MRG Malware Tests.Rogue Software Infection Prevention test

NobleT

MRG是malware reserach group的简称。
测试包含24个软件，专门真对恶意软件的XX antimalware和大厂家的internet security.
整个测试各个安软采用默认设定（default setting)。拦截所有30个样本取得测试成功
Rogue Software Infection Prevention test
Project details: Rogue Software Infection Prevention test
Operating System used in this test:Windows XP Professional Service Pack 3
Total number of programs used in this test: 24
Programs divided into two groups:Complementary Anti-Malware Applications & Full Featured Anti-Malware Applications/Internet Security Suites
Amount of samples used in this test:30
The “complementary” antimalware applications tested were:

• Ad-Aware Free 8.1.4
• Corbitek Antimalware 2 Beta
• Immunet Protect 1.0.24-32*
• IObit Security 360 v1.40
• Malwarebytes’ Anti-Malware 1.44
• ParetoLogic Anti-Spyware 5.7
• PC Tools Spyware Doctor 7.0.0.514
• Prevx 3.0.5.50*
• Sunbelt CounterSpy 3.1.2848
• SUPERAntiSpyware 4.33.1000
• TrojanHunter 5.2

The full antimalware / internet security applications were:

• a-squared Anti-Malware 4.5.0.29
• avast! Antivirus 5.0.396
• Avira AntiVir Premium 9.0.0.452
• BluePoint Security 2010 1.0.98
• COMODO Internet Security 3.14.129887.586
• G Data AntiVirus 2010 20.2.4.1
• Kaspersky Internet Security 2010 9.0.0.736
• Microsoft Security Essentials 1.0.1611.0
• NANO Antivirus 0.6.0.6 Beta
• NOD32 Antivirus 4.0.474
• Online Armor ++ v4.0.0.15
• Panda Cloud Antivirus 1.0
• Trend Micro Internet Security Pro 17.50 Build 1366

Additional information:
All programs tested using their default settings.
Online Armor ++ enables HIPS by default.
COMODO Internet Security enables Defense+ by default.
Trend Micro Internet Security enables Proactive Intrusion Blocking by default.
Kaspersky Internet Security enables Proactive Defense by default.
Programs that manage to block installation of all 30 samples will receive MRG System Protected Award.

结果（某冷门，最大黑马【（本来软件的界面就是黑的）】

最终授予

PDF文件太大，上传不了，进入网站下载吧..
http://malwareresearchgroup.com/?page_id=2

runyon

确实是一大冷门

jason_jiang

PDF我下不了……

bbs2811125

好大的冷门……红伞垫底

悠柚

红伞主防不好

bbs2811125

红伞主防不好
悠柚 发表于 2010-2-3 15:12

pdf我看了一圈头晕，这个测试的是在系统上安装这些恶意软件看是否成功是吧~

NobleT

回复 6# bbs2811125


    30个fakeav,然后用软件默认设置去拦截。有些套装的设定已经特指出来了。最后看拦截数目。基本是这样

bbs2811125

回复  bbs2811125


    30个fakeav,然后用软件默认设置去拦截。有些套装的设定已经特指出来了。最后看 ...
NobleT 发表于 2010-2-3 15:18

了解了，一直想找到关键部分可是看到的都是软件的设定……
看来还是要耐心些

悠柚

回复 8# bbs2811125


    对啊，设置好的话，OA和卡巴肯定都能完美拦截的，BluePoint真是令我大跌眼镜啊，一年不到就那么好了?

bbs2811125

回复  bbs2811125


    对啊，设置好的话，OA和卡巴肯定都能完美拦截的，BluePoint真是令我大跌眼镜啊 ...
悠柚 发表于 2010-2-3 15:51

毛豆应该也没问题的吧？可惜了，OA用着总觉得有点卡
bluepoint我还没用过呢……