Android detection rates for 14 security vendors on 181 malware samples

FaraVirusi.com IT security blog made probably the biggest Android detection test till now.

We've evaluated 15 security applications for this platform on 181 infected applications (.apk files) and here are the detection rates.

• Kaspersky* – 175 (96.68%)
• Dr.Web - 171 (94.47%)
• IKARUS – 170 (93.92%)
• F-Secure* – 164 (90.60%)
• Zoner – 163 (90.05%)
• VIPRE** – 159 (87.84%)
• ESET** – 151 (83.42%)
• BitDefender* – 124 (68.50%)
• BullGuard* – 119 (65.74%)
• NetQin – 116 (64.08%)
• Webroot – 115 (63.53%)
• Trend Micro – 100 (55.24%)
• Norton - 60 (33.14%)
• McAfee* – 53 (29.28%)
• BlackBelt* – 41 (22.65%)

Additional details are available on FaraVirusi.com

 

Hi, Pykko
Which webroot product did you choose for this test??
The old webroot mobile antivirus or new webroot secureanywhere mobile??
If its new WSA mobile which version free or premuim??

WSA free - https://market.android.com/details?id=com.webroot.security&feature=more_from_developer

WSA premuim - https://market.android.com/details?id=com.webroot.security.full&feature=more_from_developer

Regards,
Dark Lord

 

Dark Lord, I've used Webroot SecureAnywhere free edition.
In terms of detection rate, there is no difference between paid and free version.

Paid version adds some extra features under "Lost device protection", "Call/SMS Blocking" and "App Inspector".
Antivirus component is similar in both versions.

 

Very nice of you to post the statistics. I am looking for an AV for my Android phone. Shall follow this thread. Thank you. BTW have you tested Lookout Security for Android?

 

I've been happy with Zoner. Has anyone used IKARUS?

 

I use it to,
for now everything right,
expects the new version of software with many more options.

 

No, Lookout doesn't provide any SD card scanning options.

 

I've added Norton detection to the test. A very poor one: 60 out of 181 malwares.

 

Even im happy with zoner
and i have 1 question - netqin performed so poorly in the test even then u r suggesting netqin for free protection

 

Kaspersky doing well again.

What about AVG?

Ziaul

 

I noticed that I can kill Zoner easily with Advanced Task Manager.

 

Zoner is made by a former hacker, is not very well known in the field and it doesn't seem to be too strong (see acr1965 posting above).

About IKARUS, I've mentioned in my article and thus NetQin stays as the third option for protecting your smartphone.

AVG gives 0 detection, but this seems a bug... AVG doesn't answer to our inquiries.

 

Guess will have to wait for avast ...
@ acr - i killed zoner with advanced task killer but the icon remained on my notification bar..

 

Yes, I tried again and noticed that on my phone as well. Zoner seems a bit inconsistent as sometimes it can be killed and no icon appears, sometimes it can be killed and the icon stays and other times there can be an attempt to kill it and the icon disappears but when I check the task manager Zoner appears to still be running, or has restarted after being killed but no icon.

 

have you had a chance to check Rising? http://www.rising-global.com/Download/mob-download.html

 

Any possibility of testing Lookout?

 

......

 

Can I use Lookout & Zoner / NetQin together? Are they heavy on resources? I have a Galaxy Y with 832 MHz processor & 290 MB RAM.

 

It's not recommended to use multiple antivirus solutions for your smartphone. The same principle for Windows applies here as well.

You could choose NetQin, as they are reliable. I am sending them everything they miss and they add to database very quick.

Also, they are going to release a major version these days. Version 5.6 Beta will be shipped today to selected beta testers and it will be a great improvement

 

Thank You

 

No Bluepoint in this test? Is it possible to add them?

Thx

Esse

 

@pykko,
Very interesting thread, thank you
Few questions:

Do you test on smartphones or tablets?
Does it matter? why or why not?

Do you test on tablets which have 3G/4G interfaces?
Do you test on tablets which only have Wi-Fi and none of those phone data plans?
Does it matter? why or why not?

Trying to figure out how all this Android (3.1) stuff works or doesn't, hence those questions.

 

@act8192: I've tested on a smartphone with Android 2.3.4.
WiFi connection was always on during the tests, for database updates or cloud engines.

@Esse: Blurpoint had a very poor result on our previous test with 62 samples and we decided not to test it again. I doubt they improved so much in 2 weeks time.

 

@pykko

They actually released a new version after your first test according to their forum.
Would be interesting to see if they improved.

/Esse

 

You're right.

Well, I'll test them tomorrow