AV-Comparatives Anti-Tampering Certification Test 2025

Disclaimer
  1. This test shows how an antivirus behaves with certain threats, in a specific environment and under certain conditions.
    We encourage you to compare these results with others and take informed decisions on what security products to use.
    Before buying an antivirus you should consider factors such as price, ease of use, compatibility, and support. Installing a free trial version allows an antivirus to be tested in everyday use before purchase.

Gandalf_The_Grey

Level 85
Thread author
Verified
Honorary Member
Top Poster
Content Creator
Well-known
Apr 24, 2016
7,844
AV-Comparatives has released the results of its Anti-Tampering Certification Test, which focuses on evaluating the ability of cybersecurity products to prevent tampering. The test attempts to disable or modify user and kernel space components of products in an attempt to evaluate their anti-tampering properties. The results of the test are important for both vendors and customers, allowing vendors to demonstrate that their products are tamper-proof within the tested scope and helping customers make informed decisions about their cybersecurity solutions. The test evaluates whether it is possible to disable or modify AV/EPP/EDR components or capabilities through tampering, with all tampering activities performed in the Windows user space. This year we subjected nine different security products to the test, of which three did not pass the test, i.e. were successfully tampered.
 

Andy Ful

From Hard_Configurator Tools
Verified
Honorary Member
Top Poster
Developer
Well-known
Dec 23, 2014
8,921
Microsoft Defender was tested with enabled advanced features:

Microsoft: "Email Scanning" was enabled. "PUA Protection" was enabled and set to "Block". "Cloud Extended Timeout" was set to "50". "Network Protection" was enabled and set to "Block mode". All Attack Surface Reduction Rules enabled and set to "Block". "Cloud Block Level" was set to "Zero Tolerance". "Tamper Protection" was enabled.
 

About us

  • MalwareTips is a community-driven platform providing the latest information and resources on malware and cyber threats. Our team of experienced professionals and passionate volunteers work to keep the internet safe and secure. We provide accurate, up-to-date information and strive to build a strong and supportive community dedicated to cybersecurity.

User Menu

Follow us

Follow us on Facebook or Twitter to know first about the latest cybersecurity incidents and malware threats.

Top