AV-Comparatives: Real-World Protection Test July-August 2023

[harlan4096]

Introduction

Our Real-World Protection Test is currently one of the most comprehensive and complex tests available, using a relatively large number of test cases. Currently, we are running this test under updated Microsoft Windows 10 Pro 64 Bit with up-to-date third-party software. Due to this, finding in-the-field working exploits and running malware is much more challenging than e.g. under a non-up-to-date system with unpatched/vulnerable third-party applications.

This fact sheet is a short overview of the Real-World Protection Test results of July and August 2023. The detailed overall result consumer product reports (covering four months each) are released in June and November. Each of the overall result reports will also contain a false-alarm test and will contain the awards the products reached based on their overall scores during the respective four-month period.

For more information about this Real-World Protection Test, please read the details and previous test reports available on https://www.av-comparatives.org

Tested Products

• Avast Free Antivirus
  23.6 | 23.7
  
• AVG Free Antivirus
  23.6 | 23.7
  
• Avira Prime
  1.1 | 1.1
  
• Bitdefender Internet Security
  27.0 | 27.0
  
• ESET Internet Security
  16.1 | 16.2
  
• F-Secure Internet Security
  19.1 | 19.1
  
• G Data Total Security
  25.5 | 25.5
  
• K7 Total Security
  17.0 | 17.0
  
• Kaspersky Standard
  21.13 | 21.13
  
• McAfee Total Protection
  1.10 | 1.11
  
• Microsoft Defender
  4.18 | 4.18
  
• Norton Antivirus Plus
  22.25 | 22.23
  
• Panda Free Antivirus
  22.0 | 22.0
  
• Total Defense Essential Antivirus
  14.0 | 14.0
  
• TotalAV Antivirus Pro
  5.22 | 5.23
  
• Trend Micro Internet Security
  17.7 | 17.7
  

Testcases

Over the year we evaluate several tens of thousands malicious URLs. Unfortunately, many of these have to be discarded for various reasons. We remove duplicates such as the same malware hosted on different domains or IP addresses, sites already tested, “grey” or non-malicious sites/files, and malware/sites disappearing during the test. Many malicious URLs carrying exploits were not able to compromise the chosen system/applications because of the patch level. This means that the vulnerabilities in the third-party applications on the system were already patched and the exploits could therefore not deliver their malicious payload. Users should be aware that by always keeping their system and third-party applications up-to-date/patched, they can dramatically decrease the risk posed by exploits.

Test Results

The results are based on the test set of 254 live test cases (malicious URLs found in the field), consisting of working exploits (i.e. drive-by downloads) and URLs pointing directly to malware. Thus, exactly the same infection vectors are used as a typical user would experience in everyday life. The test-cases used cover a wide range of current malicious sites and provide insights into the protection given by the various products (using all their protection features) while surfing the web.
...

Full Report