[1] The number of harmful changes made to Windows during dynamic analysis of the malware sample.
[2] Average blocking of malware by all tested solutions, regardless of level of prevention or protection.
Remember! HTTPS protocol can be used to host malware!
SSL certificate and the so-called padlock at the web address does not certify safety of the website.
The following summary shows a comparison of tested solutions to protect workstations against malware. We encourage you to become familiar with a detailed description and read our testing methodology in order to understand the results.
PRE-LAUNCH: The classification concerns detecting malware samples before they are launched in the system.
POST-LAUNCH: The analysis level, i.e. a virus has been run and blocked by a tested product.
FAIL: The failure, i.e. a virus hasn’t been blocked and it has infected a system.
Sandbox Column: Number of indicators, i.e. malicious changes made to the system without the anti-virus installed.
Remediation Time Average (RT): The time expressed in seconds from the introduction of malware into the system by a browser, through the launch to detecting and resolving security incident. Occurs only at the POST-Launch level.
Blocked: 567/567
Total: 100%
RT: 4 seconds
Blocked: 567/567
Total: 100%
RT: 30 seconds
Blocked: 567/567
Total: 100%
RT: 207 seconds
Blocked: 562/567
Total: 99.12%
Fail: 5
RT: 54 seconds
Blocked: 567/567
Total: 100%
RT: 242 seconds
Blocked: 563/567
Total: 99.29%
FAIL: 4
RT: 27 seconds
Blocked: 567/567
Total: 100%
RT: 221
Blocked: 567/567
Total: 100%
RT: 219
Blocked: 563/567
Total: 99.29%
Fail: 4
RT: 122 seconds
Blocked: 567/567
Total: 100%
RT: 25 seconds
Blocked: 567/567
Total: 100%
RT: 158 seconds
Blocked: 567/567
Total: 100%
RT: 110 seconds
You can always go back in time and check how each individual security product performed during previous editions of the test. We make the results from all previous tests available to you to verify if your favorite developer has improved protection against latest malware in his security software.
Vendors can participate directly in the Advanced In-The-Wild Malware Test or obtain a Certification-Only Package for a product independently tested by AVLab. Paid participation provides access to extended technical services, test data, and custom configuration options, while result review and verification remain available to all tested vendors.
Commercial use of AVLab certificates, certification badges, and award materials by independently tested vendors requires either Paid Assessment Participation or a Certification-Only Package. Independently tested vendors without either option may be listed in AVLab results and certification records but are not granted the right to use AVLab certification materials in their own marketing or communications.
