I have done some testing with CyberHawk latest version and Primary Response Safe Connect on XP home. Both look good. Have a look on detection by these. It,s a crude sort of testing indeed, not a professional one. I just tried to run these`malware/ installers and observed pop ups from CH and PRSC. In case of CH Yes(red popup) means when CH detects a suspicious behaviour and matches it with a blacklist and so flags malware with its name. In case of PRSC, it does has some signature based detection as well.