1. This test shows how an antivirus behaves with certain threats, in a specific environment and under certain conditions.
    We encourage you to compare these results with others and take informed decisions on what security products to use.
    Before buying an antivirus you should consider factors such as price, ease of use, compatibility, and support. Installing a free trial version allows an antivirus to be tested in everyday use before purchase.

Adrian Ścibor

From AVLab.pl
Apr 9, 2018
Dear Readers!

Please know that we have published the August 2021 edition of testing Advanced In The Wild Malware Test. Still our methodology remained unchanged, so we continued to use only real threats that can be found on the Internet and email attachments on daily basis.

Unlike previous editions of the test, this time we used about 80% more malware samples than usual. We also improved the initial verification of malware before the sample analysis that qualifies to the test. In this test as well as the following, we were using the Yara rules in order to better pick harmful software, and at the same time reject unclear, damaged samples. And all this without initial verification in the Sandbox (which will save time and allow to test more samples). We will describe the details shortly by completing the documentation of methodology.

During the August edition of the Advanced In The Wild Malware Test we used over 2200 samples of malware and tested the protection effectiveness of the following software:
  • Avast Free Antivirus
  • Avira Antivirus Pro
  • Comodo Advanced Endpoint Protection
  • Comodo Internet Security
  • Emsisoft Business Security
  • Microsoft Defender
  • Panda Dome
  • SecureAPlus Pro
  • Webroot Antivirus
Article: The record number of malware in the test designed to check security - AVLab

Full results: Results in September 2021 the Advanced In The Wild Malware Test

Starting with the next edition we are including two new products for testing.


Level 7
Sep 5, 2021
@Adrian Ścibor

First of all, I like the transparency of your test (list of malware used is published) and the simplicity (no bonus for early detection or negative points for false positives).
Although with so many (near) 100% scores a false positives test would be nice.

I have two questions about Microsoft Defender:

Is Microsoft Defender tested with Smartscreen enabled in Edge browser?

Is Microsoft Defender tested with Smartscreen enabled in File Explorer?

Last edited: