Table of contents:
------------------
I. Introduction
II. Copyright, License, and Disclaimer.
III. Detail results
IV. Detection rates
1. Totals, absolute
2. Totals, percentages
3. Ranking
V. Comments
I. Introduction.
----------------
Welcome to the 1996 VTC-Amiga Anti-Virus test report.
Programmes in this test:
VT 2.81 Virus Test by Heiner Schneegold (VT)
VW 5.9 Virus Workshop by Markus Schmall (VW)
VZ II 129 Virus Z II by Georg Hoermann (VZ)
SFAP 1.4 Siegfried Antivirus Professional by Siegfried Soft (SF)
Xtruder 2.3 Xtruder 2.3 by Martin Wulffeldt (XT)
Why not testing more Amiga-Antivirus products ?
The selection of this products is a subjective view of the
actual market. The selection of tested products represents
common virus-scanners which were updated at least once
in the last 4 month.
Official release date of this test:
The official release date of this test is the 2.4.1996.
(Due to several product-crashes (see below) the test could
not be finished for CeBIT'96, sorry)
Tested facilities of the products:
This test mainly shows the detection rate of the products.
User-interface, styleguide etc.. are no essential topics
of this test.
II. Copyright, License, and Disclaimer.
---------------------------------------
This publication is (C) Copyright 1996 by Soenke Freitag and the
Virus Test Center at the University of Hamburg. Permission is granted
to everybody to distribute copies of this information in electronic
form, provided that this is done for free, the contents of the
information is not changed in any way, and the source of the
information is clearly mentioned. Those who want to re-publish the
information as a whole or in parts in printed form, MUST contact
Soenke Freitag or the VTC-Hamburg and obtain permission first.
No responsibility is assumed by the publisher for any injury and/or
damage to persons or property as a matter of products liability,
negligence or otherwise, or from any use or operation of any methods,
products, instructions or idea contained in the material herein.
III. Detail results
-------------------
Malware / Virus + Strain VT VW VZ SF XT TYP
\ ! / / / /
16_BitCrew.Graffiti X o X X X b
16_BitCrew.Original X o X X X b
16_BitCrew.Paratax3 X o X O O b
16_BitCrew.Zaccess1_0 X o X O O b
AAA-Enhancer X X X X . t
ABC X X X X X b
Achtung_Trojan X X X . X t
AcidInfector X X . . . f
Addy.Dropper X X X . X t
Addy.Trojan X X X / X f
AGA-Install X X . . X t
Ahkeym X X . . . t
AISF X X X . X t
Alien X X X . X t
AlienNewBeat.Original X X X X X b
AmiBlank X X X . . t
AmigaFanatic X X X . X b
Amigaknight X X X X X f
Angel X X X X X b
Australian_parasite.Original X X X X X b
BBS.$4EB9-Link.Diskrepair O X X . X t
BBS.$4EB9-Link.DMS2_06 X X X X X t
BBS.$4EB9-Link.First X X X . X t
BBS.$4EB9-Link.LHAV3 O X X . . t
BBS.$4EB9-Link.Whitebox_V8_0 O X X . . . t
BBS.AeReg X X X X . t
BBS.AmiPatch_1_0a X X X . . f
BBS.AX_F__ker X X X . X f
BBS.AX_Hacker X X X . X t
BBS.Blieb6 X X . . . t
BBS.CCHack X X X . X t
BBS.CLP_Based.CLP_WOW X X . . - t
BBS.CLP_Based.MST-VEC X X X X . t
BBS.CLP_Based.PHA_trojan X X X X X t
BBS.CLP_Based.UA_Dailer_6_2 X X X . . t
BBS.Devil.11-b-door.DLog O X O . X t
BBS.Devil.11-b-door.MsgTop O X O . X t
BBS.Devil.11-b-door.ULog O X O . X t
BBS.Devil.11-b-door.VScan X X X . . t
BBS.Devil.V8-b-door X X X . X t
BBS.Doom_CLX.Dropper X X X . . t
BBS.Doom_CLX.Viruses X X X . - t
BBS.DOpus-Virus X X . . X t
BBS.DSC101 X X X X X t
BBS.Easy_E X X X / . t
BBS.Express_2_20.Aibon.2 X O X X . f
BBS.Express_2_20.Aibon.3 O X O X . f
BBS.Express_2_20.DWEdit_Aibon X X X o . t
BBS.Express_2_20.Original X X X X . f
BBS.Istrip X X X . X t
BBS.Lhacheck X X X X . t
BBS.Look X X X . . t
BBS.MasterBBS_troj X X X . . t
BBS.Merry X X X . X t
BBS.MONGO.09 X X X . X t
BBS.MONGO.51 X X X . X t
BBS.M_Chat.ATX_Chat X X O X . t
BBS.M_Chat.MST-DoorBells X X X X . t
BBS.M_Chat.Original X X X O . t
BBS.No_Guru X X X X X f
BBS.PB-Party X X X . . t
BBS.PP-Bomb.Died O O O . X t
BBS.PP-Bomb.MegaMon X O . . . t
BBS.PP-Bomb.ModuleMast17 X X O . X t
BBS.PP-Bomb.qtx_pow O X O O X t
BBS.Pstats X X X X . t
BBS.SCAN_X X X . . - t
BBS.ShowSysops X X X X X f
BBS.Snoopdos1_6_troj X X X o X t
BBS.Stockmarket_troj X X X . . t
BBS.Toputil X X X X . t
BBS.Trojan3_10536 X X X . X t
BBS.UA_Dialer_2_8g X X X X o f
BBS.Zappa_B_door X X X X X t
BBS.Zspeed_9556_bomb X X X . o t
BEOL X X X . . l
BGS9.1 X X X X X f
BGS9.2 O O O O X f
BGS9.3 O O O O X f
BGS9.ATARI o O X O X f
BGS9.Nast X O X O X f
BGS9.Novi X o X o . f
BGS9.PoPa o O O O o f
BGS9.Rob_Northern o O X O X f
BGS9.Terrorists X X X X X f
BigBen X X X . X b
Biomechanic.CheckMount O O O . . t
Biomechanic.COPKILLER O O O O O t
Biomechanic.Daydream o O O . X t
Biomechanic.FDisk20 o O O . o t
Biomechanic.Flk_killer o O O . O t
Biomechanic.IconD X O X X X t
Biomechanic.Intro o O O . O t
Biomechanic.LZX_BUGF o O O . X t
Biomechanic.SetBuf O o o . X t
Biomechanic.TRSINS o O O . . t
Biomechanic.TRSMEM o O . X O t
Biomechanic.VC659 o O O . o t
Biomechanic.VZ121 o O O . o t
BlackFlash_2_0.BadBytes3 X O X O X b
BlackFlash_2_0.Original X X X X - b
BLF X X X X X b
BlowJob X X X X X b
Bluebox X X X X X f
Bootjob.1_0 O / . . . f
Bootjob.1_3 O / . . . f
BootXKiller X X X . X b
BootX_trojan X X . X . t
Bret_Hawnes.Beethoven X X X X X f
Bret_Hawnes.Original X X X X X f
Bulletin X X . . . t
BURN.1 X X X . . l
BURN.2 X O X . . l
Butonic.1_31.4_55.Snoopdos1_9 X X X o o t
Butonic.1_31.4_55.Virus o O O O O f
Butonic.1_31.Original X O X X X f
Butonic.3_00 X O X X X f
Buzz_Trojan X X . . . t
ByteBandit.1 X X X X X b
ByteBandit.2 X O X X X b
ByteBandit.3 X o o o o b
ByteBandit.4 X o X o X b
ByteBandit.Error X o o o o b
ByteBandit.Forpib.Amida X o X O X b
ByteBandit.Forpib.AmigaFreak X o X O X b
ByteBandit.Forpib.Digital_Age X o X O X b
ByteBandit.Forpib.Electrovi X o X O X b
ByteBandit.Forpib.Frity X o X O X b
ByteBandit.Forpib.Germany X o X O X b
ByteBandit.Forpib.Mad X o X O X b
ByteBandit.Forpib.Morbid_Angel X o X X X b
ByteBandit.Forpib.Original X o X X X b
ByteBandit.Forpib.Powerbomb X o X O X b
ByteBandit.Forpib.Riska X o X O X b
ByteBandit.Forpib.Starcom6 X o X O X b
ByteBandit.Forpib.Zaccess2_0 X o X O X b
ByteBandit.Hauke X o X O X b
ByteBandit.IngerIQ X o X O X b
ByteBandit.NoBanditAnymore X o X O X b
ByteBandit.Plus X o o O o b
Byteparasite.1 X X X X X f
Byteparasite.2 X X X X X f
Byteparasite.3.Original X X X X X f
ByteVoyager.1 X X X X X b
ByteVoyager.2 X X X X X b
ByteVoyager.Starcom3 O O O O X b
ByteWarrior.2 O O O O O b
ByteWarrior.Mad3 X X X X X b
ByteWarrior.Mad3b O O X O O b
ByteWarrior.Original X X X X X b
ByteWarrior.Paramount X o X X X b
Cascade.Dropper X X . o . t
Cascade.Virus X X X o o b
CCCP.Irak3 X X X O O a
CCCP.Original X X X X X a
CCCP.Starcom1 X O ! O . a
Challenger_trojan X X X X X f
Chaos_Master X X X X X f
ChristmasViolator X X . . . l
ClaasAbraham X X X X X b
Clonk.Original X . X o X b
Coder.BadBytes5 X X X O O b
Coder.JT_Protec X X X X O b
Coder.Original X X X X X b
Coder.TwinzSantaClaus X O X O O b
Color X X X X X f
Commander.Dropper O O O O O t
Commander.Virus X X X X - l
Compuphagozyte.1_1452 X X X X X f
Compuphagozyte.2_1148 X X X X X f
Compuphagozyte.3.568 X X X X X f
Compuphagozyte.3.592 X X X . X f
Compuphagozyte.4.916 X X X X X f
Compuphagozyte.4.952 X X . . X f
Compuphagozyte.5.892 X X X X X f
Compuphagozyte.5.900 X X X X X f
Compuphagozyte.5.936a X X . . X f
Compuphagozyte.5.936b X X . . X f
Compuphagozyte.6.1008 X X . . X f
Compuphagozyte.6.1012 X X . . X f
Compuphagozyte.6.1048 X X X . X f
Compuphagozyte.7_link X X . . X l
Compuphagozyte.8 X X X . X f
Compuphagozyte.Nano.Original X X X . X f
ConClip.A X X . o . f
ConClip.B X O . . . f
Conman.1995 O X X O . l
Conman.Artm_23 O X X O X t
Conman.b_Bloody X o X O . f
Conman.Dir.Dropper X X X . X t
Conman.Dir.Virus X X X . X f
Conman.Hyper X O X . . t
Conman.Iprefs X X O . . t
Conman.KeyMaker.CONMam_hd_faker X X X O . t
Conman.KeyMaker.CONMan_format X O . . . t
Conman.LoadWB_Dropper X X X . . t
Conman.LoadWB_Trojan X X X . . t
COP.ANDROMEDA O O . . X t
COP.AX50 O O O . O t
COP.CED4 O O . . O t
COP.Copy_LX103 X X X . . t
COP.DM50 / O . . O t
COP.FT O O O . O t
COP.LHA30 O O . . O t
COP.LSD_AE42 O O O . . t
COP.LZX125 O O O X O t
COP.LZX130 O O O X O t
COP.MSTCA12 O O O O O t
COP.NComm32 O O O . O t
COP.OPUS5 O O O . . t
COP.PARALLAX O O . . O t
COP.PROTRACKER O O O o O t
COP.QB O O . . . t
COP.Scansystem X X O X O t
COP.SINFO X O O . . t
COP.SPACEBALLS O O . . O t
COP.TRS O O . . O t
COP.TSL O O . . O t
COP.VW50 o O O . O t
Copy_LX103.Bomb X X X . . f
Creator X X . . X t
Crime.!++_872.Driveinfo_dropper X X X X X t
Crime.!++_872.Virus X X X X X l
Crime.!_1000 X X X X X l
Crime.92 X X X . - l
CrypticEssence X X X . . l
D-Structure.A X X X X X f
D-Structure.B O X X X X f
D-Structure.C O X X X X f
Damage_Trojan X X X . . t
Darth_Vader_1_1 X X X X X f
Datalock.1_1 X O X . . b
Datalock.1_2 X O X . . b
Datalock.Dropper X X X . . t
Dat_89.Original X X X X X b
Debugger X X X . X l
Decompiler X X X . X t
Degrad X X . . X t
Descriptor X X X . X t
Destructor X X X X X b
Detlef X X X X X b
Digital-Dream.Dropper X X X o X t
Digital_Emotions X X X X X b
Disaster-Master2 X X X X X f
DiskDoctors.1_01 X X X X X b
DiskDoctors.1_02 O O O O O b
DiskDoctors.GrimReaper X o X O O b
DiskDoctors.Haukeexterminator X X X O O b
DiskDoctors.Paratax2 X X X O O b
DiskHerpes.Original X X X X X b
Disktroyer.1 X X X X X f
Disktroyer.2 X O X . X f
Disk_Info_bomb X X . . . f
Divina_Exterminator X X X X X b
DMS213_Bomb X X X . X t
Dotty.Original X X X X X b
Doubledensity X . . . . b
DTL X o o o o b
DumDum.2 . X . . X b
DV_RootFormatter X X X . X s
Ebola X X X . . l
Eleni.1_6 X X X . X a
Eleni.2_2.Dropper X X X . - f
Eleni.2_2.Virus X X X - - b
Eleni.MessAngel X X X X X a
Excrement.Dropper X X X X X t
Excrement.Sentinel X X X O X b
Excreminator_1 X X X X X t
ExHacker_Trojan X X . X X t
Extreme.Fat2 X o X o O b
Extreme.Original X o X o X b
Extreme.Primavera X o X o O b
Extreme.TFC.Evergreen O o X o . b
Extreme.TFC.Loadwb_dropper X X X X X f
Fast.Clone(1) O O O O X b
Fast.Original X X X X X b
FICA.Original X X X X X b
Fileghost.1.Dropper X X . . . t
Fileghost.1.Virus X X . . . l
Fileghost.2.Dropper X o X X X t
Fileghost.2.Virus X X X X . f
Fileghost.3 X X X . . l
Freedom_bomb X X X X X f
Frenchkiss X X X X X b
Future_Disaster X X X X X b
Fxxx_device_Virus X X X X X b
G-Zus-Packer X X X . X f
Gaddafi.Khomeni X o X O o b
Gaddafi.Mad_II.Original X X X O X b
Gaddafi.Original X o X X o b
Glasnost.Fast_eddie.Infector X O X O O b
Glasnost.Fast_eddie.Original X X X X X b
Glasnost.Flashback X O O O O b
Glasnost.Original X X X X X b
Glasnost.Tai13 X O O O O b
GodAnsi X X X . X t
Golden_Rider X X X X X l
Gremlin X X X X X b
GV_HS15_trojan X X X X . t
GX-Team X o X . X b
Gyros.Original X X X X X b
HappyNewYear96.DeTag O O X . . t
HappyNewYear96.DM2_19 O O X o . t
HappyNewYear96.Virus X X X . . l
HCS.1 X X X X X b
HCS.2 X X X X X b
HD_Speedup_Troj X X X . X t
Hochofen X X X X X l
Hoden_33_17.COHEN X X X O X b
Hoden_33_17.Original X X X X X b
Illegal_Access X X X . . l
Incognito X X X X X b
Infiltrator.DarkAvenger.A X X X - X l
Infiltrator.DarkAvenger.B O X X . . l
Infiltrator.Original X X X . X l
Intl_Gag X X X . X t
Invader X X X . . l
IRQ.1 X X X X X l
IRQ.2 O O O O O l
IRQ.Metamorphosis X X X X X a
JINX X X X X . b
Jitr.Original X o X X X b
Joker.A_InstSG X O X . X t
Joker.B_Condom O O X . . t
Joshua.1 X X X X X b
Joshua.2.1 O O X O O b
Joshua.2.2 O O O O O b
Joshua.3 X O . . . b
Kauki X X X X X b
Killed X X X X X b
Labtec X X X . . t
Lads.Original X o X o X b
LameBlame.Chaos X X o O X b
LameBlame.Original X X o X X b
LameBlame.Polish X O X O . b
Lamer.1_0 X X X X X b
Lamer.2_0 X X X X X b
Lamer.3_0 X X X X X b
Lamer.4_0.Original X X X X X b
Lamer.4_0.Starcom2 O O O O O b
Lamer.5_0 X X X X X b
Lamer.6_0.Original X X X X - b
Lamer.6_0.Starcom4 O O O O O b
Lamer.7_0 - X X X X b
Lamer.8_0 X - X X X b
Lamer.Boot_Aids.Original X X X X o b
Lamer.Boot_Aids.Starcom5 X O X X o b
Lamer.Clist X X X X X b
Lamer.dropper X X X X X t
Lamer.Hilly X X X O X b
Lamer.Ingos_return X o X X X b
Lamer.Mad4 X o o o o b
Lamer.Metamorphosis X X X X X a
Lamer.VirusX_L8-dropper O X ! O X f
Lamer.Warshaw_Avenger X o X X X b
LamerLink.Exe X X O o o f
LamerLink.gotcha_lamer X X X X X f
LamerLink.Loadwb X X O X o f
LamerLink.ReturnOfLamer X o X o X f
LamerLink.Revenge X X X X X f
LamerLink.Revenge2 X O O O X f
Laureline X X X . X b
Leviathan X X X . X z
Liberator.1_21 X X X X X f
Liberator.3_0 X X X . X f
Liberator.5_01.Lamerfry O X X . X f
Liberator.5_01.Original X X X . X f
Little_Sven.XC_Dropper X X X X . t
Loop_Combo X X X . X f
LZ_Link X X X X X l
Max.Creeping_eel X X X o X b
Max.Digital-Dream.Dropper X X X o X t
Max.DiskKiller_bomb.XaCa O O X X X f
Max.MaxOfStarlight X X X . . b
Max.Mutilator X X X X X b
Megalink X X X X X l
MegaMaster X X X X X b
MenemsRevenge.Original X X X X X l
MenemsRevenge.Pif O O O O O l
Modemcheck.666!-Trojan X X . . . f
Modemcheck.Original X X X X X f
Mosh_Virus X X . . . b
Mount_bomb.SMBX_Dropper X X X . . f
Nasty_Nasty X X X X X b
NewAge92 X X . . . l
NewLink.Trojan X X X . . t
NewLink.Virus X X X . . t
NorthStar.1 X X X X X b
NorthStar.2 X X X X O b
NorthStar.EastStar.Virus X O X o . b
NorthStar.Ripper X O X O X b
Obelisk.1 X o X X X b
Obelisk.2 X X X X X b
Opapa X X X X X b
Overkill X X X . X b
Paradox.1 X X X X X b
Paradox.2 X O X X X b
PentagonCircle.2 X X X X X b
PentagonCircle.3 X O X X X b
PentagonCircle.Original X X X X X b
Pestilence X X X . X b
Phantom.Dropper X X X . X t
Phantom.Virus X X X . X l
Polyzygotronifikator X X X / . l
Promoter X X . . . s
Purge.Dropper X O . . . t
Purge.Trojan X X . . . t
Qrdl_1_1 X X X X X l
Random_access_bomb X X . . X b
Rastenbork_Inst.Virus1 X X X X . b
Rastenbork_Inst.Virus2 X X X X . b
Red_October_1_7 X X X X X l
Revenge_1_2G.Original X o X X X b
Revenge_1_2G.Sendarian X o X O O b
Revenge_Bootloader X X X X X b
Revenge_Nano.A X X X . X f
Revenge_Nano.B O O X . X f
Ripper X o X o X b
Sachsen.3 X X X X X b
Saddam.2 O O O O O s
Saddam.3 O O O O O s
Saddam.4 O O O O O s
Saddam.4711.Snoopdos_dropper X X o o O t
Saddam.5 O O O O O s
Saddam.6 O O O O O s
Saddam.7 O O O O . s
Saddam.Affe O O O O X s
Saddam.Animal O O O O O s
Saddam.diskval1234 X X O O X s
Saddam.DiVa.Dropper X X O O X t
Saddam.File O O O . O f
Saddam.Gral O O O O X s
Saddam.Hardex O O O O O s
Saddam.Iran O O O O X s
Saddam.Kick O O O O O s
Saddam.Laurin O O O O X s
Saddam.Loom O O O O X s
Saddam.Nato O O O O O s
Saddam.Original X X X X X s
Saddam.Parfum O O O O O s
Saddam.Risc O O O O X s
Saddam.][ O O O O O s
Saddam_boot X X X X X b
Satan X o X o o b
SCA.2001 X O X O O b
SCA.666 X O X O O b
SCA.AEK X O X O O b
SCA.Aids_HIV X O X O O b
SCA.BadBytes4 X O X O O b
SCA.Big_Boss X O X O O b
SCA.Blade_Runners X O X O O b
SCA.BS1 X O X O O b
SCA.Butonic_1_1 X X X X . b
SCA.D&A.Dropper X X X X X f
SCA.DAG.Dropper X X X . X t
SCA.DAG.Virus X O X O O b
SCA.Deniz X O X O O b
SCA.Devils X . X . X b
SCA.Error X X O O X b
SCA.Iceman_and_Irq X X X O O b
SCA.KarlMarx X O X O O b
SCA.Kefrens.1 X O X O O b
SCA.Kefrens.2 X O X O O b
SCA.LSD X O X O O b
SCA.MEXX X O X O O b
SCA.Microsystems.Original X X X X X b
SCA.Original X X X X O b
SCA.Paratax.1 X X X O O b
SCA.UltraFox X X X X X b
Scarface.1 X X X X X b
Scarface.2 O O O O O b
Sepultura.1 X X X X X f
Sepultura.2_26 X O X . X f
Shit X X X X X b
SinisterSyndicate X X . . X b
SmilyCancer.1.a X X X X X f
SmilyCancer.1.b O O O O O f
SmilyCancer.1.c O O O O O f
SmilyCancer.2 X X X X X f
Starlight X X X X X f
Sumpf X X X . . t
Suntronic X X X X X b
Supply_Team X X X . X b
Surprise X X X . X t
Susi_Drive_Stepper X X . . X t
Swifter_Troj X X X . . t
System_Z.3_0 X X O . X b
System_Z.4_0 X X O . o b
System_Z.5_0 X X X . X b
System_Z.5_1 X X X . O b
System_Z.5_3 X o X . o b
System_Z.5_4 X o X . o b
Target.Original X X X X X b
TDTJ_Trojan X X . . . t
TeleCom X X X X X f
Termigator X o X X X b
Timebomb_09.trojan_7840 X X X X X t
Timebomb_Vir.1_0 X X X X X b
Timebomb_Vir.BadBytes2 X O X O O b
Timebomb_Vir.Fat1 X O X O O b
Timebomb_Vir.LameGame X O X O O b
Timebomb_Vir.Omsa X O X O O b
Timebomb_Vir.TAI4 X O X O O b
Timebomb_Vir.Tomates_Gentechnik X O X O O b
Timer-Virus.Dropper X X X X X t
Time_Bomber_troj X X X X X t
Trainer_Trojan X X . . X t
Traveling_Jack.1 X X X X X l
Traveling_Jack.2 O O O X O l
Traveling_Jack.AntiChrist X X X o X l
Traveller_1_0 X X X X X b
Trisector911 X X X X X b
Turk.Color_dropper X X X X X f
Turk.Original X X X X X b
Uhr-BB X X o X . b
ULVD8 X X X X X b
VCCofTNT X X X . X b
Vermin.Original X o X X X b
Vermin.Superboy X X X X X b
VirConSet2.VirusType1 X X - . . b
VirConSet2.VirusType2 O O - . . b
VirusBlaster23_9232 X X X X X f
VirusHunter X X X X . t
VirusKillerVirus X X X X X b
Vkill.1.Dropper o o o . X f
Vkill.1.Virus X X X X X b
Vkill.2 X X X X X b
Vkill.VirusPredator.Original o X X X X b
VMK3_0 X X X X X t
Waft X X X X X b
Wahnfried X X X X X b
Warhawk.BadBytes1 X O X O O b
Warhawk.Original X X X X X b
Warhawk.RAF X O X O O b
WireFace.A_MakeKey O O . . X t
WireFace.B_ScanLink O O . . X t
WireFace.C O O - ! O t
WireFace.ComKiller O O O . X t
WireFace.D_AECrack O O O X X t
WireFace.F_Checkmount O O X . . t
WireFace.Rock_n_Roll X X X . . t
Wizard_Timebomb X X X X X f
Xeno.1 - - - X - l
Xeno.2 X X X O X l
Xeno.Bestial X X X X X l
ZINE X X . . . f
Zombi_1.Original X X X X X b
History:
--------
X - correct detection by name or alias
O - detection by family name only
o - correct detection of family name, but
missed identification of the variant name
/ - heuristic detection of suspicious structure
(unknown virus, hunks, ...)
- - unreliable detection
(not all samples of the virus have been detected)
! - the scanner crashed on one sample
. - no detection
Malware / Virus-type:
a - multipartite (bootblock + link)
b - bootblock virus
f - file virus (companion or overwriting)
l - link virus
t - trojan
s - system (diskvalidator-virus)
z - multipartite (bootblock + file)
IV. Detection rates
-------------------
Summary (positive results):
---------------------------
X a b f l t s z Detentions by name
VT 7 206 81 34 106 4 1 439
VW 6 120 75 35 106 4 1 347
VZ 6 192 74 32 86 2 1 321
SF 4 106 50 15 32 1 0 208
XT 5 138 74 19 65 9 1 311
O+o a b f l t s z Strain detections
VT 0 13 19 5 49 18 0 104
VW 1 97 23 4 50 18 0 193
VZ 0 21 12 3 36 19 0 91
SF 2 87 16 5 17 19 0 146
XT 1 64 8 3 28 11 0 115
/ a b f l t s z Structure/Heuristic
VT 0 0 0 0 1 0 0 1
VW 0 0 2 0 0 0 0 2
VZ 0 0 0 0 0 0 0 0
SF 0 0 1 1 1 0 0 3
XT 0 0 0 0 0 0 0 0
Overall - Detection: (X,O,o,/)
------------------------------
VT: 544
VW: 542
VZ: 412
SF: 357
XT: 426
Summary (negative results):
---------------------------
- a b f l t s z Unreliable detection
VT 0 1 0 1 0 0 0 2
VW 0 1 0 1 0 0 0 2
VZ 0 2 0 1 1 0 0 4
SF 0 1 0 1 0 0 0 2
XT 0 3 1 3 3 0 0 10
! a b f l t s z Crashes
VT 0 0 0 0 0 0 0 0
VW 0 0 0 0 0 0 0 0
VZ 1 0 1 0 0 0 0 2 (see below)
SF 0 0 0 0 1 0 0 1
XT 0 0 0 0 0 0 0 0
. a b f l t s z Not detected samples
VT 0 1 0 0 0 0 0 1
VW 0 3 0 0 0 0 0 3
VZ 0 6 13 4 33 1 0 57 (+2 Crashes)
SF 1 27 33 18 105 2 1 187 (+1 Crash)
XT 1 16 17 15 60 2 0 111
Total number of detected viruses:
---------------------------------
Detected by name by family by other
viruses or member condition
-------------------------------------------
! ! !
VT 2.81 544 ! 439 ! 104 ! 1
! ! !
VW 5.9 542 ! 347 ! 193 ! 2
! ! !
VZ II 1.29 412 ! 321 ! 91 ! 0
! ! !
SFAP 1.4 357 ! 208 ! 146 ! 3
! ! !
Xtruder 2.3 426 ! 311 ! 115 ! 0
! ! !
Best Possible 547 ! 547 ! 0 ! 0
! ! !
Total percentage of detected viruses:
-------------------------------------
Detected by name by family
viruses or member
--------------------------------
! !
VT 2.81 99 % ! 80 % ! 19 %
! !
VW 5.9 99 % ! 63 % ! 35 %
! !
VZ II 1.29 75 % ! 59 % ! 16 %
! !
SFAP 1.4 65 % ! 38 % ! 27 %
! !
Xtruder 2.3 78 % ! 57 % ! 21 %
! !
Best Possible 100 % ! 100 % ! 0 %
! !
Ranking (detection rate, absolute):
-----------------------------------
1. Virus Test V 2.81
2. Virus Workshop 5.9
3. Xtruder 2.3
4. Virus Z II 1.29
5. Siegfried Antivirus Professional 1.4
V. Comments
-----------
The following are some peculiarities about the tested
virus scanners. Those comments might be useful to have
in mind when selecting one of those products.
* Vectorcheck
VT: Checks some vectors, displays their names
VW: Checks many vectors, but shows only their offsets
VZ: Checks some vectors
SF: Checks only resident vectors
XT: Checks several vectors
* Reporting functions
VT: Very good
VW: Does not Report BB-Files
VZ: Good, but includes ASCII control-characters
SF: Good
XT: Good
* Integrity check
VT: Yes
VW: Only for the scanner itself, PGP signatures
VZ: No
SF: For files, (added as comment)
XT: Only for the scanner itself, PGP signatures
* Heuristics
VT: No
VW: Yes (very good)
VZ: No
SF: Yes (only for bootblocks)
XT: No
Other remarks:
--------------
VT has some problems with PP-Packed Archives (Some BBS-Trojans) and
misses some Bootblock-Viruses which it detected in our last test (3/95).
VW sometimes displays letters (instead of numbers) in the heuristic.
The heuristic does not check bootblock-files.
VZ reports on the screen that it is performing repair even if it
is started without the repair option, regardless that in this
case repair doesn't actually occur. Also VZ crashes totally on
some of the Virus samples (CCCP.Starcom with defective hunk,
Lamer.VirusX_l8.dropper -file LamerVirusX-500).
Virus Checker (8.04) was not tested because it crashed on various
samples making testing within a normal amount of time impossible.
As the author additionally has stopped further development of his
product and sold the source-code there will be major changes not yet
testable anyway.
SFAP reports several viruses as "Hunklab" which is only a program to
add code to executable files. The decrunch operation of SFAP seems now
to be able to avoid starting viruses but still executes the original
decrunch header (instead of using external decrunch methods).
Still the decrunch-routine crashed on one of the sample-files.
XTRUDER is (like VZ) not able to check BB-Data files which makes
testing for Bootblock-Viruses very hard.
Author of this document:
------------------------
Soenke Freitag
Virus Test Center
University of Hamburg
Vogt Koelln Str. 30
22527 Hamburg - Germany