\9.exe
      [DETECTION] Contains detection pattern of the dropper DR/BHO.K.1
      [INFO]      A backup was created as '461c1c8f.qua'  ( QUARANTINE )


End of the scan: 2007年12月6日  23:40
Used time: 00:03 min

The scan has been done completely.

      1 Scanning directories
     36 Files were scanned
     33 viruses and/or unwanted programs were found
      1 Files were classified as suspicious:
      0 files were deleted
      0 files were repaired
     34 files were moved to quarantine
      0 files were renamed
      0 Files cannot be scanned
      3 Files not concerned
      0 Archives were scanned
      0 Warnings
      0 Notes

[ Edited by  cxcx on 2007-12-6 23:42 ]

shooirn

用SAV的路过，感觉微点的广告力度很大。

andoon

看了这个结果～～ 我还是用NOD32  不为别的占系统资源少～· 偶P3的机器供不起卡巴～～   要是CORE我就用卡吧了

齐鲁隐农

F-Secure找到31个

juior

这样评比不见得科学，因为样本数太少了吧。

liujirong

下载了病毒库，我用MCAFEE试一试，稍后报道查杀战况

liujirong

我用MCAFEE 的 VirusScan Eenterprise＋AntiSpyware Enterprise 8.5.0i  补丁包是patch 4 查杀出24个，晕倒，难道MCAFEE也不行了吗？详细查杀战况如下图

slideaway

算是微点的枪文吗？？

realise624

病毒样本太少，没有参考价值
如果是枪文的话，完全可以找其它杀软杀不掉的来做这个包子

quesha

怎么不测一下诺顿的杀毒软件啊

spookygao

我也用的小红伞，P版的，没有辜负我的期望啊，我的T61软件安全就靠他了。

axc

nod32 查出27个 病毒库2708

axc

avg 7.5 查出31 个 12月7日病毒库

cxcx

QUOTE:

Posted by axc on 2007-12-7 14:04
nod32 查出27个 病毒库2708

估计是有人上报样本给NOD32然后病毒库更新过了

realise624

刚注意到标题是“世界知名杀软年终大比武”……里面居然有瑞星、江民，无语了*.*lll

wwwpx

好歹也是国内“知名”吧。。

Amilon

nod32 查出28个，3.0汉化+最新病毒库

shinyue

呵呵,看图说话吧. 不知雨林木风是怎么测试的？
小红伞P版和瑞星2008


[ Edited by  shinyue on 2007-12-9 02:15 ]