The 70 Threat Challenge - AVG 9.0

The 70 threat challenge was created to test the real-time prevention capabilities of a given antivirus product. This test was performed with in the wild threats such as rogue antivirus installers, credit card stealers, keyloggers and other malware collected from websites from around the world. At BluePoint Security, we believe preventing threats is the most important aspect of computer security. As you may have experienced, removing virus infections is very cumbersome and often results in a machine that cannot be recovered without reloading the operating system.

In this test, we put AVG 9.0 to the test.

Does AVG have what it takes to survive the 70 threat challenge?

AVG 9.0.730
Virus DB 270.14.147/2628

MD5 Hash 6E8C176FF3FBA074F720AAF93071DED2 File C:\input\2155_CursorManiaSetup2.2.60.11-2.exe
MD5 Hash FA4E6685321B0911193A211F6FC7 File C:\input\2156_alphawipe_setup.exe
MD5 Hash 34F3DA8F8871A3F92F2DE02287650 File C:\input\22803598519.EXE
MD5 Hash BF3D1A9180A8DCC2AADAA55F2A6518 File C:\input\232592706969.EXE
MD5 Hash 8471CE2EB1C8FF96A8A60FBC202D32 File C:\input\236527574832.EXE
MD5 Hash C15E8BA1DAF638D1F9EB1E09A0DE1F File C:\input\237508787671.EXE
MD5 Hash B5AFE73F14C98B3A91D75DEB2EFF64BC File C:\input\24525797943.EXE
MD5 Hash 8F10C17952F12F2FFD645542E15E4DF File C:\input\250071975828.EXE
MD5 Hash EE5C91F4990DBF714A1D9965BDEE87 File C:\input\259626374183.EXE
MD5 Hash 333B88F1293789B55786AE9326E87EB0 File C:\input\26271288962.EXE
MD5 Hash BAA6CFD45C7B19AC59C14A7B5A9CAF9 File C:\input\271384420581.EXE
MD5 Hash FD1F717F5270B7685B0159ED2A59E2 File C:\input\310027557864.EXE
MD5 Hash 97BC6AD7EF40955712CA1E4E8E19514 File C:\input\340259111535.EXE
MD5 Hash CD6156996146B6E63429BE1AD43E998 File C:\input\344507527801.EXE
MD5 Hash 6F84820C6DC7DFC85C2B3D0312E328D File C:\input\370069588548.EXE
MD5 Hash 85216012A5CA754CA19F93D11BA17CC File C:\input\381636164646.EXE
MD5 Hash F0CA84C4898A2818171C555237CB8FFF File C:\input\3867619798.EXE
MD5 Hash 734C8B151A747C2F37DDE461ABB4F476 File C:\input\390912190625.EXE
MD5 Hash B96C0A56775A46091B467BB10EDC29E File C:\input\397649201505.EXE
MD5 Hash 36124C611CA5F16F12EE65603D828C86 File C:\input\48919469855.EXE
MD5 Hash FEB27E3FF7CABCD5A0C9E34E17D192 File C:\input\508865133953.EXE
MD5 Hash 9CB02C9745802B57EB3DC4DE79FCBD4 File C:\input\52_Funpop3_iniup_20091016.exe
MD5 Hash B6BD1CD8A354F5CB7EB6140575978 File C:\input\533329392548.EXE
MD5 Hash F33E48543DC6FEB7A0427AC35B4F6E1 File C:\input\60784552583.EXE
MD5 Hash 548FACB741E87C3327C59B62A577 File C:\input\654863418715.EXE
MD5 Hash AA86701374169F24D3D72DCA57D987 File C:\input\655565138422.EXE
MD5 Hash 46AD09CD53FEC32C2B21802477BC2 File C:\input\656163646856.EXE
MD5 Hash DD59256AD65F4CDCA0BCE69216AE403B File C:\input\660902337850.EXE
MD5 Hash 80973F7810D87A464D928F13E39FCF3 File C:\input\686067338109.EXE
MD5 Hash D7BB6C753AC0DB48DD3235EB99BD0C6 File C:\input\735849016115.EXE
MD5 Hash 3196567FFD824DC999E7E03DBF5C9 File C:\input\758089743792.EXE
MD5 Hash 32F2FEC86FD01E8F1259B79D751EDEE File C:\input\762342020461.EXE
MD5 Hash F95C83D636B6EED77916C8E91BEA293 File C:\input\785264034793.EXE
MD5 Hash 1D678680604D51B7BCA935C67DBCAC6 File C:\input\789158412187.EXE
MD5 Hash 916DB0CF430457DEA63CA866E456326 File C:\input\834896565962.EXE
MD5 Hash E0B9FB327E231E55E371A3D13B2C03D File C:\input\862115366115.EXE
MD5 Hash 3D6D23D443F4387AD5865B8A4876C37 File C:\input\86707669615.EXE
MD5 Hash AE391E173C6BB4A947EE6D05B28F852 File C:\input\92577626281.EXE
MD5 Hash E4F278175E7B43E0EE787F664BA9CB File C:\input\971113091232.EXE

Category:

Science & Technology

Tags:

• avg
• avg 9.0
• avg free
• avg test
• avg antivirus
• antivirus test
• best antivirus
• bluepoint
• bluepoint security
• bluepoint 2010

[OcloOppo]

how come you didn't just select them all and hit enter?

[BluePointSecurity]

@OcloOppo Good point, I suppose we could have!

[paulspydar]

looks to me like there is no AV product out there that can counter a test like this, so it doesnt translate well for a real world situation, it would be interesting to put a paid AV against a free AV.

[BluePointSecurity]

@paulspydar Products utilizing whitelisting can easily pass a test like this. Traditional AV products have a tough time with tests like these due to the fact that they are still trying to maintain "bad lists" (definitions). If you deny the unknown by default (whitelisting), you could throw 10k threats at it, all would be denied.

[paulspydar]

@BluePointSecurity i see, interesting point , but wouldnt denying all unknown mean a lot more user permissions to be granted? and that is quite scary to the normal home user who just surfs & emails, and they would be inclined to either allow all (bad) or deny all (get nothing done ) I suppose its just down to the right app for the right user then educating the choices..thanks for your reply, btw about "real world" I meant its unlikely so many threats would be loaded to a PC Together & so fast,

[BluePointSecurity]

@paulspydar You are absolutely correct, usability issues have prevented whitelisting solutions from entering the consumer market for many years. Whitelisting isn't new, however making a system that is usable to your average user is, that's where we come in! We've wrapped a few hybrid technologies around our solution that make it very easy to use. It certainly is a challenge, however it's all about working on a solutions that really works when put in the most demanding of situations.

[kornmon]

@commando189 no

[BluePointSecurity]

@XenTheKiller I performed the test personally, it wasn't XP mode. There was no simulation, it was an XP SP3 os with a folder full of malware that was then executed one by one, as shown in the video. It's pretty straightforward.

[XenTheKiller]

@BluePointSecurity which ofcourse happens to have the same looking as XP mode in windows 7? Same buttons, same window effects.

Still, if it was running in a program, which simulates another thing, it is totally different then having a the real thing infected.

[BluePointSecurity]

@XenTheKiller This isn't XP mode, it's Windows XP SP3 running on Vmware ESX 4.0.

[BluePointSecurity]

@commando189 It detected quite a few of them