Antivirus product self-protection test II (by Anti-Malware Test Lab)

[alpha1]

Online criminal activities are gaining momentum faster than ever. Both the rate at which new types and modifications of malicious programs appear and the complexity of malware are on the rise. Cybercriminals use increasingly sophisticated methods, including masking the presence of a malicious program in the system, compression, encryption and incapacitating antivirus solutions.

Social engineering techniques make it easy to entice users to download and launch malicious programs as yet unknown by antivirus solutions. In such cases, in order to gain complete and uninterrupted control over the system, malicious programs search for an antivirus program, firewall or other protective solution in order to disrupt its operation.

Consequently, contemporary antivirus products should be able to resist such attempts, that is, they should include self-protection functionality. This helps them to resist even the most complicated attacks, such as when malicious programs use a variety of methods to disable protection, and remove the infection using standard tools after receiving the appropriate antivirus database updates.

In the test described below, we analyzed the self-protection capabilities of antivirus solutions that run under Windows XP SP3 and Windows 7 x86. Self-protection from the following types of attacks was analyzed:

1. Modification of file and registry key access permissions.
2. Modification / removal of modules.
3. Deletion of antivirus databases.
4. Modification / deletion of important registry keys.
5. Process termination.
6. Modification of processes / code.
7. Driver unloading.

Source and results

[Neo]

thx for share
reading it now

[Boyfriend]

Thanks alpha1 for sharing Kaspersky self-defense it always very strong, compared to others.

[LunarWolf]

McAfee is that good? I remember demonstrating to my friend that you can disable mcafee via task manager to persuade him to change to other av, it worked but he didn't change.

@Boyfriend,
Yes, I agreed with you. Nothing beats Russian technology. That is what I have been telling people

Where can I find the complete results? I can't download the pdf. The download link seems to be not working.

[INDRANIL]

Thanks for the share. Avast! Internet Security 5.0 did well .

[alpha1]

@all
No problem guys....

So Kaspersky does seem to have the strongest Self-Defense, great
But I am a little bit disappointed of it, because the Custom Installation feature will not be available even after the CF2 release

[hellnoire]

Nothing beats Russian technology.

It explains the vodka they put out... god it's strong.

Jokes aside, some nice information there... I'll say that much.

[sm1]

Thanks for sharing alpha1

[leofelix]

moved to security bulletin
Thank you for posting I shall read it later

[JayCub]

Thank you alpha1 this was a surprise "Microsoft Security Essentials 1.0 (29%)" bottom of the heap failed, i see comodo got Gold..