I don't know, I never got infected since everything is sandboxed. I tested in VirtualBox and it's ok (and yes, it's worth the bother), the ViruScope in version 10 is way better (I'm using is right now).
I'm not using HIPS, I just set everything to be blocked by default (sandboxed) and in Firewall to block any requests and only allow what I say. This way I used CIS for years with no issues and I test real malware on my system from time to time.