============================ Content of file A3TSTBED.txt aVTC "Heureka Test 2002-02": ============================ This file contains the content of VTCs testbeds used in "Heureka Test 2001-02": 1) In-The-Wild Testbeds: ------------------------ .1) ITW-MACR.VTC content of ITW macro virus testbed .1.1) status July 31, 2001 .1.2) status October 31, 2001 .2) ITW-SCRI.VTC content of ITW script virus testbed .1.1) status July 31, 2001 .1.2) status October 31, 2001 2) Zoo (=full collection) Testbeds: ----------------------------------- .1) ZOO-MACR.VTC content of full macro virus testbed .1.1) status July 31, 2001 .1.2) status October 31, 2001 .2) ZOO-SCRI.VTC content of full script virus testbed .1.1) status July 31, 2001 .1.2) status October 31, 2001 .3) MAL-MACR.VTC content of macro malware testbed .1.1) status July 31, 2001 .1.2) status October 31, 2001 .3) MAL-SCRI.VTC content of script malware testbed .1.1) status July 31, 2001 .1.2) status October 31, 2001 1.1.1) In-The-Wild Macro Virus testbed: Status July 31, 2001 ------------------------------------------------------------ L:\O97M\TRISTATE\C 4 L:\O97M\TRISTATE\D 4 L:\W97M\BEAST\41472_A 2 L:\W97M\BOTTRA\A 5 L:\W97M\CONT\A 2 L:\W97M\EIGHT941\D 2 L:\W97M\IIS\A 2 L:\W97M\MARKER\CB 4 L:\W97M\MARKER\EF 4 L:\W97M\MELISSA\U_MM 4 L:\W97M\NOTTICE\AU 6 L:\W97M\OSTRICH\B 28 L:\W97M\PECAS\B 4 L:\W97M\PIECE\A_MM 2 L:\W97M\SERVICE\A 2 L:\W97M\WRENCH\I 2 L:\X97M\ADN\B 1 1.1.2) In-The-Wild Macro Virus testbed: Status October 31, 2001 --------------------------------------------------------------- V:\W97M\CLASS\BT 2 V:\W97M\FLOP\A 2 V:\W97M\HOPE\A 2 V:\W97M\SHEPMAH\A 2 V:\W97M\THUS\DE 2 V:\W97M\THUS\EP 2 V:\X97M\SQUARED\B 2 1.2.1) In-The-Wild Script Virus testbed: Status July 31, 2001 ------------------------------------------------------------- M:\JVS\KAK\GEN 1 M:\VBS\HAPTIME\A 17 M:\VBS\LOVELETT\AS 1 M:\VBS\LOVELETT\BJ 1 M:\VBS\MCON\C 1 M:\VBS\VBSWG\J 1 M:\VBS\VBSWG\K 1 M:\VBS\VBSWG\X 6 M:\VBS\VBSWG\Z 4 M:\VBS\VERYFUNN\A 4 1.2.2) In-The-Wild Script Virus testbed: Status October 31, 2001 ---------------------------------------------------------------- W:\JVS\KAK\AA 1 W:\JVS\LODING\B 1 W:\VBS\FREELINK\GEN 1 W:\VBS\LODING\B 1 W:\VBS\SSIWG\U 1 W:\VBS\VBSWG\Y 1 2.1.1) Zoo Macro Virus testbed: Status July 31, 2001 ---------------------------------------------------- H:\O97M\TRISTATE\CK 7 H:\W97M\ALEJA\O 2 H:\W97M\ALLFUNC\D 6 H:\W97M\ANTISOCI\F\H 6 H:\W97M\ANTISOCI\I\K 6 H:\W97M\ANTISOCI\L\M 6 H:\W97M\ANTISOCI\N\O 6 H:\W97M\ARM\A 4 H:\W97M\AROWANA\A 5 H:\W97M\ASTIA\BG 2 H:\W97M\ASTIA\BH 2 H:\W97M\ASTIA\BI 3 H:\W97M\ASTIA\BJ 2 H:\W97M\ASTIA\BK 2 H:\W97M\ASTIA\BL 2 H:\W97M\ASTIA\BM 2 H:\W97M\ASTIA\BN 2 H:\W97M\ASTIA\BO 2 H:\W97M\ASTIA\BQ 2 H:\W97M\BABLAS\BS 1 H:\W97M\BABLAS\BT 1 H:\W97M\BABLAS\BU 2 H:\W97M\BABLAS\BV 2 H:\W97M\BABLAS\BX 4 H:\W97M\BABLAS\BY 6 H:\W97M\BABLAS\BZ 6 H:\W97M\BABLAS\CA 6 H:\W97M\BABLAS\CB 6 H:\W97M\BABLAS\CE 2 H:\W97M\BABLAS\CF 2 H:\W97M\BABLAS\CG 2 H:\W97M\BABLAS\CH 2 H:\W97M\BABLAS\CI 2 H:\W97M\BABLAS\CJ 2 H:\W97M\BABLAS\CK 2 H:\W97M\BABLAS\CL 2 H:\W97M\BABLAS\CM 2 H:\W97M\BABLAS\CN 2 H:\W97M\BABLAS\CO 2 H:\W97M\BABLAS\CP 2 H:\W97M\BABLAS\CQ 2 H:\W97M\BABLAS\CR 2 H:\W97M\BABLAS\CS 2 H:\W97M\BABLAS\CT 2 H:\W97M\BABLAS\CU 2 H:\W97M\BABLAS\CV 2 H:\W97M\BABLAS\CW 2 H:\W97M\BABLAS\CX 2 H:\W97M\BABLAS\CY 2 H:\W97M\BABLAS\CZ 2 H:\W97M\BABLAS\DA 2 H:\W97M\BABLAS\DB 2 H:\W97M\BABLAS\DC 2 H:\W97M\BABLAS\DD 2 H:\W97M\BABLAS\DE 2 H:\W97M\BABLAS\DG 2 H:\W97M\BABLAS\DH 2 H:\W97M\BABLAS\DI 2 H:\W97M\BABLAS\DJ 2 H:\W97M\BABLAS\DK 2 H:\W97M\BABLAS\DL 2 H:\W97M\BABLAS\DM 2 H:\W97M\BABLAS\DN 2 H:\W97M\BABLAS\DO 2 H:\W97M\BABLAS\DP 2 H:\W97M\BABLAS\DQ 2 H:\W97M\BABLAS\DR 2 H:\W97M\BABLAS\DS 2 H:\W97M\BABLAS\DT 2 H:\W97M\BABLAS\DU 2 H:\W97M\BABLAS\DV 2 H:\W97M\BEAST\41472_A 2 H:\W97M\BEEN\A 2 H:\W97M\BLECK\I 3 H:\W97M\BLECK\J 4 H:\W97M\BLECK\K 4 H:\W97M\BLOX\A-RU 3 H:\W97M\BOBO\K 3 H:\W97M\BOBO\L 3 H:\W97M\BOBO\M 8 H:\W97M\BOBO\N 6 H:\W97M\BOBO\O 4 H:\W97M\BOBO\P 4 H:\W97M\BOBO\Q 6 H:\W97M\BOLUC\A_MM 1 H:\W97M\BPTK\B 4 H:\W97M\BPTK\C 5 H:\W97M\BUENDIA\D 1 H:\W97M\BUMDOC\A 3 H:\W97M\CANDLE\D 3 H:\W97M\CHACK\AR 2 H:\W97M\CHACK\CD 4 H:\W97M\CHACK\CE 4 H:\W97M\CHACK\CF 4 H:\W97M\CHACK\CG 1 H:\W97M\CHACK\CI 1 H:\W97M\CHACK\CJ 1 H:\W97M\CHAMELEO\H 1 H:\W97M\CLASS\A-C 6 H:\W97M\CLASS\AC-AE 24 H:\W97M\CLASS\AF-AH 6 H:\W97M\CLASS\AJ-AM-DJ 30 H:\W97M\CLASS\BA-BB 6 H:\W97M\CLASS\CE-CF-EH 12 H:\W97M\CLASS\D-DB-DC 6 H:\W97M\CLASS\DF-DH 18 H:\W97M\CLASS\DS-DY 6 H:\W97M\CLASS\DT-DW 6 H:\W97M\CLASS\EA 2 H:\W97M\CLASS\FM 1 H:\W97M\CLASS\FO 6 H:\W97M\COCO\A 4 H:\W97M\COKE\A 2 H:\W97M\CONFUSED\A-TW 2 H:\W97M\CRAZY\D 2 H:\W97M\CRUSON\A_MM 3 H:\W97M\CUTTOR\A 3 H:\W97M\CYBESH\A 6 H:\W97M\DEBILZ\A 3 H:\W97M\DED\O 3 H:\W97M\DED\P 3 H:\W97M\DED\Q 7 H:\W97M\DELAY\A 2 H:\W97M\DEST\C 4 H:\W97M\DEST\D 2 H:\W97M\DEST\E 2 H:\W97M\DIHLO\A 4 H:\W97M\DOCCOPY\B 6 H:\W97M\DOCCOPY\C 5 H:\W97M\ETHAN\AF 2 H:\W97M\ETHAN\EE 3 H:\W97M\ETHAN\EG 1 H:\W97M\ETHAN\EH 5 H:\W97M\ETHAN\EI 2 H:\W97M\FATAL\A 2 H:\W97M\FF\K 3 H:\W97M\FLOP\B 6 H:\W97M\FOOTER\Z 4 H:\W97M\FS\AE-TW 2 H:\W97M\GDD\B 6 H:\W97M\GIRLS\B 5 H:\W97M\GULLIBLE\B 3 H:\W97M\GUNHILL\A 6 H:\W97M\HANA\B 2 H:\W97M\HILL\B 1 H:\W97M\HLAM\A_MM 9 H:\W97M\HLAM\UNK 1 H:\W97M\HOPE\AC 3 H:\W97M\HOPPER\AE 4 H:\W97M\INSPECTO\D 1 H:\W97M\INSPECTO\E 7 H:\W97M\IPID\H 2 H:\W97M\IRA\A 2 H:\W97M\ISENG\D 6 H:\W97M\JETHRO\A 3 H:\W97M\JISHE\B 2 H:\W97M\KILLHACK\A 3 H:\W97M\KPMV\A 2 H:\W97M\LILY\C 4 H:\W97M\LILY\D 4 H:\W97M\LYS\K 4 H:\W97M\MACROBLE\G 3 H:\W97M\MARKER\AW 2 H:\W97M\MARKER\AX 2 H:\W97M\MARKER\BI 2 H:\W97M\MARKER\BO-FY 2 H:\W97M\MARKER\C-AP-DJ 2 H:\W97M\MARKER\CS-HS 2 H:\W97M\MARKER\DS 2 H:\W97M\MARKER\EP-ET 2 H:\W97M\MARKER\HB 1 H:\W97M\MARKER\HC 6 H:\W97M\MARKER\HD 6 H:\W97M\MARKER\HE 3 H:\W97M\MARKER\HF 4 H:\W97M\MARKER\HG 4 H:\W97M\MARKER\HH 3 H:\W97M\MARKER\HI 3 H:\W97M\MARKER\HJ 2 H:\W97M\MARKER\HK 2 H:\W97M\MARKER\HL 3 H:\W97M\MARKER\HM 4 H:\W97M\MARKER\HN 6 H:\W97M\MARKER\HO 2 H:\W97M\MARKER\HP 2 H:\W97M\MARKER\HQ 5 H:\W97M\MARKER\HR 1 H:\W97M\MARKER\HT 2 H:\W97M\MARKER\HU 4 H:\W97M\MARKER\HV 6 H:\W97M\MARKER\HW 2 H:\W97M\MARKER\HX 4 H:\W97M\MARKER\HY 4 H:\W97M\MARKER\HZ 2 H:\W97M\MARKER\IA 4 H:\W97M\MARKER\IB 2 H:\W97M\MARKER\IC 2 H:\W97M\MARKER\ID 4 H:\W97M\MARKER\IE 2 H:\W97M\MARKER\IF 3 H:\W97M\MARKER\IG 3 H:\W97M\MARKER\IH 3 H:\W97M\MARKER\II 3 H:\W97M\MARKER\IJ 3 H:\W97M\MARKER\IK 3 H:\W97M\MARKER\IL 3 H:\W97M\MARKER\IM 3 H:\W97M\MARKER\IN 3 H:\W97M\MARKER\IO 3 H:\W97M\MARKER\IP 3 H:\W97M\MARKER\IQ 3 H:\W97M\MARKER\IR 5 H:\W97M\MARKER\IS 3 H:\W97M\MARKER\IT 5 H:\W97M\MARKER\IU 3 H:\W97M\MARKER\IV 3 H:\W97M\MARKER\IW 3 H:\W97M\MARKER\IX 3 H:\W97M\MARKER\IY 5 H:\W97M\MARKER\IZ 5 H:\W97M\MARKER\J-AO-DZ 2 H:\W97M\MARKER\JA 3 H:\W97M\MARKER\JC 4 H:\W97M\MARKER\JD 2 H:\W97M\MARKER\JH 2 H:\W97M\MARKER\JQ 2 H:\W97M\MARKER\JV 2 H:\W97M\MARKER\W-AN-AR 2 H:\W97M\MARMOT\B 6 H:\W97M\MARMOT\C 6 H:\W97M\MBAB\A 5 H:\W97M\MELISSA\BM_MM 6 H:\W97M\MINIMAL\BV 2 H:\W97M\MTRUE\B 4 H:\W97M\MUNA\A 2 H:\W97M\MURKE\E 2 H:\W97M\MXFILE\J 6 H:\W97M\MYNA\AP 2 H:\W97M\MYNA\AQ 2 H:\W97M\MYNA\AR 3 H:\W97M\MYNA\AS 3 H:\W97M\MYNA\AT 3 H:\W97M\NEWHOPE\G 1 H:\W97M\NEWHOPE\H 1 H:\W97M\NOMA\A 2 H:\W97M\NOP\AI 5 H:\W97M\NOP\AI_REM~1 2 H:\W97M\NOSF\A 5 H:\W97M\NOTME\A 9 H:\W97M\NOTTICE\AU 6 H:\W97M\NSI\I 4 H:\W97M\ODIOUS\E 8 H:\W97M\ODIOUS\F 6 H:\W97M\OLDGUY\C 3 H:\W97M\OLLEH\A 2 H:\W97M\OPEY\AV 6 H:\W97M\OSTRICH\B 28 H:\W97M\OUTA\11776_~1 2 H:\W97M\OZWER\Q 2 H:\W97M\PANTHER\R 2 H:\W97M\PARA\A 5 H:\W97M\PIECE\A_MM 2 H:\W97M\PROVERB\S 2 H:\W97M\QUEST\A 1 H:\W97M\RAMZA\A 4 H:\W97M\RASCAL\A 4 H:\W97M\REPLOG\D 4 H:\W97M\SCRSTEAL\A 1 H:\W97M\SHERLOCK\E 2 H:\W97M\SHERLOCK\F 7 H:\W97M\SHORE\I 4 H:\W97M\SHORE\J 5 H:\W97M\SHORE\K 4 H:\W97M\SHORE\M 2 H:\W97M\SMAC\N 6 H:\W97M\SPECMILL\A 4 H:\W97M\STORY\AL 4 H:\W97M\STORY\AM 2 H:\W97M\STORY\AN 4 H:\W97M\STORY\AO 4 H:\W97M\STORY\AP 4 H:\W97M\STORY\AQ 4 H:\W97M\STORY\AR 4 H:\W97M\STORY\AS 4 H:\W97M\STORY\AT 4 H:\W97M\STRINGS\H 3 H:\W97M\STRINGS\I 5 H:\W97M\SWORD\A 2 H:\W97M\THESEC\B 3 H:\W97M\THESEC\C 2 H:\W97M\THESEC\D 2 H:\W97M\THUS\CZ 3 H:\W97M\THUS\DC 3 H:\W97M\THUS\EF 3 H:\W97M\THUS\EG 5 H:\W97M\THUS\EH 1 H:\W97M\THUS\EI 4 H:\W97M\THUS\EJ 3 H:\W97M\THUS\EK 3 H:\W97M\THUS\EN 4 H:\W97M\THUS\EO 3 H:\W97M\THUS\EP 4 H:\W97M\THUS\EQ 6 H:\W97M\THUS\ER 4 H:\W97M\THUS\ES 4 H:\W97M\THUS\ET 4 H:\W97M\THUS\EU 4 H:\W97M\THUS\EV 2 H:\W97M\THUS\EW 4 H:\W97M\THUS\EX 4 H:\W97M\THUS\EY 2 H:\W97M\THUS\EZ 8 H:\W97M\TOLER\A 5 H:\W97M\TOUCHME\D 2 H:\W97M\TROLOX\A 6 H:\W97M\TWIST\A 1 H:\W97M\TWNO\BK 1 H:\W97M\TWOPEY\A 7 H:\W97M\VALERIA\B 8 H:\W97M\VERLOR\K 4 H:\W97M\VMPCK1\EA 2 H:\W97M\VMPCK1\EC 2 H:\W97M\VOVI\A 3 H:\W97M\VP\F 4 H:\W97M\WAZZU\HM 8 H:\W97M\WRENCH\M 3 H:\W97M\WRENCH\N 2 H:\W97M\ZEITUNG\D 3 H:\W97M\ZEITUNG\E 5 H:\WM\WAZZU\GH 2 H:\X97M\ADN\C 1 H:\X97M\ADN\D 2 H:\X97M\BARISADA\AA 5 H:\X97M\BARISADA\S 4 H:\X97M\BARISADA\T 1 H:\X97M\BARISADA\U 1 H:\X97M\BARISADA\V 2 H:\X97M\BARISADA\W 3 H:\X97M\BARISADA\X 3 H:\X97M\BARISADA\Y 4 H:\X97M\BARISADA\Z 5 H:\X97M\COCO\A 4 H:\X97M\CONFUSED\A-TW 1 H:\X97M\DIVI\AI 1 H:\X97M\HOPPER\AE 5 H:\X97M\LAROUX\MF 3 H:\X97M\LAROUX\NY 2 H:\X97M\LAROUX\NZ 2 H:\X97M\LAROUX\OA 4 H:\X97M\LAROUX\OB 3 H:\X97M\LAROUX\OD 4 H:\X97M\PINKPICK\B 4 H:\X97M\SQUARED\B 4 H:\X97M\TESTER\A 4 H:\XF\SIC\G 1 H:\XF\SIC\H 2 H:\XF\SIC\I 2 2.1.2) Zoo Macro Virus testbed: Status October 31, 2001 ------------------------------------------------------- R:\W97M\ADOK\A 1 R:\W97M\ALIV\A 10 R:\W97M\ASSYL\A_MM 1 R:\W97M\ASTIA\BP 4 R:\W97M\ASTIA\BR 6 R:\W97M\ASTIA\BS 4 R:\W97M\ASTIA\BT 1 R:\W97M\BABLAS\DW 4 R:\W97M\BABLAS\DX 1 R:\W97M\BABLAS\DY 2 R:\W97M\BLOCKOUT\B 2 R:\W97M\BLOWUP\A 9 R:\W97M\BOBO\R 3 R:\W97M\BOTTRA\C 9 R:\W97M\CAMINO\A 7 R:\W97M\CANDLE\H 9 R:\W97M\CERIN\A 6 R:\W97M\CHACK\CH 3 R:\W97M\CLASS\FP 6 R:\W97M\COPYME\A 6 R:\W97M\DEATH\C 5 R:\W97M\DED\U 3 R:\W97M\DERF\C 3 R:\W97M\DIG\B 5 R:\W97M\DIRPA\A 8 R:\W97M\DOEII\B 4 R:\W97M\ERQ\A 5 R:\W97M\ETHAN\EJ 2 R:\W97M\ETHAN\EK 4 R:\W97M\ETHAN\EL 6 R:\W97M\FTIP\B_MM 1 R:\W97M\GAMLET\C 5 R:\W97M\GOOBER\F 1 R:\W97M\GRAC\A 6 R:\W97M\GROOV\AO 4 R:\W97M\GUB\A 13 R:\W97M\HOPE\AE 1 R:\W97M\HOPE\AG 2 R:\W97M\IIS\W 1 R:\W97M\IIS\X 2 R:\W97M\IIS\Y 1 R:\W97M\INADD\F 4 R:\W97M\INSPECTO\F 3 R:\W97M\INSPECTO\GEN 1 R:\W97M\INSPECTO\G 2 R:\W97M\IPID\I 3 R:\W97M\JISHE\C 6 R:\W97M\JULYKILL\F 5 R:\W97M\KOLOP\A 4 R:\W97M\LIBERATE\A 6 R:\W97M\LIKON\A 12 R:\W97M\LILY\E 1 R:\W97M\MANDIR\A 2 R:\W97M\MARKER\JF 2 R:\W97M\MARKER\JJ 6 R:\W97M\MARKER\JK 4 R:\W97M\MARKER\JL 4 R:\W97M\MARKER\JM 7 R:\W97M\MARKER\JN 2 R:\W97M\MARKER\JO 2 R:\W97M\MARKER\JR 3 R:\W97M\MARMOT\D 1 R:\W97M\MEDIA\B 4 R:\W97M\MESMOTH\A 5 R:\W97M\METYS\S 4 R:\W97M\MINIMAL\BW 4 R:\W97M\MINIMAL\BX 3 R:\W97M\MURKE\F 3 R:\W97M\MYNA\AV 4 R:\W97M\MYNA\AW 2 R:\W97M\MYNA\AX 5 R:\W97M\NAGEM\E 3 R:\W97M\NAGEM\F 1 R:\W97M\NAGEM\G 3 R:\W97M\NEWHOPE\I 5 R:\W97M\NINEL\A 2 R:\W97M\NOSTYLE\C 7 R:\W97M\NOSTYLE\D 5 R:\W97M\NOSTYLE\F 1 R:\W97M\NOTHERE\B-RU 4 R:\W97M\OPEY\AW 2 R:\W97M\PAMSON\A 2 R:\W97M\PANTHER\S 3 R:\W97M\PCK\A 1 R:\W97M\PING\M_MM 3 R:\W97M\POSI\A 5 R:\W97M\PROVERB\T 4 R:\W97M\RAMZA\B 5 R:\W97M\REMPLACE\Q 3 R:\W97M\REPLOG\E 4 R:\W97M\SABA\A 2 R:\W97M\SEQNUM\C 3 R:\W97M\SETMD\J 1 R:\W97M\SHORE\L 1 R:\W97M\SR\F 5 R:\W97M\SR\G 3 R:\W97M\SR\H 3 R:\W97M\SR\I 1 R:\W97M\STARSIDE\A 2 R:\W97M\STING\A 2 R:\W97M\STORY\AU 4 R:\W97M\STORY\AV 4 R:\W97M\STORY\AW 4 R:\W97M\STORY\AX 4 R:\W97M\STORY\AY 4 R:\W97M\STORY\AZ 2 R:\W97M\STORY\BA 4 R:\W97M\STORY\BB 4 R:\W97M\STORY\BC 4 R:\W97M\STORY\BD 4 R:\W97M\TADOR\A 12 R:\W97M\TELOSA\A 2 R:\W97M\TERMINA\A 4 R:\W97M\THELAR\A 14 R:\W97M\THESEC\E 5 R:\W97M\THESEC\F 5 R:\W97M\THESEC\G 5 R:\W97M\THESEC\H 4 R:\W97M\THESEC\I 5 R:\W97M\THESEC\J 3 R:\W97M\THESEC\K 2 R:\W97M\THESEC\L 3 R:\W97M\THUS\FB 8 R:\W97M\THUS\FC 10 R:\W97M\THUS\FD 5 R:\W97M\THUS\FE 4 R:\W97M\THUS\FF 4 R:\W97M\THUS\FG 5 R:\W97M\THUS\FH 4 R:\W97M\THUS\FI 2 R:\W97M\TITCH\J 5 R:\W97M\TOLU\B 2 R:\W97M\TRADO\A 3 R:\W97M\TRIMMER\A 7 R:\W97M\TRISTATE\CM 3 R:\W97M\TWNO\BL 3 R:\W97M\TWOPEY\B 4 R:\W97M\VIVEX\A 5 R:\W97M\VMPCK1\EB 1 R:\W97M\VMPCK1\ED 2 R:\W97M\VMPCK1\EE 6 R:\W97M\VMPCK1\EF 2 R:\W97M\VMPCK1\GEN 2 R:\W97M\VOVAN\B 2 R:\W97M\VOVAN\D 8 R:\W97M\VVL\A 2 R:\W97M\WRENCH\O 4 R:\W97M\WRENCH\Q 4 R:\W97M\ZERCO\A 4 R:\WM\JISU\A-JP 2 R:\WM\SHOWOFF\DX 2 R:\X97M\ADN\E 2 R:\X97M\ADN\F 2 R:\X97M\ADN\GEN 1 R:\X97M\BARISADA\AC 3 R:\X97M\BARISADA\AD 2 R:\X97M\BARISADA\O 3 R:\X97M\BDOC2 8 R:\X97M\DIVI\AK 4 R:\X97M\DIVI\AL 2 R:\X97M\DIVI\AM 2 R:\X97M\ELLAR\A 3 R:\X97M\GENE\A 10 R:\X97M\GUB\A 7 R:\X97M\LAROUX\DN 3 R:\X97M\LAROUX\OE 2 R:\X97M\LAROUX\OF 2 R:\X97M\LAROUX\OG 6 R:\X97M\LAROUX\OJ 5 R:\X97M\NOSTYLE\D 2 R:\X97M\NOSTYLE\E 3 R:\X97M\TRISTATE\CM 2 R:\XF\SIC\J 8 R:\XM\LAROUX\OD 1 R:\XM\LAROUX\OF 1 R:\XM\NOT_A_VI\A 1 2.2.1) Zoo Script Virus testbed: Status July 31, 2001 ----------------------------------------------------- J:\IRC\BARACUDA\A 2 J:\IRC\CYBESH\A 1 J:\IRC\FLOOD\A 7 J:\IRC\GAMMA\B 1 J:\IRC\KARMAHOT\A 1 J:\IRC\KARMAHOT\B 1 J:\IRC\LUCKY\B 1 J:\IRC\LUCKY\C 1 J:\IRC\LUCKY\D 1 J:\IRC\LUCKY\E 1 J:\IRC\LUCKY\F 1 J:\IRC\LUCKY\G 1 J:\IRC\METAK\A 1 J:\IRC\MIMIC\A 3 J:\IRC\MIMIC\B 4 J:\IRC\MIMIC\X 8 J:\IRC\MOMMA\B 7 J:\IRC\MOMMA\C 11 J:\IRC\MOMMA\D 11 J:\IRC\NODOG\A 2 J:\IRC\NODOG\H 1 J:\IRC\PARROT\A 1 J:\IRC\PETTICK\C 1 J:\IRC\REPAH\A 1 J:\IRC\STORY\AP 1 J:\IRC\URBE 1 J:\IRC\YELLO\A 2 J:\IRC\YELLO\B 5 J:\JVS\GERMINAL\A 2 J:\JVS\KAK\GEN 1 J:\JVS\KAK\Z 3 J:\JVS\KARMAHOT\A 1 J:\JVS\KARMAHOT\B 1 J:\JVS\SST\A_MM 2 J:\JVS\WINBOMB\D 1 J:\VBS\ABLANK\A 2 J:\VBS\ALEAT\A\ALEAT 4 J:\VBS\ALLFREE\A 2 J:\VBS\ANJULIE\A 2 J:\VBS\ANJULIE\B 2 J:\VBS\ANJULIE\GEN1 6 J:\VBS\ANJULIE\GEN 2 J:\VBS\ANTIMP3\A 1 J:\VBS\BEBOP\D_MM 3 J:\VBS\BESTFRIE\A 1 J:\VBS\BLANK\A 3 J:\VBS\BOLUC\A_MM 2 J:\VBS\BOTHER\A 3 J:\VBS\BOTH\A 6 J:\VBS\BUMDOC\A 1 J:\VBS\BUMERANG\A 1 J:\VBS\CATFISH\A_MM 1 J:\VBS\CHAMEL~1\C 3 J:\VBS\CRYPTER\A 3 J:\VBS\CRYPTER\GEN1 1 J:\VBS\CRYPTER\GEN 3 J:\VBS\CRYSTAL\B 1 J:\VBS\CYBESH\A 3 J:\VBS\DECBEL\A 1 J:\VBS\DECBEL\GEN_MM 1 J:\VBS\DELFILE\A 1 J:\VBS\DEMON\A 1 J:\VBS\DOW\A 1 J:\VBS\EVA\A 1 J:\VBS\EVA\B 2 J:\VBS\FREELINK\G_MM 3 J:\VBS\GAMMA\A 1 J:\VBS\GAMMA\B 1 J:\VBS\GODWILL\A_MM 3 J:\VBS\GRIBBLE\A 1 J:\VBS\HAPTIME\A 17 J:\VBS\HAPTIME\C 3 J:\VBS\HAPTIME\D 2 J:\VBS\HARD\A 3 J:\VBS\HDFK\TROJAN 1 J:\VBS\HEART\A 8 J:\VBS\HORID\A 1 J:\VBS\IEPATCH\A 1 J:\VBS\J441\A 2 J:\VBS\JOLIN\A 1 J:\VBS\KARMAHOT\A 1 J:\VBS\KARMAHOT\B 1 J:\VBS\LINONG\A 1 J:\VBS\LOVELETT\AS 1 J:\VBS\LOVELETT\B 1 J:\VBS\LOVELETT\CU 1 J:\VBS\LOVELETT\CX 1 J:\VBS\LOVELETT\GEN1 6 J:\VBS\LOVELETT\GEN2 1 J:\VBS\LOVELETT\L 1 J:\VBS\LOVELETT\NEW 1 J:\VBS\LOVELETT\NOON 3 J:\VBS\LOVELETT\N 1 J:\VBS\MAT\A 1 J:\VBS\MCON\B 2 J:\VBS\MCON\C 1 J:\VBS\MCON\GEN 1 J:\VBS\MERLIN\A 1 J:\VBS\MERLIN\B 11 J:\VBS\MERLIN\NEW 6 J:\VBS\MIMIC\NEW 1 J:\VBS\MISSY\A 1 J:\VBS\MONCHER\B 1 J:\VBS\NEER\A 2 J:\VBS\NETLOG\GEN1 2 J:\VBS\NETLOG\GEN 1 J:\VBS\NIGHFLIG\A 4 J:\VBS\NOON\TROJAN 1 J:\VBS\NOTICE\A 1 J:\VBS\OPSE\A 2 J:\VBS\PARA\A 2 J:\VBS\PEDPOLY\A 1 J:\VBS\PETTICK\A 5 J:\VBS\PETTICK\B 2 J:\VBS\PETTICK\C 1 J:\VBS\PETTICK\E 1 J:\VBS\PETTICK\GEN1 1 J:\VBS\PETTICK\GEN 2 J:\VBS\PETTICK\I 2 J:\VBS\PETTICK\J 1 J:\VBS\PLACID\A 1 J:\VBS\POTOK\A_MM 1 J:\VBS\POTOK\GEN 1 J:\VBS\PTNET\A_MM 3 J:\VBS\RAPTOR\A 1 J:\VBS\REALITY\C 3 J:\VBS\REPAH\A 1 J:\VBS\SATANIK\A 2 J:\VBS\SATAN\A 1 J:\VBS\SATAN\GEN 3 J:\VBS\SCHISM\A 2 J:\VBS\SCHISM\B 1 J:\VBS\SEGA\GEN 1 J:\VBS\SINEP\A_MM 4 J:\VBS\SOCK\A 1 J:\VBS\SOCK\GEN 1 J:\VBS\SST\A 1 J:\VBS\STAPLE\B 1 J:\VBS\TANIK\TROJAN 1 J:\VBS\TVKID\A 1 J:\VBS\URBE\A 2 J:\VBS\VBSWG2\A 1 J:\VBS\VBSWG2\GEN 1 J:\VBS\VBSWG\AA 2 J:\VBS\VBSWG\AB 1 J:\VBS\VBSWG\AC 1 J:\VBS\VBSWG\J 1 J:\VBS\VBSWG\K 1 J:\VBS\VBSWG\X 5 J:\VBS\VBSWG\Y 1 J:\VBS\VBSWG\Z 4 J:\VBS\VERYFUNN\A 4 J:\VBS\VINTAGE\B 1 J:\VBS\WHITEHOM\A 7 J:\VBS\WHITEHOM\B 3 J:\VBS\XANAX\B 1 J:\VBS\YABRAN\A_MM 3 J:\VBS\YANG\A 1 J:\VBS\YELLO\A 9 J:\VBS\ZEAM\A 1 J:\VBS\ZOMB\A 2 J:\VBS\ZULU\C 2 J:\VBS\ZULU\E 9 J:\WBS\CHISM\A 9 2.2.2) Zoo Script Virus testbed: Status October 31, 2001 -------------------------------------------------------- T:\IRC\ALBA\A 1 T:\IRC\FUNGS\GEN1 3 T:\IRC\FUNGS\GEN2 3 T:\IRC\KARMAHOT\C 1 T:\IRC\MANILA\A 1 T:\IRC\MANILA\B 1 T:\IRC\MIMIC\GEN1 1 T:\IRC\MIMIC\GEN2 6 T:\IRC\MIMIC\GEN3 3 T:\IRC\MIMIC\GEN4 1 T:\IRC\MIMIC\GEN 10 T:\IRC\RADEX\A 2 T:\IRC\REDESI\D 1 T:\IRC\SATAS\GEN 1 T:\IRC\THEME\A 3 T:\IRC\THEME\B 3 T:\IRC\WAREZ\GEN 1 T:\JVS\EMIN\A_MM 1 T:\JVS\KAK\AA 1 T:\JVS\KARMAHOT\C 1 T:\JVS\LODING\B 1 T:\JVS\OFFENSIV\A 3 T:\VBS\ALEAT\GEN 5 T:\VBS\ANJULIE\GEN1 1 T:\VBS\ANJULIE\GEN2 2 T:\VBS\ANTISCRI\A 1 T:\VBS\BEER\GEN 2 T:\VBS\BICI\A 1 T:\VBS\BLUECODE 1 T:\VBS\BLUEMAIL\A_MM 2 T:\VBS\BLUEMAIL\GEN 1 T:\VBS\CAMINO\GEN 2 T:\VBS\CIDKO\A 1 T:\VBS\CIDKO\GEN 2 T:\VBS\CUERPO\A_MM 2 T:\VBS\CUERPO\GEN 5 T:\VBS\DAWOK\A 3 T:\VBS\DREAM\B 2 T:\VBS\ELIMENCE\A 1 T:\VBS\EYEMAGIC\A_MM 1 T:\VBS\FELA\A 1 T:\VBS\FILIS\A 1 T:\VBS\FREELINK\GEN 2 T:\VBS\FROZE\GEN1 1 T:\VBS\FROZE\GEN 5 T:\VBS\GRIBBLE\GEN1 1 T:\VBS\GRIBBLE\GEN 3 T:\VBS\HAPTIME\A_MM 1 T:\VBS\INFI\A 1 T:\VBS\INFORT\A 1 T:\VBS\ITPOEM\A_MM 1 T:\VBS\KARMAHOT\C 1 T:\VBS\LENNIUM\A 1 T:\VBS\LEO\A 2 T:\VBS\LESBO\A 2 T:\VBS\LODING\A 3 T:\VBS\LODING\B 1 T:\VBS\LOVELETT\CV_MM 2 T:\VBS\LOVELETT\CW_MM 1 T:\VBS\LOVELETT\CY 1 T:\VBS\LOVELETT\GEN3 1 T:\VBS\MERLIN\C_MM 1 T:\VBS\METAPHAS\GEN 1 T:\VBS\MIMIC\GEN1 2 T:\VBS\MIMIC\GEN2 1 T:\VBS\MIMIC\GEN 1 T:\VBS\MOOD\A 1 T:\VBS\NETLOG\I 1 T:\VBS\NOONER\A 1 T:\VBS\NOSTD\A 1 T:\VBS\NOTH\A 1 T:\VBS\PAUKOR\A 1 T:\VBS\PEACHY\A 3 T:\VBS\PEACHY\GEN 3 T:\VBS\PETTICK\CASPER 1 T:\VBS\POTOK\A 1 T:\VBS\RAK\A 1 T:\VBS\SANDRA\A 1 T:\VBS\SFLUS\B 10 T:\VBS\SHELLVIR\A 1 T:\VBS\SSIWG\U 2 T:\VBS\SST\A_MM 1 T:\VBS\SWVK\GEN1 1 T:\VBS\SWVK\GEN 1 T:\VBS\THEA\A 1 T:\VBS\THROWER\A 3 T:\VBS\THROWER\B 3 T:\VBS\VBSWG2\D_MM 3 T:\VBS\VBSWG\AF-ANJUL 2 T:\VBS\VBSWG\AG 1 T:\VBS\VBSWG\AH 1 T:\VBS\VBSWG\AI 1 T:\VBS\VBSWG\AJ 1 T:\VBS\VBSWG\D_MM 1 T:\VBS\VBSWG\T 1 T:\VBS\WARVOTE\A 3 T:\VBS\WARVOTE\B 2 T:\VBS\XENDI\GEN 2 T:\VBS\XPMSG\A_MM 1 T:\VBS\YUMIDAY\A 1 T:\VBS\ZAMBO\A 1 T:\VBS\ZYNC\A 1 2.3.1) Macro Malware testbed: Status July 31, 2001 -------------------------------------------------- I:\INTENDED\W97M\ANTIMARC\B 2 I:\INTENDED\W97M\BABLAS\CC 3 I:\INTENDED\W97M\BABLAS\CD 2 I:\INTENDED\W97M\BABLAS\DF 1 I:\INTENDED\W97M\BEBOP\F 1 I:\INTENDED\W97M\BIH\B 1 I:\INTENDED\W97M\BLEED\H 1 I:\INTENDED\W97M\CHACK\CG 1 I:\INTENDED\W97M\CLASS\N 1 I:\INTENDED\W97M\DOG\D 1 I:\INTENDED\W97M\MELISSA\BN 1 I:\INTENDED\W97M\MERLIN\B 2 I:\INTENDED\W97M\THREE\A 1 I:\INTENDED\W97M\UCK\H 1 I:\INTENDED\WM\UCK\G 2 I:\INTENDED\WM\WG\12288_B 3 I:\INTENDED\X97M\YAWN\I 1 I:\KIT\W97M\SFVCK\A 1 I:\KIT\W97M\WMVGB\A 1 I:\TROJAN\W97M\ABRE\B 1 I:\TROJAN\W97M\COBRA\AC 1 I:\TROJAN\W97M\MINUS\A 1 2.3.2) Macro Malware testbed: Status October 31, 2001 ----------------------------------------------------- S:\INTENDED\W97M\HILITE\C 1 S:\INTENDED\W97M\VERLOR\L 1 S:\INTENDED\WM\NJWMVCK2\O 1 S:\KIT\W97M\NTVCK\A 1 S:\KIT\W97M\OSTRICH\A 1 S:\TROJAN\W97M\DSFT\B 1 S:\TROJAN\X97M\LOSER\A 1 2.3.1) Script Malware testbed: Status July 31, 2001 --------------------------------------------------- K:\INTENDED\VBS\LOVELE~1\GEN 2 K:\INTENDED\VBS\POEMS\A 3 K:\INTENDED\VBS\SCDROP~1 2 K:\INTENDED\VBS\XPJUNEXP\A 1 K:\KIT\VBS\SVBSVC\A 2 K:\TROJAN\IRC\ACNU\GEN1 3 K:\TROJAN\IRC\ACNU\GEN 4 K:\TROJAN\IRC\BNC\GEN 3 K:\TROJAN\IRC\FLOOD\F 2 K:\TROJAN\IRC\FLOOD\G 7 K:\TROJAN\IRC\FLOOD\M 3 K:\TROJAN\IRC\FLOOD\N 1 K:\TROJAN\IRC\GOODBOT\GEN 1 K:\TROJAN\IRC\MIMIC\GEN 3 K:\TROJAN\IRC\SATAS\A 1 K:\TROJAN\IRC\WINHELP\GEN1 4 K:\TROJAN\IRC\WINHELP\GEN 2 K:\TROJAN\JVS\BOMB\GEN 1 K:\TROJAN\JVS\DELSYS\GEN 1 K:\TROJAN\JVS\IESTART\GEN 1 K:\TROJAN\JVS\LOADER\GEN 1 K:\TROJAN\JVS\SEEKER\P 3 K:\TROJAN\VBS\BLANK\A 1 K:\TROJAN\VBS\DELSYS\GEN 1 K:\TROJAN\VBS\GEN 1 K:\TROJAN\VBS\LAR\GEN 1 K:\TROJAN\VBS\NEER\GEN1 1 K:\TROJAN\VBS\NEER\GEN 1 K:\TROJAN\VBS\PWSTROY\GEN 1 K:\TROJAN\VBS\ROLS\GEN 2 K:\TROJAN\VBS\RUNSCRIP\GEN1 1 K:\TROJAN\VBS\RUNSCRIP\GEN2 2 K:\TROJAN\VBS\RUNSCRIP\GEN 1 K:\TROJAN\VBS\SATAN 2 K:\TROJAN\VBS\SEEKER\C 3 K:\TROJAN\VBS\SEEKER\D 2 K:\TROJAN\VBS\SEEKER\H 2 2.3.2) Script Malware testbed: Status October 31, 2001 ------------------------------------------------------ U:\BACKDOOR\VBS\OWNED\GEN 1 U:\DROPPER\VBS\DIE-HARD\A 2 U:\DROPPER\VBS\DIEHARD2\A 1 U:\DROPPER\VBS\GODOK\A 3 U:\DROPPER\VBS\TAA\A 1 U:\INTENDED\VBS\INTSCRIP\GEN 1 U:\INTENDED\VBS\VERYSI~1\GEN 1 U:\TROJAN\IRC\ABUSER\GEN1 1 U:\TROJAN\IRC\ABUSER\GEN 1 U:\TROJAN\IRC\ACNU\A 1 U:\TROJAN\IRC\ACNU\B 3 U:\TROJAN\IRC\ACNU\C 3 U:\TROJAN\IRC\ACNU\GEN1 1 U:\TROJAN\IRC\ACNU\GEN2 3 U:\TROJAN\IRC\ALLEGRO\A 1 U:\TROJAN\IRC\BNC\GEN1 1 U:\TROJAN\IRC\BNC\GEN2 2 U:\TROJAN\IRC\BNC\GEN3 1 U:\TROJAN\IRC\BNC\GEN4 1 U:\TROJAN\IRC\BNC\GEN5 2 U:\TROJAN\IRC\CLAN\A 1 U:\TROJAN\IRC\CLAN\B 1 U:\TROJAN\IRC\CLAN\GEN 8 U:\TROJAN\IRC\CRITICAL\GEN1 3 U:\TROJAN\IRC\CRITICAL\GEN 7 U:\TROJAN\IRC\DAAR\GEN 1 U:\TROJAN\IRC\FINALBOT\GEN1 13 U:\TROJAN\IRC\FINALBOT\GEN 13 U:\TROJAN\IRC\ROL-REL\GEN 1 U:\TROJAN\IRC\SATAS\GEN 1 U:\TROJAN\IRC\WINHELP\GEN2 1 U:\TROJAN\IRC\WINHELP\GEN3 2 U:\TROJAN\IRC\WINHELP\GEN4 3 U:\TROJAN\IRC\WINHELP\GEN5 12 U:\TROJAN\IRC\WINHELP\GEN6 3 U:\TROJAN\IRC\X-UNNAM\GEN 1 U:\TROJAN\JS\CORE\GEN 1 U:\TROJAN\JS\CRASHER\GEN 1 U:\TROJAN\JS\CURS\GEN 1 U:\TROJAN\JS\IESTART\GEN1 2 U:\TROJAN\JS\IESTART\GEN2 7 U:\TROJAN\JS\IESTART\GEN3 7 U:\TROJAN\JS\IESTART\GEN4 2 U:\TROJAN\JS\IESTART\GEN 2 U:\TROJAN\JS\LOOP 1 U:\TROJAN\JS\OFFENS\GEN1 1 U:\TROJAN\JS\OFFENS\GEN 1 U:\TROJAN\JS\SEEKER\A 4 U:\TROJAN\JS\SEEKER\GEN1 2 U:\TROJAN\JS\SEEKER\GEN2 3 U:\TROJAN\JS\SEEKER\GEN 1 U:\TROJAN\JS\SETZONE\GEN 1 U:\TROJAN\JS\SPAM\GEN 1 U:\TROJAN\VBS\APOP\GEN 1 U:\TROJAN\VBS\BATTY\GEN1 3 U:\TROJAN\VBS\BATTY\GEN 3 U:\TROJAN\VBS\BITEME\GEN 2 U:\TROJAN\VBS\BORG\A 1 U:\TROJAN\VBS\CAROT\A 2 U:\TROJAN\VBS\CRYPTER\GEN 1 U:\TROJAN\VBS\DELREG\GEN 1 U:\TROJAN\VBS\IRW\GEN 1 U:\TROJAN\VBS\MANDOES\GEN 1 U:\TROJAN\VBS\MASTEAL\GEN 1 U:\TROJAN\VBS\QDEL\GEN 1 U:\TROJAN\VBS\RUNSCRIP\A 1 U:\TROJAN\VBS\RUNSCRIP\GEN1 1 U:\TROJAN\VBS\RUNSCRIP\GEN 1 U:\TROJAN\VBS\SEEKER\GEN 1 U:\TROJAN\VBS\SITEX\GEN 1 U:\TROJAN\VBS\TANIK\GEN 1 U:\TROJAN\VBS\TOREN\GEN 2 U:\TROJAN\VBS\ZAMBO\GEN 1