2006-03, 29-30 March

The test was made on 29-30 March 2006, in response to BullGuard's request, using Windows XP Professional SP1 on a P4 2800 Mhz, 512MB DDRAM.

All programs tested had the latest versions, upgrades and updates and they were tested using their full scanning capabilities e.g. heuristics, full scan etc. The default settings of each program were not used, in order for each program to achieve its maximum detection rate. Because of this, there is a possibility for the tested programs to detect a few false positives.

The 113334 virus samples were chosen using VS2000 according to Kaspersky, F-Prot, Nod32, Dr.Web and McAfee antivirus programs. Each virus sample was unique by virus name, meaning that AT LEAST 1 antivirus program detected it as a new virus.

ALL virus samples were unpacked and the only samples that were kept were the ones that were packed using external-dos-packers (that means
not winzip, winrar, winace etc).

The virus samples had the correct file extension using a special program (Renexts) and were unique, according to checksum32 filesize.

Most of the virus samples used were not previously replicated at the time the test was made, which means that some of them, although
probably only a few, may be false positives. The procedure of testing each and every virus sample is still under process.

The following file types were used.

EXE, ELF, SH, COM, VBS, SIT, BAT, DOC, XLS, MDB, BIN, VBA, OLE, PPT, CLS, SMM, HTM, CLASS, JS, VI_, HTA, INI, PL, HLP, PHP, TPU, SCR, IMG, TD0, PRC, PIF, XML, REG, SHS, MAC, CSC, INF.

The virus samples were divided into these categories, according to the type of the virus :

• File = BeOS, FreeBSD, Linux, Mac, Palm, OS2, Unix, BinaryImage, BAS viruses, MenuetOS.
• MS-DOS = MS-DOS viruses.
• Windows = Win.*.* viruses.
• Macro = Macro, Multi and Formula viruses.
• Malware = Adware, DoS, Constructors, Exploit, Flooders, Nukers, Sniffers, SpamTools, Spoofers, Virus Construction Tools, Droppers,
  PolyEngines.
• Script = ABAP, BAT, Corel, HTML, Java, Scripts, MSH, VBS, WBS, Worms, PHP, Perl, Ruby viruses.
• Trojans-Backdoors = Trojan and Backdoor viruses.

Rank

VX Type / Antivirus	BullGuard	BitDefender
File (345)	253	253
	73,33%	73,33%
MS-DOS (33478)	31203	31203
	93,20%	93,20%
Windows.* (2997)	2527	2527
	84,32%	84,32%
Macro (6817)	6604	6604
	96,88%	96,88%
Malware (6928)	4544	4544
	65,59%	65,59%
Script (9627)	9328	9328
	96,89%	96,89%
Trojans-Backdoors (53142)	49926	49926
	93,95%	93,95%
Total (113334)	104385	104385
	92,10%	92,10%