================================================ File 6GWNT.TXT/Heureka-Test: ================================================== Detailed results of Macro and Script Virus related on-demand scanner tests under Windows NT: ================================================== (Formatted with non-proportional font: Courier; 72 columns) Following VTC test "2001-09" where 22 products were submitted for test (with testbed frozen on April 30, 2001 and products submitted June 2001), the producers of 21 AV products agreed that their Windows-NT related products were tested against special testbeds including macro and script viruses and malware reported BETWEEN May 1, 2001 and July 31, 2001 (testbed "Jul01=017") as well as BETWEEN August 1,2001 and October 31,2001 (testbed "Oct01=01A"), respectively. For details of related AV producers: see A2SCNLS.txt. For a list of acronyms (abbreviations) for AV products: see A5CodNam.txt. -------------------------------------------------------- Products submitted for aVTC test under Windows-NT: -------------------------------------------------------- ANT v(def): 6.8.0.2 sig: June 05,2001 AVA v(def): unknown sig: unknown AVG v(def): 6.0.263 sig: June 22,2001 AVK v(def): 10.0.167 sig: June 21,2001 AVP v(def): 3.5.133.0 sig: June 01,2001 AVX v(def): 6.1 sig: June 18,2001 CMD v(def): 4.61.5 sig: June 25,2001 DRW v(def): 4.25 sig: June 20,2001 FPR v(def): 3.09d sig: June 25,2001 FPW v(def): 3.09d sig: June 25,2001 FSE v(def): 1.00.1251 sig: June 20,2001 scan eng fprot: 3.09.507 scan eng avp: 3.55.3210 scan eng orion: 1.02.15 IKA v(def): 5.01 sig: June 25,2001 INO v(def): 6.0.85 sig: June 14,2001 MR2 v(def): 1.17 sig: June 25,2001 NVC v(def): 5.00.25 sig: June 19,2001 PAV v(def): 3.5.133.0 sig: June 23,2001 QHL v(def): 6.02 sig: June 28,2001 RAD v(def): 8.1.001 sig: June 25,2001 RAV v(def): 8.2.001, scan eng:8.3 sig: June 25,2001 SCN v(def): 4144 scan eng:4.1.40 sig: June 20,2001 VSP v(def): 12.22.1 sig: June 25,2001 -------------------------------------------------------- One products (NAV) was withdrawn from this test, due to "new engines". Index of tables: =========================================================== Part I: Reference testbed "Jul01=017" =========================================================== Reference "014": Detection rates for macro and script viruses/malware in VTC test "2001-04" using testbeds "017" (May 1-July 31, 2001) ----------------------------------------------------------- WNT.M1/014: "MacroVirus 1/014": Results of "full" test for macro viruses WNT.M2/014: "MacroVirus 2/014": Results of "In-The-Wild" test for macro viruses WNT.M5/014: "MacroMalware/014": Results of "full" zoo test for Macro-related malware WNT.S1/014: "ScriptVirus 1/014": Results of "full" test for script viruses (VBS, JS etc) WNT.S2/014: "ScriptVirus 2/014": Results of "In-The-Wild" test for script viruses WNT.S5/014: "ScriptMalware/014": Results of "full" zoo test for script-related malware =========================================================== Part II: Heureka testbed "Jul-01=017" =========================================================== Heureka "017": Detection rates for macro and script viruses/malware in VTC test "2002-02", using testbeds "017", including viruses detected between May 1,2001 and July 31,2001 ----------------------------------------------------------- WNT.M1/017: "MacroVirus 1/017": Results of "full" test for macro viruses WNT.M2/017: "MacroVirus 2/017": Results of "In-The-Wild" test for macro viruses WNT.M5/017: "MacroMalware/017": Results of "full" zoo test for Macro-related malware WNT.S1/017: "ScriptVirus 1/017": Results of "full" test for script viruses (VBS, JS etc) WNT.S2/017: "ScriptVirus 2/017": Results of "In-The-Wild" test for macro viruses WNT.S5/017: "ScriptMalware/017": Results of "full" zoo test for Macro-related malware =========================================================== Part III: Heureka testbed "01A" =========================================================== Heureka "01A": Detection rates for macro and script viruses/malware in VTC test "2002-02", using testbeds "01A", including viruses detected between Aug.1,2001 and Oct.31,2001 ----------------------------------------------------------- WNT.M1/01A: "MacroVirus 1/01A": Results of "full" test for macro viruses WNT.M2/01A: "MacroVirus 2/01A": Results of "In-The-Wild" test for macro viruses WNT.M5/01A: "MacroMalware/01A": Results of "full" zoo test for Macro-related malware WNT.S1/01A: "ScriptVirus 1/01A": Results of "full" test for script viruses (VBS, JS etc) WNT.S2/01A: "ScriptVirus 2/01A": Results of "In-The-Wild" test for macro viruses WNT.S5/01A: "ScriptMalware/01A": Results of "full" zoo test for Macro-related malware ============================================================== ================================================= Part I: Reference tables (results for test "014") with testbeds frozen on April 30, 2001 ================================================= Table WNT.M1/014: "MacroVirus 1/014": Results of "full" zoo test with testbed "014" for macro viruses under Windows NT: =================================================================== This includes Viruses ---- unreliably ---- Files Scanner detected identified detected detected ----------+-----------+-----------------------+------------ Testbed 6762 100.0% 21677 100.0% ----------+-----------+-----------------------+------------ ANT 6566 97.1 185 2.7 56 0.8 20811 96.0 AVA 6604 97.7 42 0.6 32 0.5 21202 97.8 AVG 6651 98.4 55 0.8 13 0.2 21387 98.7 AVK 6762 100.0 118 1.7 1 0.0 21674 100~ AVP 6761 100.0 118 1.7 1 0.0 21673 100~ AVX 6703 99.1 134 2.0 8 0.1 21474 99.1 CMD 6760 100.0 93 1.4 1 0.0 21672 100~ DRW 6725 99.5 81 1.2 14 0.2 21574 99.5 FPR 6760 100.0 29 0.4 1 0.0 21672 100~ FPW 6760 100.0 29 0.4 1 0.0 21672 100~ FSE 6762 100.0 120 1.8 0 0.0 21677 100.0 IKA 6451 95.4 421 6.2 170 2.5 20723 95.6 INO 6755 99.9 110 1.6 6 0.1 21651 99.9 MR2 44 0.7 4 0.1 4 0.1 156 0.7 NAV 6726 99.5 110 1.6 17 0.3 21495 99.2 (*) NVC 6751 99.8 89 1.3 12 0.2 21622 99.7 PAV 6762 100.0 118 1.7 1 0.0 21674 100~ QHL 0 0.0 0 0.0 0 0.0 0 0.0 RAD 6726 99.5 346 5.1 16 0.2 21546 99.4 RAV 6726 99.5 348 5.1 15 0.2 21545 99.4 SCN 6762 100.0 66 1.0 0 0.0 21677 100.0 VSP 1 0.0 0 0.0 1 0.0 1 0.0 ----------+-----------+-----------------------+------------ (*) NAV withdrawn from "Heureka test". Table WNT.M2/014: "MacroVirus 2/014": Results of "In-The-Wild" test for macro viruses under Windows NT: ============================================================== This includes Viruses ---- unreliably ---- Files Scanner detected identified detected detected ----------+-----------+-----------------------+------------ Testbed 143 100.0% 1308 100.0% ----------+-----------+-----------------------+------------ ANT 142 99.3 7 4.9 2 1.4 1294 98.9 AVA 143 100.0 6 4.2 3 2.1 1305 99.8 AVG 143 100.0 11 7.7 0 0.0 1308 100.0 AVK 143 100.0 9 6.3 0 0.0 1308 100.0 AVP 143 100.0 9 6.3 0 0.0 1308 100.0 AVX 143 100.0 15 10.5 0 0.0 1308 100.0 CMD 143 100.0 2 1.4 0 0.0 1308 100.0 DRW 143 100.0 10 7.0 0 0.0 1308 100.0 FPR 143 100.0 2 1.4 0 0.0 1308 100.0 FPW 143 100.0 2 1.4 0 0.0 1308 100.0 FSE 143 100.0 9 6.3 0 0.0 1308 100.0 IKA 142 99.3 25 17.5 2 1.4 1299 99.3 INO 143 100.0 9 6.3 0 0.0 1308 100.0 MR2 13 9.1 1 0.7 5 3.5 378 28.9 NAV 143 100.0 8 5.6 0 0.0 1308 100.0 (*) NVC 143 100.0 11 7.7 2 1.4 1305 99.8 PAV 143 100.0 9 6.3 0 0.0 1308 100.0 QHL 0 0.0 0 0.0 0 0.0 0 0.0 RAD 143 100.0 26 18.2 5 3.5 1302 99.5 RAV 143 100.0 26 18.2 5 3.5 1302 99.5 SCN 143 100.0 7 4.9 0 0.0 1308 100.0 VSP 0 0.0 0 0.0 0 0.0 0 0.0 ----------+-----------+-----------------------+------------ (*) NAV withdrawn from "Heureka test". Table WNT.M5/014: "Macro-Malware/014": Results of "full" test for Macro-related malware under Windows NT: ============================================================= Macro This includes Malware ---- unreliably ---- Files Scanner detected identified detected detected ----------+-----------+-----------------------+------------ Testbed 426 100.0% 683 100.0% ----------+-----------+-----------------------+------------ ANT 378 88.7 9 2.1 9 2.1 606 88.7 AVA 377 88.5 3 0.7 6 1.4 584 85.5 AVG 352 82.6 1 0.2 5 1.2 584 85.5 AVK 425 99.8 0 0.0 0 0.0 682 99.9 AVP 425 99.8 0 0.0 0 0.0 682 99.9 AVX 392 92.0 10 2.3 4 0.9 630 92.2 CMD 424 99.5 6 1.4 0 0.0 676 99.0 DRW 387 90.8 1 0.2 7 1.6 622 91.1 FPR 424 99.5 2 0.5 0 0.0 676 99.0 FPW 424 99.5 2 0.5 0 0.0 676 99.0 FSE 425 99.8 0 0.0 0 0.0 682 99.9 IKA 383 89.9 14 3.3 10 2.3 612 89.6 INO 398 93.4 6 1.4 1 0.2 653 95.6 MR2 135 31.7 5 1.2 2 0.5 208 30.5 NAV 368 86.4 4 0.9 7 1.6 596 87.3 (*) NVC 421 98.8 11 2.6 2 0.5 660 96.6 PAV 426 100.0 0 0.0 0 0.0 683 100.0 QHL 0 0.0 0 0.0 0 0.0 0 0.0 RAD 416 97.7 28 6.6 4 0.9 663 97.1 RAV 415 97.4 28 6.6 4 0.9 662 96.9 SCN 426 100.0 0 0.0 0 0.0 683 100.0 VSP 1 0.2 0 0.0 0 0.0 1 0.1 ----------+-----------+-----------------------+------------ (*) NAV withdrawn from "Heureka test". Table WNT.S1/014: "ScriptVirus 1/014": Results of "full" Zoo test for script viruses: ===================================================== This includes Viruses ---- unreliably ---- Files Scanner detected identified detected detected ----------+-----------+-----------------------+------------ Testbed 588 100.0% 1079 100.0% ----------+-----------+-----------------------+------------ ANT 481 81.8 41 7.0 34 5.8 835 77.4 AVA 174 29.6 8 1.4 25 4.3 380 35.2 AVG 370 62.9 22 3.7 32 5.4 727 67.4 AVK 588 100.0 58 9.9 0 0.0 1079 100.0 AVP 588 100.0 48 8.2 0 0.0 1079 100.0 AVX 412 70.1 19 3.2 42 7.1 730 67.7 CMD 552 93.9 21 3.6 16 2.7 987 91.5 DRW 561 95.4 32 5.4 12 2.0 992 91.9 FPR 558 94.9 23 3.9 17 2.9 994 92.1 FPW 556 94.6 22 3.7 17 2.9 989 91.7 FSE 588 100.0 50 8.5 1 0.2 1076 99.7 IKA 457 77.7 46 7.8 45 7.7 812 75.3 INO 559 95.1 58 9.9 15 2.6 1022 94.7 MR2 490 83.3 54 9.2 44 7.5 829 76.8 NAV 554 94.2 37 6.3 25 4.3 984 91.2 (*) NVC 537 91.3 61 10.4 13 2.2 960 89.0 PAV 588 100.0 48 8.2 0 0.0 1079 100.0 QHL 1 0.2 0 0.0 1 0.2 1 0.1 RAD 485 82.5 51 8.7 33 5.6 800 74.1 RAV 1 0.2 0 0.0 1 0.2 1 0.1 SCN 587 99.8 39 6.6 1 0.2 1077 99.8 VSP 494 84.0 54 9.2 44 7.5 835 77.4 ----------+-----------+-----------------------+------------ (*) NAV withdrawn from "Heureka test". Table WNT.S2/014: "ScriptVirus 2/014": Results of "In-The-Wild" test for script viruses: ======================================================== This includes Viruses ---- unreliably ---- Files Scanner detected identified detected detected ----------+-----------+-----------------------+------------ Testbed 19 100.0% 110 100.0% ----------+-----------+-----------------------+------------ ANT 19 100.0 7 36.8 2 10.5 109 99.1 AVA 18 94.7 4 21.1 5 26.3 99 90.0 AVG 19 100.0 2 10.5 5 26.3 107 97.3 AVK 19 100.0 3 15.8 0 0.0 110 100.0 AVP 19 100.0 2 10.5 0 0.0 110 100.0 AVX 19 100.0 2 10.5 2 10.5 110 100.0 CMD 19 100.0 3 15.8 1 5.3 109 99.1 DRW 19 100.0 2 10.5 0 0.0 110 100.0 FPR 19 100.0 3 15.8 1 5.3 109 99.1 FPW 19 100.0 3 15.8 1 5.3 109 99.1 FSE 19 100.0 3 15.8 0 0.0 110 100.0 IKA 18 94.7 6 31.6 4 21.1 101 91.8 INO 19 100.0 4 21.1 2 10.5 110 100.0 MR2 17 89.5 2 10.5 8 42.1 86 78.2 NAV 19 100.0 7 36.8 0 0.0 110 100.0 (*) NVC 19 100.0 12 63.2 0 0.0 110 100.0 PAV 19 100.0 2 10.5 0 0.0 110 100.0 QHL 1 5.3 0 0.0 1 5.3 1 0.9 RAD 18 94.7 2 10.5 5 26.3 109 99.1 RAV 0 0.0 0 0.0 0 0.0 0 0.0 SCN 19 100.0 0 0.0 0 0.0 110 100.0 VSP 17 89.5 3 15.8 7 36.8 87 79.1 ----------+-----------+-----------------------+------------ (*) NAV withdrawn from "Heureka test". Table WNT.S5: "Script-Malware": Results of "full" test for Script-related malware under Windows NT: ========================================================= Macro This includes Malware ---- unreliably ---- Files Scanner detected identified detected detected ----------+-----------+-----------------------+------------ Testbed 22 100.0 30 100.0 ----------+-----------+-----------------------+------------ ANT 0 0.0 0 0.0 0 0.0 0 0.0 AVA ** No report - See problem-list ** AVG 5 22.7 0 0.0 1 4.5 5 16.7 AVK 22 100.0 1 4.5 0 0.0 30 100.0 AVP 22 100.0 1 4.5 0 0.0 30 100.0 AVX 2 9.1 1 4.5 0 0.0 3 10.0 CMD 14 63.6 0 0.0 0 0.0 16 53.3 DRW 8 36.4 0 0.0 0 0.0 9 30.0 FPR 14 63.6 0 0.0 0 0.0 16 53.3 FPW 14 63.6 0 0.0 0 0.0 16 53.3 FSE 22 100.0 1 4.5 0 0.0 30 100.0 IKA 8 36.4 0 0.0 0 0.0 8 26.7 INO 15 68.2 1 4.5 0 0.0 19 63.3 MR2 5 22.7 1 4.5 0 0.0 6 20.0 NAV 8 36.4 0 0.0 0 0.0 11 36.7 (*) NVC 2 9.1 0 0.0 0 0.0 2 6.7 PAV 22 100.0 1 4.5 0 0.0 30 100.0 QHL 1 4.5 0 0.0 0 0.0 1 3.3 RAD 18 81.8 0 0.0 0 0.0 25 83.3 RAV 0 0.0 0 0.0 0 0.0 0 0.0 SCN 22 100.0 2 9.1 0 0.0 30 100.0 VSP 5 22.7 1 4.5 0 0.0 6 20.0 ----------+-----------+-----------------------+------------ (*) NAV withdrawn from "Heureka test". ====================================== Part II: Results of Heureka test "017" ====================================== Table WNT.M1/017: "MacroVirus 1/017": Results of "full" zoo test with testbed "Jul-01" for macro viruses under Windows NT: =================================================================== This includes Viruses ---- unreliably ---- Files Scanner detected identified detected detected ----------+-----------+-----------------------+------------ Testbed 357 100.0% 1259 100.0% ----------+-----------+-----------------------+------------ ANT 221 61.9 3 0.8 3 0.8 712 56.6 AVA 254 71.1 1 0.3 4 1.1 833 66.2 AVG 318 89.1 3 0.8 1 0.3 1117 88.7 AVK 288 80.7 1 0.3 0 0.0 1001 79.5 AVP 292 81.8 0 0.0 0 0.0 1016 80.7 AVX 343 96.1 7 2.0 3 0.8 1192 94.7 CMD 324 90.8 4 1.1 4 1.1 1143 90.8 DRW 344 96.4 2 0.6 2 0.6 1219 96.8 FPR 322 90.2 4 1.1 4 1.1 1136 90.2 FPW 322 90.2 4 1.1 4 1.1 1136 90.2 FSE 341 95.5 234 65.5 1 0.3 1205 95.7 IKA 290 81.2 8 2.2 5 1.4 1040 82.6 INO 339 95.0 5 1.4 1 0.3 1178 93.6 MCV *** no report - see problem list *** MR2 6 1.7 0 0.0 0 0.0 16 1.3 NVC 223 62.5 6 1.7 1 0.3 797 63.3 PAV 292 81.8 0 0.0 0 0.0 1016 80.7 QHL 0 0.0 0 0.0 0 0.0 0 0.0 RAV 330 92.4 14 3.9 5 1.4 1142 90.7 SCN 349 97.8 5 1.4 0 0.0 1244 98.8 VSP 0 0.0 0 0.0 0 0.0 0 0.0 ----------+-----------+-----------------------+------------ Table WNT.M2/017: "MacroVirus 2/017": Results of "In-The-Wild" test for macro viruses under Windows NT: ============================================================== This includes Viruses ---- unreliably ---- Files Scanner detected identified detected detected ----------+-----------+-----------------------+------------ Testbed 17 100.0% 78 100.0% ----------+-----------+-----------------------+------------ ANT 14 82.4 1 5.9 0 0.0 44 56.4 AVA 16 94.1 0 0.0 0 0.0 50 64.1 AVG 17 100.0 0 0.0 0 0.0 78 100.0 AVK 17 100.0 1 5.9 0 0.0 78 100.0 AVP 17 100.0 0 0.0 0 0.0 78 100.0 AVX 16 94.1 0 0.0 0 0.0 50 64.1 CMD 17 100.0 2 11.8 0 0.0 78 100.0 DRW 17 100.0 0 0.0 0 0.0 78 100.0 FPR 17 100.0 2 11.8 0 0.0 78 100.0 FPW 17 100.0 2 11.8 0 0.0 78 100.0 FSE 17 100.0 2 11.8 0 0.0 78 100.0 IKA 17 100.0 1 5.9 2 11.8 76 97.4 INO 16 94.1 0 0.0 0 0.0 50 64.1 MCV *** no report - see problem list *** MR2 0 0.0 0 0.0 0 0.0 0 0.0 NVC 17 100.0 3 17.6 0 0.0 78 100.0 PAV 17 100.0 0 0.0 0 0.0 78 100.0 QHL 0 0.0 0 0.0 0 0.0 0 0.0 RAV 17 100.0 2 11.8 1 5.9 51 65.4 SCN 17 100.0 2 11.8 0 0.0 78 100.0 VSP 0 0.0 0 0.0 0 0.0 0 0.0 ----------+-----------+-----------------------+------------ Table WNT.M5/017: "Macro-Malware/017": Results of "full" test for Macro-related malware under Windows NT: ============================================================== Macro This includes Malware ---- unreliably ---- Files Scanner detected identified detected detected ----------+-----------+-----------------------+------------ Testbed 22 100.0% 30 100.0% ----------+-----------+-----------------------+------------ ANT 10 45.5 1 4.5 0 0.0 13 43.3 AVA 11 50.0 0 0.0 0 0.0 15 50.0 AVG 14 63.6 0 0.0 0 0.0 20 66.7 AVK 12 54.5 0 0.0 0 0.0 14 46.7 AVP 14 63.6 0 0.0 0 0.0 17 56.7 AVX 18 81.8 0 0.0 0 0.0 24 80.0 CMD 15 68.2 0 0.0 0 0.0 21 70.0 DRW 18 81.8 0 0.0 0 0.0 24 80.0 FPR 15 68.2 0 0.0 0 0.0 21 70.0 FPW 15 68.2 0 0.0 0 0.0 21 70.0 FSE 17 77.3 2 9.1 0 0.0 23 76.7 IKA 16 72.7 0 0.0 0 0.0 21 70.0 INO 15 68.2 0 0.0 0 0.0 21 70.0 MCV *** no report - see problem list *** MR2 0 0.0 0 0.0 0 0.0 0 0.0 NVC 12 54.5 0 0.0 0 0.0 15 50.0 PAV 14 63.6 0 0.0 0 0.0 17 56.7 QHL 0 0.0 0 0.0 0 0.0 0 0.0 RAV 17 77.3 0 0.0 0 0.0 25 83.3 SCN 17 77.3 0 0.0 0 0.0 23 76.7 VSP 0 0.0 0 0.0 0 0.0 0 0.0 ----------+-----------+-----------------------+------------ Table WNT.S1/017: "ScriptVirus 1/017": Results of "full" Zoo test for script viruses: ===================================================== This includes Viruses ---- unreliably ---- Files Scanner detected identified detected detected ----------+-----------+-----------------------+------------ Testbed 164 100.0% 382 100.0% ----------+-----------+-----------------------+------------ ANT 42 25.6 2 1.2 12 7.3 84 22.0 AVA 32 19.5 1 0.6 6 3.7 76 19.9 AVG 85 51.8 4 2.4 9 5.5 169 44.2 AVK 126 76.8 13 7.9 9 5.5 306 80.1 AVP 126 76.8 13 7.9 9 5.5 306 80.1 AVX 89 54.3 0 0.0 17 10.4 196 51.3 CMD 104 63.4 1 0.6 10 6.1 199 52.1 DRW 136 82.9 11 6.7 12 7.3 273 71.5 FPR 104 63.4 1 0.6 10 6.1 199 52.1 FPW 104 63.4 1 0.6 10 6.1 199 52.1 FSE 141 86.0 42 25.6 8 4.9 326 85.3 IKA 104 63.4 4 2.4 20 12.2 208 54.5 INO 78 47.6 4 2.4 15 9.1 137 35.9 MCV *** no report - see problem list *** MR2 93 56.7 13 7.9 14 8.5 166 43.5 NVC 74 45.1 3 1.8 9 5.5 147 38.5 PAV 126 76.8 13 7.9 9 5.5 306 80.1 QHL 1 0.6 0 0.0 0 0.0 1 0.3 RAV 0 0.0 0 0.0 0 0.0 0 0.0 SCN 134 81.7 7 4.3 11 6.7 307 80.4 VSP 93 56.7 13 7.9 14 8.5 166 43.5 ----------+-----------+-----------------------+------------ Table WNT.S2/017: "ScriptVirus 2/017": Results of "In-The-Wild" test for script viruses under Windows NT: ============================================================== This includes Viruses ---- unreliably ---- Files Scanner detected identified detected detected ----------+-----------+-----------------------+------------ Testbed 10 100.0% 37 100.0% ----------+-----------+-----------------------+------------ ANT 10 100.0 1 10.0 2 20.0 31 83.8 AVA 10 100.0 0 0.0 2 20.0 29 78.4 AVG 10 100.0 0 0.0 1 10.0 34 91.9 AVK 10 100.0 1 10.0 0 0.0 37 100.0 AVP 10 100.0 1 10.0 0 0.0 37 100.0 AVX 10 100.0 0 0.0 2 20.0 31 83.8 CMD 10 100.0 1 10.0 0 0.0 37 100.0 DRW 10 100.0 1 10.0 0 0.0 37 100.0 FPR 10 100.0 1 10.0 0 0.0 37 100.0 FPW 10 100.0 1 10.0 0 0.0 37 100.0 FSE 10 100.0 1 10.0 0 0.0 37 100.0 IKA 10 100.0 2 20.0 1 10.0 36 97.3 INO 7 70.0 0 0.0 1 10.0 7 18.9 MCV *** no report - see problem list *** MR2 10 100.0 0 0.0 2 20.0 27 73.0 NVC 10 100.0 0 0.0 2 20.0 32 86.5 PAV 10 100.0 1 10.0 0 0.0 37 100.0 QHL 1 10.0 0 0.0 0 0.0 1 2.7 RAV 0 0.0 0 0.0 0 0.0 0 0.0 SCN 10 100.0 0 0.0 1 10.0 36 97.3 VSP 10 100.0 0 0.0 2 20.0 27 73.0 ----------+-----------+-----------------------+------------ Table WNT.S5/017: "Script-Malware/017": Results of "full" test for Script-related malware under Windows NT: =============================================================== Script This includes Malware ---- unreliably ---- Files Scanner detected identified detected detected ----------+-----------+-----------------------+------------ Testbed 37 100.0% 73 100.0% ----------+-----------+-----------------------+------------ ANT 7 18.9 0 0.0 5 13.5 12 16.4 AVA 1 2.7 0 0.0 1 2.7 1 1.4 AVG 4 10.8 0 0.0 0 0.0 9 12.3 AVK 25 67.6 1 2.7 5 13.5 45 61.6 AVP 28 75.7 2 5.4 6 16.2 51 69.9 AVX 10 27.0 1 2.7 5 13.5 16 21.9 CMD 8 21.6 0 0.0 0 0.0 13 17.8 DRW 19 51.4 0 0.0 6 16.2 31 42.5 FPR 8 21.6 0 0.0 0 0.0 13 17.8 FPW 8 21.6 0 0.0 0 0.0 13 17.8 FSE 32 86.5 6 16.2 7 18.9 57 78.1 IKA 15 40.5 0 0.0 6 16.2 20 27.4 INO 9 24.3 0 0.0 4 10.8 19 26.0 MCV *** no report - see problem list *** MR2 4 10.8 0 0.0 1 2.7 8 11.0 NVC 5 13.5 0 0.0 2 5.4 9 12.3 PAV 25 67.6 1 2.7 5 13.5 45 61.6 QHL 1 2.7 0 0.0 1 2.7 1 1.4 RAV 0 0.0 0 0.0 0 0.0 0 0.0 SCN 27 73.0 2 5.4 4 10.8 53 72.6 VSP 4 10.8 0 0.0 1 2.7 8 11.0 ----------+-----------+-----------------------+------------ ======================================= Part III: Results of Heureka test "01A" ======================================= Table WNT.M1/01A: "MacroVirus 1/01A": Results of "full" zoo test with testbed "Oct-01" for macro viruses under Windows NT: =================================================================== This includes Viruses ---- unreliably ---- Files Scanner detected identified detected detected ----------+-----------+-----------------------+------------ Testbed 176 100.0% 678 100.0% ----------+-----------+-----------------------+------------ ANT 77 43.8 1 0.6 1 0.6 248 36.6 AVA 97 55.1 0 0.0 1 0.6 310 45.7 AVG 117 66.5 0 0.0 0 0.0 384 56.6 AVK 69 39.2 0 0.0 0 0.0 192 28.3 AVP 70 39.8 0 0.0 0 0.0 199 29.4 AVX 166 94.3 2 1.1 1 0.6 648 95.6 CMD 128 72.7 0 0.0 0 0.0 500 73.7 DRW 169 96.0 0 0.0 0 0.0 656 96.8 FPR 127 72.2 0 0.0 0 0.0 496 73.2 FPW 127 72.2 0 0.0 0 0.0 496 73.2 FSE 151 85.8 35 19.9 0 0.0 572 84.4 IKA 107 60.8 2 1.1 0 0.0 411 60.6 INO 167 94.9 2 1.1 0 0.0 652 96.2 MCV *** no report - see problem list *** MR2 5 2.8 0 0.0 2 1.1 14 2.1 NVC 50 28.4 0 0.0 0 0.0 189 27.9 PAV 70 39.8 0 0.0 0 0.0 199 29.4 QHL 0 0.0 0 0.0 0 0.0 0 0.0 RAV 134 76.1 2 1.1 2 1.1 530 78.2 SCN 167 94.9 1 0.6 0 0.0 654 96.5 VSP 1 0.6 0 0.0 1 0.6 1 0.1 ----------+-----------+-----------------------+------------ Table WNT.M2/01A: "MacroVirus 2/01A": Results of "In-The-Wild" test for macro viruses under Windows NT: ============================================================== This includes Viruses ---- unreliably ---- Files Scanner detected identified detected detected ----------+-----------+-----------------------+------------ Testbed 7 100.0% 14 100.0% ----------+-----------+-----------------------+------------ ANT 5 71.4 0 0.0 0 0.0 10 71.4 AVA 5 71.4 0 0.0 0 0.0 10 71.4 AVG 7 100.0 0 0.0 0 0.0 14 100.0 AVK 7 100.0 0 0.0 0 0.0 14 100.0 AVP 7 100.0 0 0.0 0 0.0 14 100.0 AVX 6 85.7 1 14.3 0 0.0 12 85.7 CMD 7 100.0 0 0.0 0 0.0 14 100.0 DRW 7 100.0 0 0.0 0 0.0 14 100.0 FPR 7 100.0 0 0.0 0 0.0 14 100.0 FPW 7 100.0 0 0.0 0 0.0 14 100.0 FSE 7 100.0 0 0.0 0 0.0 14 100.0 IKA 7 100.0 0 0.0 0 0.0 14 100.0 INO 7 100.0 0 0.0 0 0.0 14 100.0 MCV *** no report - see problem list *** MR2 0 0.0 0 0.0 0 0.0 0 0.0 NVC 6 85.7 0 0.0 0 0.0 12 85.7 PAV 7 100.0 0 0.0 0 0.0 14 100.0 QHL 0 0.0 0 0.0 0 0.0 0 0.0 RAV 7 100.0 1 14.3 0 0.0 14 100.0 SCN 7 100.0 0 0.0 0 0.0 14 100.0 VSP 0 0.0 0 0.0 0 0.0 0 0.0 ----------+-----------+-----------------------+------------ Table WNT.M5/01A: "Macro-Malware/01A": Results of "full" test for Macro-related malware under Windows NT: ============================================================== Macro This includes Malware ---- unreliably ---- Files Scanner detected identified detected detected ----------+-----------+-----------------------+------------ Testbed 7 100.0% 7 100.0% ----------+-----------+-----------------------+------------ ANT 4 57.1 0 0.0 0 0.0 4 57.1 AVA 3 42.9 0 0.0 0 0.0 3 42.9 AVG 1 14.3 0 0.0 0 0.0 1 14.3 AVK 3 42.9 0 0.0 0 0.0 3 42.9 AVP 3 42.9 0 0.0 0 0.0 3 42.9 AVX 7 100.0 0 0.0 0 0.0 7 100.0 CMD 4 57.1 0 0.0 0 0.0 4 57.1 DRW 7 100.0 0 0.0 0 0.0 7 100.0 FPR 4 57.1 0 0.0 0 0.0 4 57.1 FPW 4 57.1 0 0.0 0 0.0 4 57.1 FSE 4 57.1 0 0.0 0 0.0 4 57.1 IKA 5 71.4 0 0.0 0 0.0 5 71.4 INO 5 71.4 0 0.0 0 0.0 5 71.4 MCV *** no report - see problem list *** MR2 2 28.6 0 0.0 0 0.0 2 28.6 NVC 3 42.9 0 0.0 0 0.0 3 42.9 PAV 3 42.9 0 0.0 0 0.0 3 42.9 QHL 0 0.0 0 0.0 0 0.0 0 0.0 RAV 5 71.4 0 0.0 0 0.0 5 71.4 SCN 3 42.9 0 0.0 0 0.0 3 42.9 VSP 0 0.0 0 0.0 0 0.0 0 0.0 ----------+-----------+-----------------------+------------ Table WNT.S1/01A: "ScriptVirus 1/01A": Results of "full" Zoo test for script viruses: ===================================================== This includes Viruses ---- unreliably ---- Files Scanner detected identified detected detected ----------+-----------+-----------------------+------------ Testbed 102 100.0% 184 100.0% ----------+-----------+-----------------------+------------ ANT 12 11.8 1 1.0 2 2.0 14 7.6 AVA 11 10.8 0 0.0 2 2.0 13 7.1 AVG 40 39.2 1 1.0 6 5.9 58 31.5 AVK 52 51.0 2 2.0 7 6.9 78 42.4 AVP 49 48.0 2 2.0 6 5.9 79 42.9 AVX 31 30.4 1 1.0 3 2.9 45 24.5 CMD 46 45.1 1 1.0 4 3.9 61 33.2 DRW 72 70.6 4 3.9 13 12.7 106 57.6 FPR 46 45.1 1 1.0 4 3.9 61 33.2 FPW 46 45.1 1 1.0 4 3.9 61 33.2 FSE 71 69.6 7 6.9 10 9.8 112 60.9 IKA 49 48.0 1 1.0 6 5.9 74 40.2 INO 34 33.3 1 1.0 7 6.9 51 27.7 MCV *** no report - see problem list *** MR2 45 44.1 3 2.9 8 7.8 72 39.1 NVC 27 26.5 1 1.0 3 2.9 35 19.0 PAV 47 46.1 2 2.0 5 4.9 71 38.6 QHL 1 1.0 0 0.0 0 0.0 1 0.5 RAV 0 0.0 0 0.0 0 0.0 0 0.0 SCN 58 56.9 2 2.0 8 7.8 85 46.2 VSP 45 44.1 3 2.9 8 7.8 72 39.1 ----------+-----------+-----------------------+------------ Table WNT.S2/01A: "ScriptVirus 2/01A": Results of "In-The-Wild" test for script viruses under Windows NT: ============================================================== This includes Viruses ---- unreliably ---- Files Scanner detected identified detected detected ----------+-----------+-----------------------+------------ Testbed 6 100.0% 6 100.0% ----------+-----------+-----------------------+------------ ANT 2 33.3 0 0.0 0 0.0 2 33.3 AVA 2 33.3 0 0.0 0 0.0 2 33.3 AVG 4 66.7 0 0.0 0 0.0 4 66.7 AVK 4 66.7 0 0.0 0 0.0 4 66.7 AVP 4 66.7 0 0.0 0 0.0 4 66.7 AVX 2 33.3 0 0.0 0 0.0 2 33.3 CMD 5 83.3 0 0.0 0 0.0 5 83.3 DRW 4 66.7 0 0.0 0 0.0 4 66.7 FPR 5 83.3 0 0.0 0 0.0 5 83.3 FPW 5 83.3 0 0.0 0 0.0 5 83.3 FSE 5 83.3 0 0.0 0 0.0 5 83.3 IKA 4 66.7 0 0.0 0 0.0 4 66.7 INO 1 16.7 0 0.0 0 0.0 1 16.7 MCV *** no report - see problem list *** MR2 1 16.7 0 0.0 0 0.0 1 16.7 NVC 3 50.0 0 0.0 0 0.0 3 50.0 PAV 4 66.7 0 0.0 0 0.0 4 66.7 QHL 1 16.7 0 0.0 0 0.0 1 16.7 RAV 0 0.0 0 0.0 0 0.0 0 0.0 SCN 4 66.7 0 0.0 0 0.0 4 66.7 VSP 1 16.7 0 0.0 0 0.0 1 16.7 ----------+-----------+-----------------------+------------ Table WNT.S5/01A: "Script-Malware/01A": Results of "full" test for Script-related malware under Windows NT: =============================================================== Script This includes Malware ---- unreliably ---- Files Scanner detected identified detected detected ----------+-----------+-----------------------+------------ Testbed 73 100.0% 167 100.0% ----------+-----------+-----------------------+------------ ANT 5 6.8 0 0.0 1 1.4 5 3.0 AVA 2 2.7 0 0.0 1 1.4 2 1.2 AVG 4 5.5 0 0.0 0 0.0 5 3.0 AVK 20 27.4 1 1.4 5 6.8 24 14.4 AVP 20 27.4 1 1.4 5 6.8 24 14.4 AVX 8 11.0 0 0.0 1 1.4 8 4.8 CMD 4 5.5 0 0.0 0 0.0 4 2.4 DRW 21 28.8 0 0.0 7 9.6 25 15.0 FPR 4 5.5 0 0.0 0 0.0 4 2.4 FPW 4 5.5 0 0.0 0 0.0 4 2.4 FSE 24 32.9 1 1.4 5 6.8 28 16.8 IKA 11 15.1 0 0.0 0 0.0 12 7.2 INO 14 19.2 0 0.0 2 2.7 19 11.4 MCV *** no report - see problem list *** MR2 10 13.7 0 0.0 1 1.4 11 6.6 NVC 4 5.5 0 0.0 0 0.0 4 2.4 PAV 20 27.4 1 1.4 5 6.8 24 14.4 QHL 1 1.4 0 0.0 0 0.0 1 0.6 RAV 0 0.0 0 0.0 0 0.0 0 0.0 SCN 21 28.8 0 0.0 5 6.8 24 14.4 VSP 10 13.7 0 0.0 1 1.4 11 6.6 ----------+-----------+-----------------------+------------