VB100 certification report - April 2020

VB Test Team

Virus Bulletin

Copyright © 2020 Virus Bulletin


 

Introduction

For more than two decades, Virus Bulletin has been testing anti-malware products and reporting on their performance – over that time both the threat landscape and the products themselves have evolved, but the VB100 certification scheme has remained a constant, a mark of distinction for those products that live up to expectation. The VB100 logo is the ‘stamp of approval’ conferred on products that satisfy a minimum standard of detecting malicious executables that have recently been seen in the wild, while blocking few to no legitimate programs.

This report details the VB100 certification results of 42 anti‑malware products from 36 different vendors during March and April 2020.

 

The VB100 set-up

In the VB100 test, a copy of the product to be tested is installed on two platforms: Windows 10 and Windows 7. On each platform, and at three different times in the test, the product is asked to scan both the latest version of the WildList1 and a selection of clean files taken from Virus Bulletin’s own set of files belonging to widely used legitimate software.

A legitimate file that is blocked at least once is considered a false positive, while a WildList file that isn’t blocked is considered a miss.

A product achieves a VB100 certification if:

  • No more than 0.5% of WildList samples are missed

and

  • No more than 0.01% of legitimate files are blocked

For full details, we refer to the VB100 methodology on the Virus Bulletin website: https://www.virusbulletin.com/testing/vb100/vb100-methodology/vb100-methodology-ver1-1/. This test used version 1.1 of the VB100 methodology.

 

Diversity Test

The malware part of the VB100 certification uses the WildList, a regularly updated list of extremely well-vetted malware samples, guaranteed to have been spotted in the wild multiple times. This makes them very suitable for a certification test like VB100.

The ‘Diversity Test’ looks at products’ detection of another set of recent malware samples, to acknowledge the fact that products detect malware samples beyond a standard set of samples, and provides a measure of that detection.

 

Products & results

Products were allowed to download updates during the course of the test. The version numbers listed in the results that follows refer to those at the start of the test.

 

Adaware Antivirus Free

Windows 7 version 12.7.1055.0  04-20.jpg
Windows 10 version 12.7.1055.0 
WildList detection 99.7% 
False positive rate 0.000% 
Diversity Test rate 100.00% 

 

Adaware Antivirus Pro

Windows 7 version 12.7.1055.0  04-20.jpg
Windows 10 version 12.7.1055.0 
WildList detection 99.9%
False positive rate 0.000%
Diversity Test rate 100.00%

 

Ad-Spider

Windows 7 version 2020.03.05 - 7.83962  04-20.jpg
Windows 10 version 2020.03.05 - 7.83962 
WildList detection 99.9% 
False positive rate 0.000% 
Diversity Test rate 100.00% 

 

AhnLab V3 Endpoint Security

Windows 7 version 9.0.60.1  04-20.jpg
Windows 10 version 9.0.60.1 
WildList detection 100.0% 
False positive rate 0.000% 
Diversity Test rate 99.90% 

 

Arcabit AntiVirus

Windows 7 version 2020.03.05  04-20.jpg
Windows 10 version 2020.03.11 
WildList detection 100.0% 
False positive rate 0.000% 
Diversity Test rate 100.00% 

 

Avast Free Antivirus

Windows 7 version 20.1.2397  04-20.jpg
Windows 10 version 20.1.2397 
WildList detection 100.0% 
False positive rate 0.001% 
Diversity Test rate 100.00% 

 

AVG Internet Security

Windows 7 version 20.1.3112  04-20.jpg
Windows 10 version 20.1.3112 
WildList detection 100.0% 
False positive rate 0.001% 
Diversity Test rate 100.00% 

 

Cynet 360

Windows 7 version 8.3.56.10  04-20.jpg
Windows 10 version 8.3.56.10 
WildList detection 99.9% 
False positive rate 0.000% 
Diversity Test rate 98.14% 

 

Emsisoft Anti-Malware

Windows 7 version 2020.3.0.10024  04-20.jpg
Windows 10 version 2020.3.0.10024 
WildList detection 100.0% 
False positive rate 0.000% 
Diversity Test rate 100.00% 

 

eScan Internet Security Suite for Windows

Windows 7 version 14.0.1400.2228  04-20.jpg
Windows 10 version 14.0.1400.2228 
WildList detection 100.0%
False positive rate 0.000% 
Diversity Test rate 100.00% 

 

ESET Endpoint Security

Windows 7 version 7.1.2053.0  04-20.jpg
Windows 10 version 7.1.2053.0 
WildList detection 100.0% 
False positive rate 0.000% 
Diversity Test rate 100.00% 

 

ESET Internet Security

Windows 7 version 13.0.24.0  04-20.jpg
Windows 10 version 13.0.24.0 
WildList detection 100.0% 
False positive rate 0.000% 
Diversity Test rate 100.00% 

 

ESET Smart Security Premium

Windows 7 version 13.0.24.0  04-20.jpg
Windows 10 version 13.0.24.0 
WildList detection  100.0%
False positive rate 0.000% 
Diversity Test rate 100.00% 

 

ESTsecurity ALYac

Windows 7 version 4.0.2.23116  04-20.jpg
Windows 10 version 4.0.2.23116 
WildList detection 99.9% 
False positive rate 0.000% 
Diversity Test rate 95.99% 

 

Exosphere Endpoint Protection

(see notes in Appendix 2)

Windows 7 version 8.3.56.10  04-20.jpg
Windows 10 version 8.3.56.10 
WildList detection 99.9% 
False positive rate 0.000% 
Diversity Test rate 98.43% 

 

Faronics Anti-Virus

Windows 7 version 4.21.3102.484  04-20.jpg
Windows 10 version 4.21.3102.484 
WildList detection 100.0% 
False positive rate 0.000% 
Diversity Test rate 100.00% 

 

FireEye Endpoint Security

Windows 7 version 31.28.8  04-20.jpg
Windows 10 version 31.28.8 
WildList detection 99.9% 
False positive rate 0.000% 
Diversity Test rate 100.00% 

 

Fortinet FortiClient

Windows 7 version 6.2.3.0912  04-20.jpg
Windows 10 version 6.2.3.0912 
WildList detection 100.0% 
False positive rate 0.000% 
Diversity Test rate 98.53% 

 

G DATA Antivirus

Windows 7 version 25.5.5.43  04-20.jpg
Windows 10 version 25.5.5.43 
WildList detection 100.0% 
False positive rate 0.000% 
Diversity Test rate 100.00% 

 

IKARUS anti.virus

Windows 7 version 3.1.16  04-20.jpg
Windows 10 version 3.1.16 
WildList detection 100.0% 
False positive rate 0.000% 
Diversity Test rate 99.90% 

 

Intego AV

Windows 7 version 1.0.0.13  04-20.jpg
Windows 10 version 1.0.0.13 
WildList detection 99.9% 
False positive rate 0.000% 
Diversity Test rate 99.90% 

 

ITL Total Security

Windows 7 version 1.0.0.14  04-20.jpg
Windows 10 version 1.0.0.14 
WildList detection 99.8% 
False positive rate 0.000% 
Diversity Test rate 100.00% 

 

K7 Total Security

Windows 7 version 16.0.0632  04-20.jpg
Windows 10 version 16.0.0632 
WildList detection 100.0% 
False positive rate 0.000% 
Diversity Test rate 100.00% 

 

Kaspersky Endpoint Security 11 for Windows

Windows 7 version 11.1.1.126  04-20.jpg
Windows 10 version 11.1.1.126 
WildList detection 100.0% 
False positive rate 0.000% 
Diversity Test rate 100.00% 

 

PCProtect

Windows 7 version 4.14.31  04-20.jpg
Windows 10 version 4.14.31 
WildList detection 99.9% 
False positive rate 0.000% 
Diversity Test rate 100.00%

 

Qi-ANXIN Tianqing Endpoint Security Management System

Windows 7 version v10.0 build: 6.6.0.4082  04-20.jpg
Windows 10 version v10.0 build: 6.6.0.4082 
WildList detection 99.9% 
False positive rate 0.000% 
Diversity Test rate 100.00% 

 

Rising Enterprise Security Management System

Windows 7 version 3.0.0.95  04-20.jpg
Windows 10 version 3.0.0.95 
WildList detection 100.0% 
False positive rate 0.005% 
Diversity Test rate 92.37% 

 

Scanguard

Windows 7 version 4.14.31  04-20.jpg
Windows 10 version 4.14.31 
WildList detection 99.9% 
False positive rate 0.000% 
Diversity Test rate 100.00% 

 

SentinelOne Endpoint Security Platform

Windows 7 version 3.7.2.45  04-20.jpg
Windows 10 version 3.7.2.45 
WildList detection 99.9% 
False positive rate 0.001% 
Diversity Test rate 100.00% 

 

Systweak Anti-virus

Windows 7 version 1.0.1000.9539  04-20.jpg
Windows 10 version 1.0.1000.9539 
WildList detection 99.6% 
False positive rate 0.000% 
Diversity Test rate 100.00%

 

Tabidus United Endpoint Protector

(see notes in Appendix 2)

Windows 7 version N/A 04-20.jpg
Windows 10 version 1.0 
WildList detection 100.0% 
False positive rate 0.001% 
Diversity Test rate 98.63% 

 

Tachyon Endpoint Security

Windows 7 version 5.0.0.57  04-20.jpg
Windows 10 version 5.0.0.57 
WildList detection 99.9% 
False positive rate 0.002% 
Diversity Test rate 99.80% 

 

TeamViewer Endpoint Protection

Windows 7 version 1.5.238835  04-20.jpg
Windows 10 version 1.5.238835 
WildList detection 99.9% 
False positive rate 0.000% 
Diversity Test rate 100.00% 

 

Tencent PC Manager

Windows 7 version 12.3.26607.901  04-20.jpg
Windows 10 version 12.3.26607.901 
WildList detection 100.0% 
False positive rate 0.000% 
Diversity Test rate 100.00% 

 

TotalAV

Windows 7 version 5.4.24  04-20.jpg
Windows 10 version 5.4.24 
WildList detection 99.9% 
False positive rate 0.000% 
Diversity Test rate 100.00% 

 

Total Defense Premium

Windows 7 version 12.0.0.251 SP1  04-20.jpg
Windows 10 version 12.0.0.251 SP1 
WildList detection 99.9% 
False positive rate 0.000% 
Diversity Test rate 100.00% 

 

TUXGUARD Endpoint Protection

Windows 7 version 1.0.1.34  04-20.jpg
Windows 10 version 1.0.1.34 
WildList detection 99.9% 
False positive rate 0.000% 
Diversity Test rate 100.00% 

 

VIPRE Endpoint Cloud Business

Windows 7 version 11.0.7633  04-20.jpg
Windows 10 version 11.0.7633 
WildList detection 99.9% 
False positive rate 0.000% 
Diversity Test rate 100.00% 

 

VirIT eXplorer PRO

Windows 7 version 9.1.38  04-20.jpg
Windows 10 version 9.1.35 
WildList detection 100.0% 
False positive rate 0.000% 
Diversity Test rate 66.24% 

 

Appendix 1: products not certified

The following products did not achieve VB100 certification in this test:

  • Bitsentry Elite
  • SecureAge Plus Pro
  • SecureAge Plus Pro with offline settings.

 

Appendix 2: testing notes

  • Test results are invalidated for Defenx Security Suite as technical issues prevented us from successfully testing the product.
  • The results for Exosphere EndPoint Protection are based only on the Windows 10 platform due to technical issues with the product on Windows 7.
  • Tabidus Technology’s United Endpoint Protector was tested only on Windows 10 as theres is no Windows 7 version of the product.

 

Appendix 3: sample set sizes

The WildList (certification) set contained 2,685 malicious samples. The set of clean samples used for the false positive test contained 99,991 files, of which 29,107 were portable executable (PE) files. The set used for the Diversity Test contained 1,022 malicious samples.

 

Footnotes

1 The WildList is an extremely well-vetted set of malware recently observed in the wild by researchers: http://www.wildlist.org/.

Download PDF

twitter.png
fb.png
linkedin.png
hackernews.png
reddit.png

 

Latest reviews:

VB100 Certification Report - April 2020

This report details the VB100 certification results of 42 anti-malware products from 36 different vendors during March and April 2020.

VBWeb Comparative Review - Spring 2020

In the final VBWeb test we measure the performance of three web security products against a wide range of live web threats, including phishing threats. This report also includes an overview of the Spring 2020 threat landscape.

VBSpam Comparative Review - March 2020

In the March 2020 VBSpam test 10 of the 11 participating full solutions obtained a VBSpam award and seven of them performed well enough to earn a VBSpam+ award.

VB100 Certification Report - February 2020

This report details the VB100 certification results of 40 anti-malware products from 36 different vendors during January and February 2020.

VBWeb Comparative Review - Winter 2020

The VBWeb tests measure the performance of web security products against a wide range of live web threats, also including phishing threats. This report also includes an overview of the Winter 2019/2020 threat landscape.

We have placed cookies on your device in order to improve the functionality of this site, as outlined in our cookies policy. However, you may delete and block all cookies from this site and your use of the site will be unaffected. By continuing to browse this site, you are agreeing to Virus Bulletin's use of data as outlined in our privacy policy.