Table of contents: ------------------ I. Introduction II. Copyright, License, and Disclaimer. III. Detail results IV. Detection rates 1. Totals, absolute 2. Totals, percentages 3. Ranking V. Comments I. Introduction. ---------------- Welcome to the 1996 VTC-Amiga Anti-Virus test report. Programmes in this test: VT 2.81 Virus Test by Heiner Schneegold (VT) VW 5.9 Virus Workshop by Markus Schmall (VW) VZ II 129 Virus Z II by Georg Hoermann (VZ) SFAP 1.4 Siegfried Antivirus Professional by Siegfried Soft (SF) Xtruder 2.3 Xtruder 2.3 by Martin Wulffeldt (XT) Why not testing more Amiga-Antivirus products ? The selection of this products is a subjective view of the actual market. The selection of tested products represents common virus-scanners which were updated at least once in the last 4 month. Official release date of this test: The official release date of this test is the 2.4.1996. (Due to several product-crashes (see below) the test could not be finished for CeBIT'96, sorry) Tested facilities of the products: This test mainly shows the detection rate of the products. User-interface, styleguide etc.. are no essential topics of this test. II. Copyright, License, and Disclaimer. --------------------------------------- This publication is (C) Copyright 1996 by Soenke Freitag and the Virus Test Center at the University of Hamburg. Permission is granted to everybody to distribute copies of this information in electronic form, provided that this is done for free, the contents of the information is not changed in any way, and the source of the information is clearly mentioned. Those who want to re-publish the information as a whole or in parts in printed form, MUST contact Soenke Freitag or the VTC-Hamburg and obtain permission first. No responsibility is assumed by the publisher for any injury and/or damage to persons or property as a matter of products liability, negligence or otherwise, or from any use or operation of any methods, products, instructions or idea contained in the material herein. III. Detail results ------------------- Malware / Virus + Strain VT VW VZ SF XT TYP 16_BitCrew.Graffiti X o X X X b 16_BitCrew.Original X o X X X b 16_BitCrew.Paratax3 X o X O O b 16_BitCrew.Zaccess1_0 X o X O O b AAA-Enhancer X X X X . t ABC X X X X X b Achtung_Trojan X X X . X t AcidInfector X X . . . f Addy.Dropper X X X . X t Addy.Trojan X X X / X f AGA-Install X X . . X t Ahkeym X X . . . t AISF X X X . X t Alien X X X . X t AlienNewBeat.Original X X X X X b AmiBlank X X X . . t AmigaFanatic X X X . X b Amigaknight X X X X X f Angel X X X X X b Australian_parasite.Original X X X X X b BBS.$4EB9-Link.Diskrepair O X X . X t BBS.$4EB9-Link.DMS2_06 X X X X X t BBS.$4EB9-Link.First X X X . X t BBS.$4EB9-Link.LHAV3 O X X . . t BBS.$4EB9-Link.Whitebox_V8_0 O X X . . t BBS.AeReg X X X X . t BBS.AmiPatch_1_0a X X X . . f BBS.AX_F__ker X X X . X f BBS.AX_Hacker X X X . X t BBS.Blieb6 X X . . . t BBS.CCHack X X X . X t BBS.CLP_Based.CLP_WOW X X . . - t BBS.CLP_Based.MST-VEC X X X X . t BBS.CLP_Based.PHA_trojan X X X X X t BBS.CLP_Based.UA_Dailer_6_2 X X X . . t BBS.Devil.11-b-door.DLog O X O . X t BBS.Devil.11-b-door.MsgTop O X O . X t BBS.Devil.11-b-door.ULog O X O . X t BBS.Devil.11-b-door.VScan X X X . . t BBS.Devil.V8-b-door X X X . X t BBS.Doom_CLX.Dropper X X X . . t BBS.Doom_CLX.Viruses X X X . - t BBS.DOpus-Virus X X . . X t BBS.DSC101 X X X X X t BBS.Easy_E X X X / . t BBS.Express_2_20.Aibon.2 X O X X . f BBS.Express_2_20.Aibon.3 O X O X . f BBS.Express_2_20.DWEdit_Aibon X X X o . t BBS.Express_2_20.Original X X X X . f BBS.Istrip X X X . X t BBS.Lhacheck X X X X . t BBS.Look X X X . . t BBS.MasterBBS_troj X X X . . t BBS.Merry X X X . X t BBS.MONGO.09 X X X . X t BBS.MONGO.51 X X X . X t BBS.M_Chat.ATX_Chat X X O X . t BBS.M_Chat.MST-DoorBells X X X X . t BBS.M_Chat.Original X X X O . t BBS.No_Guru X X X X X f BBS.PB-Party X X X . . t BBS.PP-Bomb.Died O O O . X t BBS.PP-Bomb.MegaMon X O . . . t BBS.PP-Bomb.ModuleMast17 X X O . X t BBS.PP-Bomb.qtx_pow O X O O X t BBS.Pstats X X X X . t BBS.SCAN_X X X . . - t BBS.ShowSysops X X X X X f BBS.Snoopdos1_6_troj X X X o X t BBS.Stockmarket_troj X X X . . t BBS.Toputil X X X X . t BBS.Trojan3_10536 X X X . X t BBS.UA_Dialer_2_8g X X X X o f BBS.Zappa_B_door X X X X X t BBS.Zspeed_9556_bomb X X X . o t BEOL X X X . . l BGS9.1 X X X X X f BGS9.2 O O O O X f BGS9.3 O O O O X f BGS9.ATARI o O X O X f BGS9.Nast X O X O X f BGS9.Novi X o X o . f BGS9.PoPa o O O O o f BGS9.Rob_Northern o O X O X f BGS9.Terrorists X X X X X f BigBen X X X . X b Biomechanic.CheckMount O O O . . t Biomechanic.COPKILLER O O O O O t Biomechanic.Daydream o O O . X t Biomechanic.FDisk20 o O O . o t Biomechanic.Flk_killer o O O . O t Biomechanic.IconD X O X X X t Biomechanic.Intro o O O . O t Biomechanic.LZX_BUGF o O O . X t Biomechanic.SetBuf O o o . X t Biomechanic.TRSINS o O O . . t Biomechanic.TRSMEM o O . X O t Biomechanic.VC659 o O O . o t Biomechanic.VZ121 o O O . o t BlackFlash_2_0.BadBytes3 X O X O X b BlackFlash_2_0.Original X X X X - b BLF X X X X X b BlowJob X X X X X b Bluebox X X X X X f Bootjob.1_0 O / . . . f Bootjob.1_3 O / . . . f BootXKiller X X X . X b BootX_trojan X X . X . t Bret_Hawnes.Beethoven X X X X X f Bret_Hawnes.Original X X X X X f Bulletin X X . . . t BURN.1 X X X . . l BURN.2 X O X . . l Butonic.1_31.4_55.Snoopdos1_9 X X X o o t Butonic.1_31.4_55.Virus o O O O O f Butonic.1_31.Original X O X X X f Butonic.3_00 X O X X X f Buzz_Trojan X X . . . t ByteBandit.1 X X X X X b ByteBandit.2 X O X X X b ByteBandit.3 X o o o o b ByteBandit.4 X o X o X b ByteBandit.Error X o o o o b ByteBandit.Forpib.Amida X o X O X b ByteBandit.Forpib.AmigaFreak X o X O X b ByteBandit.Forpib.Digital_Age X o X O X b ByteBandit.Forpib.Electrovi X o X O X b ByteBandit.Forpib.Frity X o X O X b ByteBandit.Forpib.Germany X o X O X b ByteBandit.Forpib.Mad X o X O X b ByteBandit.Forpib.Morbid_Angel X o X X X b ByteBandit.Forpib.Original X o X X X b ByteBandit.Forpib.Powerbomb X o X O X b ByteBandit.Forpib.Riska X o X O X b ByteBandit.Forpib.Starcom6 X o X O X b ByteBandit.Forpib.Zaccess2_0 X o X O X b ByteBandit.Hauke X o X O X b ByteBandit.IngerIQ X o X O X b ByteBandit.NoBanditAnymore X o X O X b ByteBandit.Plus X o o O o b Byteparasite.1 X X X X X f Byteparasite.2 X X X X X f Byteparasite.3.Original X X X X X f ByteVoyager.1 X X X X X b ByteVoyager.2 X X X X X b ByteVoyager.Starcom3 O O O O X b ByteWarrior.2 O O O O O b ByteWarrior.Mad3 X X X X X b ByteWarrior.Mad3b O O X O O b ByteWarrior.Original X X X X X b ByteWarrior.Paramount X o X X X b Cascade.Dropper X X . o . t Cascade.Virus X X X o o b CCCP.Irak3 X X X O O a CCCP.Original X X X X X a CCCP.Starcom1 X O ! O . a Challenger_trojan X X X X X f Chaos_Master X X X X X f ChristmasViolator X X . . . l ClaasAbraham X X X X X b Clonk.Original X . X o X b Coder.BadBytes5 X X X O O b Coder.JT_Protec X X X X O b Coder.Original X X X X X b Coder.TwinzSantaClaus X O X O O b Color X X X X X f Commander.Dropper O O O O O t Commander.Virus X X X X - l Compuphagozyte.1_1452 X X X X X f Compuphagozyte.2_1148 X X X X X f Compuphagozyte.3.568 X X X X X f Compuphagozyte.3.592 X X X . X f Compuphagozyte.4.916 X X X X X f Compuphagozyte.4.952 X X . . X f Compuphagozyte.5.892 X X X X X f Compuphagozyte.5.900 X X X X X f Compuphagozyte.5.936a X X . . X f Compuphagozyte.5.936b X X . . X f Compuphagozyte.6.1008 X X . . X f Compuphagozyte.6.1012 X X . . X f Compuphagozyte.6.1048 X X X . X f Compuphagozyte.7_link X X . . X l Compuphagozyte.8 X X X . X f Compuphagozyte.Nano.Original X X X . X f ConClip.A X X . o . f ConClip.B X O . . . f Conman.1995 O X X O . l Conman.Artm_23 O X X O X t Conman.b_Bloody X o X O . f Conman.Dir.Dropper X X X . X t Conman.Dir.Virus X X X . X f Conman.Hyper X O X . . t Conman.Iprefs X X O . . t Conman.KeyMaker.CONMam_hd_faker X X X O . t Conman.KeyMaker.CONMan_format X O . . . t Conman.LoadWB_Dropper X X X . . t Conman.LoadWB_Trojan X X X . . t COP.ANDROMEDA O O . . X t COP.AX50 O O O . O t COP.CED4 O O . . O t COP.Copy_LX103 X X X . . t COP.DM50 / O . . O t COP.FT O O O . O t COP.LHA30 O O . . O t COP.LSD_AE42 O O O . . t COP.LZX125 O O O X O t COP.LZX130 O O O X O t COP.MSTCA12 O O O O O t COP.NComm32 O O O . O t COP.OPUS5 O O O . . t COP.PARALLAX O O . . O t COP.PROTRACKER O O O o O t COP.QB O O . . . t COP.Scansystem X X O X O t COP.SINFO X O O . . t COP.SPACEBALLS O O . . O t COP.TRS O O . . O t COP.TSL O O . . O t COP.VW50 o O O . O t Copy_LX103.Bomb X X X . . f Creator X X . . X t Crime.!++_872.Driveinfo_dropper X X X X X t Crime.!++_872.Virus X X X X X l Crime.!_1000 X X X X X l Crime.92 X X X . - l CrypticEssence X X X . . l D-Structure.A X X X X X f D-Structure.B O X X X X f D-Structure.C O X X X X f Damage_Trojan X X X . . t Darth_Vader_1_1 X X X X X f Datalock.1_1 X O X . . b Datalock.1_2 X O X . . b Datalock.Dropper X X X . . t Dat_89.Original X X X X X b Debugger X X X . X l Decompiler X X X . X t Degrad X X . . X t Descriptor X X X . X t Destructor X X X X X b Detlef X X X X X b Digital-Dream.Dropper X X X o X t Digital_Emotions X X X X X b Disaster-Master2 X X X X X f DiskDoctors.1_01 X X X X X b DiskDoctors.1_02 O O O O O b DiskDoctors.GrimReaper X o X O O b DiskDoctors.Haukeexterminator X X X O O b DiskDoctors.Paratax2 X X X O O b DiskHerpes.Original X X X X X b Disktroyer.1 X X X X X f Disktroyer.2 X O X . X f Disk_Info_bomb X X . . . f Divina_Exterminator X X X X X b DMS213_Bomb X X X . X t Dotty.Original X X X X X b Doubledensity X . . . . b DTL X o o o o b DumDum.2 . X . . X b DV_RootFormatter X X X . X s Ebola X X X . . l Eleni.1_6 X X X . X a Eleni.2_2.Dropper X X X . - f Eleni.2_2.Virus X X X - - b Eleni.MessAngel X X X X X a Excrement.Dropper X X X X X t Excrement.Sentinel X X X O X b Excreminator_1 X X X X X t ExHacker_Trojan X X . X X t Extreme.Fat2 X o X o O b Extreme.Original X o X o X b Extreme.Primavera X o X o O b Extreme.TFC.Evergreen O o X o . b Extreme.TFC.Loadwb_dropper X X X X X f Fast.Clone(1) O O O O X b Fast.Original X X X X X b FICA.Original X X X X X b Fileghost.1.Dropper X X . . . t Fileghost.1.Virus X X . . . l Fileghost.2.Dropper X o X X X t Fileghost.2.Virus X X X X . f Fileghost.3 X X X . . l Freedom_bomb X X X X X f Frenchkiss X X X X X b Future_Disaster X X X X X b Fxxx_device_Virus X X X X X b G-Zus-Packer X X X . X f Gaddafi.Khomeni X o X O o b Gaddafi.Mad_II.Original X X X O X b Gaddafi.Original X o X X o b Glasnost.Fast_eddie.Infector X O X O O b Glasnost.Fast_eddie.Original X X X X X b Glasnost.Flashback X O O O O b Glasnost.Original X X X X X b Glasnost.Tai13 X O O O O b GodAnsi X X X . X t Golden_Rider X X X X X l Gremlin X X X X X b GV_HS15_trojan X X X X . t GX-Team X o X . X b Gyros.Original X X X X X b HappyNewYear96.DeTag O O X . . t HappyNewYear96.DM2_19 O O X o . t HappyNewYear96.Virus X X X . . l HCS.1 X X X X X b HCS.2 X X X X X b HD_Speedup_Troj X X X . X t Hochofen X X X X X l Hoden_33_17.COHEN X X X O X b Hoden_33_17.Original X X X X X b Illegal_Access X X X . . l Incognito X X X X X b Infiltrator.DarkAvenger.A X X X - X l Infiltrator.DarkAvenger.B O X X . . l Infiltrator.Original X X X . X l Intl_Gag X X X . X t Invader X X X . . l IRQ.1 X X X X X l IRQ.2 O O O O O l IRQ.Metamorphosis X X X X X a JINX X X X X . b Jitr.Original X o X X X b Joker.A_InstSG X O X . X t Joker.B_Condom O O X . . t Joshua.1 X X X X X b Joshua.2.1 O O X O O b Joshua.2.2 O O O O O b Joshua.3 X O . . . b Kauki X X X X X b Killed X X X X X b Labtec X X X . . t Lads.Original X o X o X b LameBlame.Chaos X X o O X b LameBlame.Original X X o X X b LameBlame.Polish X O X O . b Lamer.1_0 X X X X X b Lamer.2_0 X X X X X b Lamer.3_0 X X X X X b Lamer.4_0.Original X X X X X b Lamer.4_0.Starcom2 O O O O O b Lamer.5_0 X X X X X b Lamer.6_0.Original X X X X - b Lamer.6_0.Starcom4 O O O O O b Lamer.7_0 - X X X X b Lamer.8_0 X - X X X b Lamer.Boot_Aids.Original X X X X o b Lamer.Boot_Aids.Starcom5 X O X X o b Lamer.Clist X X X X X b Lamer.dropper X X X X X t Lamer.Hilly X X X O X b Lamer.Ingos_return X o X X X b Lamer.Mad4 X o o o o b Lamer.Metamorphosis X X X X X a Lamer.VirusX_L8-dropper O X ! O X f Lamer.Warshaw_Avenger X o X X X b LamerLink.Exe X X O o o f LamerLink.gotcha_lamer X X X X X f LamerLink.Loadwb X X O X o f LamerLink.ReturnOfLamer X o X o X f LamerLink.Revenge X X X X X f LamerLink.Revenge2 X O O O X f Laureline X X X . X b Leviathan X X X . X z Liberator.1_21 X X X X X f Liberator.3_0 X X X . X f Liberator.5_01.Lamerfry O X X . X f Liberator.5_01.Original X X X . X f Little_Sven.XC_Dropper X X X X . t Loop_Combo X X X . X f LZ_Link X X X X X l Max.Creeping_eel X X X o X b Max.Digital-Dream.Dropper X X X o X t Max.DiskKiller_bomb.XaCa O O X X X f Max.MaxOfStarlight X X X . . b Max.Mutilator X X X X X b Megalink X X X X X l MegaMaster X X X X X b MenemsRevenge.Original X X X X X l MenemsRevenge.Pif O O O O O l Modemcheck.666!-Trojan X X . . . f Modemcheck.Original X X X X X f Mosh_Virus X X . . . b Mount_bomb.SMBX_Dropper X X X . . f Nasty_Nasty X X X X X b NewAge92 X X . . . l NewLink.Trojan X X X . . t NewLink.Virus X X X . . t NorthStar.1 X X X X X b NorthStar.2 X X X X O b NorthStar.EastStar.Virus X O X o . b NorthStar.Ripper X O X O X b Obelisk.1 X o X X X b Obelisk.2 X X X X X b Opapa X X X X X b Overkill X X X . X b Paradox.1 X X X X X b Paradox.2 X O X X X b PentagonCircle.2 X X X X X b PentagonCircle.3 X O X X X b PentagonCircle.Original X X X X X b Pestilence X X X . X b Phantom.Dropper X X X . X t Phantom.Virus X X X . X l Polyzygotronifikator X X X / . l Promoter X X . . . s Purge.Dropper X O . . . t Purge.Trojan X X . . . t Qrdl_1_1 X X X X X l Random_access_bomb X X . . X b Rastenbork_Inst.Virus1 X X X X . b Rastenbork_Inst.Virus2 X X X X . b Red_October_1_7 X X X X X l Revenge_1_2G.Original X o X X X b Revenge_1_2G.Sendarian X o X O O b Revenge_Bootloader X X X X X b Revenge_Nano.A X X X . X f Revenge_Nano.B O O X . X f Ripper X o X o X b Sachsen.3 X X X X X b Saddam.2 O O O O O s Saddam.3 O O O O O s Saddam.4 O O O O O s Saddam.4711.Snoopdos_dropper X X o o O t Saddam.5 O O O O O s Saddam.6 O O O O O s Saddam.7 O O O O . s Saddam.Affe O O O O X s Saddam.Animal O O O O O s Saddam.diskval1234 X X O O X s Saddam.DiVa.Dropper X X O O X t Saddam.File O O O . O f Saddam.Gral O O O O X s Saddam.Hardex O O O O O s Saddam.Iran O O O O X s Saddam.Kick O O O O O s Saddam.Laurin O O O O X s Saddam.Loom O O O O X s Saddam.Nato O O O O O s Saddam.Original X X X X X s Saddam.Parfum O O O O O s Saddam.Risc O O O O X s Saddam.][ O O O O O s Saddam_boot X X X X X b Satan X o X o o b SCA.2001 X O X O O b SCA.666 X O X O O b SCA.AEK X O X O O b SCA.Aids_HIV X O X O O b SCA.BadBytes4 X O X O O b SCA.Big_Boss X O X O O b SCA.Blade_Runners X O X O O b SCA.BS1 X O X O O b SCA.Butonic_1_1 X X X X . b SCA.D&A.Dropper X X X X X f SCA.DAG.Dropper X X X . X t SCA.DAG.Virus X O X O O b SCA.Deniz X O X O O b SCA.Devils X . X . X b SCA.Error X X O O X b SCA.Iceman_and_Irq X X X O O b SCA.KarlMarx X O X O O b SCA.Kefrens.1 X O X O O b SCA.Kefrens.2 X O X O O b SCA.LSD X O X O O b SCA.MEXX X O X O O b SCA.Microsystems.Original X X X X X b SCA.Original X X X X O b SCA.Paratax.1 X X X O O b SCA.UltraFox X X X X X b Scarface.1 X X X X X b Scarface.2 O O O O O b Sepultura.1 X X X X X f Sepultura.2_26 X O X . X f Shit X X X X X b SinisterSyndicate X X . . X b SmilyCancer.1.a X X X X X f SmilyCancer.1.b O O O O O f SmilyCancer.1.c O O O O O f SmilyCancer.2 X X X X X f Starlight X X X X X f Sumpf X X X . . t Suntronic X X X X X b Supply_Team X X X . X b Surprise X X X . X t Susi_Drive_Stepper X X . . X t Swifter_Troj X X X . . t System_Z.3_0 X X O . X b System_Z.4_0 X X O . o b System_Z.5_0 X X X . X b System_Z.5_1 X X X . O b System_Z.5_3 X o X . o b System_Z.5_4 X o X . o b Target.Original X X X X X b TDTJ_Trojan X X . . . t TeleCom X X X X X f Termigator X o X X X b Timebomb_09.trojan_7840 X X X X X t Timebomb_Vir.1_0 X X X X X b Timebomb_Vir.BadBytes2 X O X O O b Timebomb_Vir.Fat1 X O X O O b Timebomb_Vir.LameGame X O X O O b Timebomb_Vir.Omsa X O X O O b Timebomb_Vir.TAI4 X O X O O b Timebomb_Vir.Tomates_Gentechnik X O X O O b Timer-Virus.Dropper X X X X X t Time_Bomber_troj X X X X X t Trainer_Trojan X X . . X t Traveling_Jack.1 X X X X X l Traveling_Jack.2 O O O X O l Traveling_Jack.AntiChrist X X X o X l Traveller_1_0 X X X X X b Trisector911 X X X X X b Turk.Color_dropper X X X X X f Turk.Original X X X X X b Uhr-BB X X o X . b ULVD8 X X X X X b VCCofTNT X X X . X b Vermin.Original X o X X X b Vermin.Superboy X X X X X b VirConSet2.VirusType1 X X - . . b VirConSet2.VirusType2 O O - . . b VirusBlaster23_9232 X X X X X f VirusHunter X X X X . t VirusKillerVirus X X X X X b Vkill.1.Dropper o o o . X f Vkill.1.Virus X X X X X b Vkill.2 X X X X X b Vkill.VirusPredator.Original o X X X X b VMK3_0 X X X X X t Waft X X X X X b Wahnfried X X X X X b Warhawk.BadBytes1 X O X O O b Warhawk.Original X X X X X b Warhawk.RAF X O X O O b WireFace.A_MakeKey O O . . X t WireFace.B_ScanLink O O . . X t WireFace.C O O - ! O t WireFace.ComKiller O O O . X t WireFace.D_AECrack O O O X X t WireFace.F_Checkmount O O X . . t WireFace.Rock_n_Roll X X X . . t Wizard_Timebomb X X X X X f Xeno.1 - - - X - l Xeno.2 X X X O X l Xeno.Bestial X X X X X l ZINE X X . . . f Zombi_1.Original X X X X X b History: -------- X - correct detection by name or alias O - detection by family name only o - correct detection of family name, but missed identification of the variant name / - heuristic detection of suspicious structure (unknown virus, hunks, ...) - - unreliable detection (not all samples of the virus have been detected) ! - the scanner crashed on one sample . - no detection Malware / Virus-type: a - multipartite (bootblock + link) b - bootblock virus f - file virus (companion or overwriting) l - link virus t - trojan s - system (diskvalidator-virus) z - multipartite (bootblock + file) IV. Detection rates ------------------- Summary (positive results): --------------------------- X a b f l t s z Detentions by name VT 7 206 81 34 106 4 1 439 VW 6 120 75 35 106 4 1 347 VZ 6 192 74 32 86 2 1 321 SF 4 106 50 15 32 1 0 208 XT 5 138 74 19 65 9 1 311 O+o a b f l t s z Strain detections VT 0 13 19 5 49 18 0 104 VW 1 97 23 4 50 18 0 193 VZ 0 21 12 3 36 19 0 91 SF 2 87 16 5 17 19 0 146 XT 1 64 8 3 28 11 0 115 / a b f l t s z Structure/Heuristic VT 0 0 0 0 1 0 0 1 VW 0 0 2 0 0 0 0 2 VZ 0 0 0 0 0 0 0 0 SF 0 0 1 1 1 0 0 3 XT 0 0 0 0 0 0 0 0 Overall - Detection: (X,O,o,/) ------------------------------ VT: 544 VW: 542 VZ: 412 SF: 357 XT: 426 Summary (negative results): --------------------------- - a b f l t s z Unreliable detection VT 0 1 0 1 0 0 0 2 VW 0 1 0 1 0 0 0 2 VZ 0 2 0 1 1 0 0 4 SF 0 1 0 1 0 0 0 2 XT 0 3 1 3 3 0 0 10 ! a b f l t s z Crashes VT 0 0 0 0 0 0 0 0 VW 0 0 0 0 0 0 0 0 VZ 1 0 1 0 0 0 0 2 (see below) SF 0 0 0 0 1 0 0 1 XT 0 0 0 0 0 0 0 0 . a b f l t s z Not detected samples VT 0 1 0 0 0 0 0 1 VW 0 3 0 0 0 0 0 3 VZ 0 6 13 4 33 1 0 57 (+2 Crashes) SF 1 27 33 18 105 2 1 187 (+1 Crash) XT 1 16 17 15 60 2 0 111 Total number of detected viruses: --------------------------------- Detected by name by family by other viruses or member condition ------------------------------------------- ! ! ! VT 2.81 544 ! 439 ! 104 ! 1 ! ! ! VW 5.9 542 ! 347 ! 193 ! 2 ! ! ! VZ II 1.29 412 ! 321 ! 91 ! 0 ! ! ! SFAP 1.4 357 ! 208 ! 146 ! 3 ! ! ! Xtruder 2.3 426 ! 311 ! 115 ! 0 ! ! ! Best Possible 547 ! 547 ! 0 ! 0 ! ! ! Total percentage of detected viruses: ------------------------------------- Detected by name by family viruses or member -------------------------------- ! ! VT 2.81 99 % ! 80 % ! 19 % ! ! VW 5.9 99 % ! 63 % ! 35 % ! ! VZ II 1.29 75 % ! 59 % ! 16 % ! ! SFAP 1.4 65 % ! 38 % ! 27 % ! ! Xtruder 2.3 78 % ! 57 % ! 21 % ! ! Best Possible 100 % ! 100 % ! 0 % ! ! Ranking (detection rate, absolute): ----------------------------------- 1. Virus Test V 2.81 2. Virus Workshop 5.9 3. Xtruder 2.3 4. Virus Z II 1.29 5. Siegfried Antivirus Professional 1.4 V. Comments ----------- The following are some peculiarities about the tested virus scanners. Those comments might be useful to have in mind when selecting one of those products. * Vectorcheck VT: Checks some vectors, displays their names VW: Checks many vectors, but shows only their offsets VZ: Checks some vectors SF: Checks only resident vectors XT: Checks several vectors * Reporting functions VT: Very good VW: Does not Report BB-Files VZ: Good, but includes ASCII control-characters SF: Good XT: Good * Integrity check VT: Yes VW: Only for the scanner itself, PGP signatures VZ: No SF: For files, (added as comment) XT: Only for the scanner itself, PGP signatures * Heuristics VT: No VW: Yes (very good) VZ: No SF: Yes (only for bootblocks) XT: No Other remarks: -------------- VT has some problems with PP-Packed Archives (Some BBS-Trojans) and misses some Bootblock-Viruses which it detected in our last test (3/95). VW sometimes displays letters (instead of numbers) in the heuristic. The heuristic does not check bootblock-files. VZ reports on the screen that it is performing repair even if it is started without the repair option, regardless that in this case repair doesn't actually occur. Also VZ crashes totally on some of the Virus samples (CCCP.Starcom with defective hunk, Lamer.VirusX_l8.dropper -file LamerVirusX-500). Virus Checker (8.04) was not tested because it crashed on various samples making testing within a normal amount of time impossible. As the author additionally has stopped further development of his product and sold the source-code there will be major changes not yet testable anyway. SFAP reports several viruses as "Hunklab" which is only a program to add code to executable files. The decrunch operation of SFAP seems now to be able to avoid starting viruses but still executes the original decrunch header (instead of using external decrunch methods). Still the decrunch-routine crashed on one of the sample-files. XTRUDER is (like VZ) not able to check BB-Data files which makes testing for Bootblock-Viruses very hard. Author of this document: ------------------------ Soenke Freitag Virus Test Center University of Hamburg Vogt Koelln Str. 30 22527 Hamburg - Germany