AV-C - Removal Test Report

http://av-comparatives.org/en/comparativesreviews/removal-tests

F-Secure did poorly this time.

The biggest surprise came in the form of PC Tools.

And, Avast got first position from the bottom.

 

Ouch Avast!

Of course only 10 samples were used, which is about the same as a YouTube review. However, they are widespread so AVs should be able to deal with them. #8 which they all failed on looks like the Ransom LockEmAll.

 

Bitdefender are strong contenders this time for the product of the year award.

 

Eset stinks here. (Don't attack me. I own a license.)
Didn't do that well with latest AV-Test removal either.
They definitely need work on their cleaning.

 

its an interesting test. I like the scoring system. its good to see that on quite alot of samples all the vendors do well. btw i agree that eset needs to work on their cleaning. then again other products need to work on other areas like load on system and stability.

 

Interesting only microsoft, symantec and kaspersky detected and "attempted" to remove all the samples. That ransomware defeats everyone else.

I'm suprised with F-Secure negativly, but suprised with trend positivly. The rest of the results match my expectations so far.

 

Interesting results but i was expecting a comparison chart from highest to lowest

 

shame dr.web was not tested, nothing beats dr.web in removal

 

Lowest score for Avast, and Eset scores pretty low as well
Nice test btw, and good report

Same here, though I noticed that they are sorted from high to low on the awards page instead of the normal random order.

 

I use Eset to detect.

I use MBAM to clean.

 

Can anything other than a bootable disk clean the Ransomware?

Oh and can someone test it against AppGuard?

 

I tested trojan Ransom LockEmAll against DefenseWall 3.1.6 and although it apparently locked up my desktop at the time of this purposely infection, I only had right click DW systray icon to hit the Stop Attack button on DW and it stopped this nasty on its tracks. Lastly, I used DW Rollback function to get rid of the traces left by this ransomware trojan on the hard disk.

Haven't tested it against AppGuard, though.


Carlos

 

Yes I did the same thing on a computer I was going to format. It kept trying to be the top thing on the screen but I was able to use the stop attack button as well.

Since I have AppGuard though I'm curious how it would work, since there is no way to terminate things. It would prevent access to Windows files and such but idk.

 

great job by kaspersky, Symantec and bit defender.

Eset did not perform very well. Now, I have a reason to believe some Av-Test result where it did not do well in removals.

 

Right now well have to take your word for it.

 

Avast needs to improve soon !!

 

I know better scores:
Restore from disk image or re-install: 99%
Overwrite entire drive: 99.9%
Do the above and flash BIOS: 99.9999% (b/c of firmware threats)
Don't use computers: 100%

 

symantec did great....wsa also did fair enough......planning on using both together ........gonna double the protection.....yay.....

 

bash computer and own head: infinity %

 

Hi Jeff,
I would not be without MBAM. I wish AVC would include it in a test alongside the AV.
Jerry

 

We also still do guarantee our removal so if we don't clean up an entire infection, we'll work with you remotely free of charge to fix it

 

really?.....that's awesome ......

 

anyone who removes malware for a living will tell you that dr.web is probably the best at removing what it detects. multiple tests in the past have shown this to be true (personal results show this to be true too)

some relevant links

https://www.wilderssecurity.com/showthread.php?t=293421&highlight=dr.web

https://www.wilderssecurity.com/showthread.php?t=288812&highlight=dr.web

https://www.wilderssecurity.com/showthread.php?t=264923&highlight=dr.web

 

For me, the most important aspect of a security solution is/should be prevention rather than cure. If you get infected, the whole clean-up process is more complicated than doing a clean install. So, it doesn't make much sense to me. Personal preferences may differ.

 

Yeah, for me, detection/prevention is what matters. Because if your system is compromised and even if you clean your computer with 5 different scanners and they all come clean; one can never be sure that there aren't and malicious files left on the computer. The key is to never let this happen in the first place.

My thumb rule is: If system has been compromised, revert back to old image or format HDD and re-install OS. Don't trust the AV/AMs to do the job... because they obviously can't according to this test and the latest removal test att AV-Test.