
****************************************************************************
*                                                                          *
*  Comparison Test of Anti-Virus-Software 03/2000 (client/server products) *
*  of the University of Magdeburg and GEGA S&M (http://www.av-test.com)    *
*  Copyright (c) 2000 Andreas Marx, Last update: 03/19/2000                *
*                                                                          *
****************************************************************************


This document contains the list of viruses that have been used for the
test. F-Prot, AVP, Scan (all types of viruses) and F/Win32 (macro viruses
only) names have been used to create this list.


For this test (03/2000), only ITW viruses and the false positive
collection have been used and not the complete test set. However,
the number of other viruses are included in this test, too, but not
the names of them.


Total number of files = 294.488 (4948.17 MB)
(Not including special test files.)


*****************************************************************************
* Testset:         * VirNo:  Poly:  ITW: *  Files:  Poly:   ITW: * Size/MB: *
*****************************************************************************
* Boot viruses:    !    549      -  (27) !    1560      -     54 !    55.04 *
*------------------+---------------------+-----------------------+----------*
* File viruses:    !                     !                       !          *
*  -> DOS:         !  25795  (146)  (22) !  204605  68180     44 !  3645.61 *
*  -> Java:        !      1      -     - !      15      -      - !     0.11 *
*  -> Linux:       !      1      -     - !       3      -      - !     0.04 *
*  -> OS/2:        !      1      -     - !       4      -      - !     0.04 *
*  -> Win16:       !     34      -     - !     483      -      - !    47.04 *
*  -> Win32:       !     87      -  (18) !    3627      -     36 !   381.70 *
*------------------+---------------------+-----------------------+----------*
* Macro viruses:   !                     !                       !          *
*  -> A97M/A2M:    !     12      -     - !      30      -      - !     6.09 *
*  -> PP97M:       !      7      -   (1) !      10      -      2 !     0.23 *
*  -> WM:          !   1516   (11)  (16) !    7504    138     32 !   442.09 *
*  -> W97M:        !    839      -  (63) !    2582      -    126 !   146.98 *
*  -> XF:          !      5      -   (2) !      38      -      4 !     2.26 *
*  -> XM:          !    158      -  (11) !     759      -     22 !    40.02 *
*  -> X97M:        !    186      -  (21) !     802      -     42 !    64.34 *
*------------------+---------------------+-----------------------+----------*
* Script malware:  !                     !                       !          *
*  -> BAT:         !    174      -     - !     375      -      - !     0.77 *
*  -> JS:          !      5      -     - !       6      -      - !     0.02 *
*  -> mIRC worms:  !     85      -     - !     181      -      - !     0.38 *
*  -> VBS:         !     48      -   (4) !      67      -      8 !     0.61 *
*------------------+---------------------+-----------------------+----------*
* Other Malware:   !    381      -     - !     381      -      - !     9.61 *
*****************************************************************************
* Viruses/Malware: *= 29503    157 (185) *= 223032  68318    370 *= 4842.98 *
*****************************************************************************
* False positives: *   2768      -     - *    2768      -      - *   105.19 *
*****************************************************************************




*** Boot viruses: -> ITW (V:\ITW\BOOT) ***

ANTICMOS.A (2), ANTICMOS.B (2), ANTIEXE.A (2), BOOT437.A (2), ECO.B (2),
EMPIRE.MONKEY.A (2), EMPIRE.MONKEY.B (2), EXE_BUG.A (2), FORM.A (2),
FORM.D (2), J&M.A (2), JUMPER.B (2), JUNKIE.1027.A (2), MICHELANGEL.A (2),
NATAS.4774.A (2), NYB.A (2), PARITY_BOOT.B (2), RIPPER.A (2), SAMPO.A (2),
STEALTH_BOO.C (2), STONED.ANGELINA.A (2), STONED.JUNE_4TH.A (2),
STONED.NOINT.A (2), STONED.SPIRIT.A (2), STONED.STANDARD.B (2),
TPVO.3783.A (2), WELCOMB.A (2)



*** File viruses: -> DOS: -> ITW (V:\ITW\FILE\DOS) ***

BURGLAR.1150.A (2), BYWAY.2048 (2), CASCADE.1701.A (2), CASCADE.1704.A (2),
DIE_HARD.4000.A (2), FLIP.2153.A (2), HLLP.TOADIE.7800.A (2),
HLLP.TOADIE.7800.B (2), JERUSALEM.1808.A (2), JUNKIE.1027.A (2),
MAJOR.1644.A (2), NATAS.4774.A (2), ONE_HALF.3544.A (2), ONE_HALF.3577 (2),
PIECK.4444.A (2), SPANSKA.4250.A (2), TAI-PAN.438.A (2), TEQUILA.2468.A (2),
TMC.A (2), TPVO.3783.A (2), TREMOR.4000.A (2), YANKEE_DOOD.2881.A (2)



*** File viruses: -> Win32: -> ITW (V:\ITW\FILE\WIN32) ***

BABYLONIA.11036.A (2), BEAST.41472.A (2), CIH.1003.A (2), CIH.1019.A (2),
EXPLOREZIP.120495 (2), EXPLOREZIP.210432 (2), FONO.17152.A (2),
FUNLOVE.4099 (2), HEATHEN.12288.A (2), K32.3030 (2), KENSTON.1874 (2),
KRIZ.4029 (2), MARBURG.8590.A (2), MYPICS (2), NEWAPT.A (2),
OPORTO.3075 (2), PRETTYPARK.37376 (2), SKA.10000 (2)



*** Macro viruses: -> PP97M: -> ITW (V:\ITW\MACRO\PP97M) ***

TRISTATE.C (2)



*** Macro viruses: -> WM: -> ITW (V:\ITW\MACRO\WM) ***

APPDER.A (2), CAP.A (2), COLORS.A (2), CONCEPT.A (2), COPYCAP.A (2),
DEMON.A (2), DEVINA.A (2), JOHNNY.A (2), MDMA.A (2), NIKNAT.A (2),
NOTTICE.A (2), NPAD.A (2), SHOWOFF.A (2), WAZZU.A (2), WAZZU.C (2),
WAZZU.DO (2)



*** Macro viruses: -> W97M: -> ITW (V:\ITW\MACRO\W97M) ***

APPDER.A (2), BABLAS.A (2), BEAST.41472.A (2), BRENDA.A (2), CHACK.H (2),
CLASS.B (2), CLASS.BV (2), CLASS.D (2), CLASS.Q (2), COLDAPE.A (2),
COLDAPE.B (2), CONT.A (2), DED.A (2), DED.B (2), ETHAN.A (2), ETHAN.AT (2),
ETHAN.AW (2), ETHAN.B (2), ETHAN.Q (2), FOOTER.A (2), GROOV.A (2),
GROOV.B (2), GROOV.C (2), HALFCROSS.A (2), HEATHEN.12288.A (2), HUBAD.A (2),
JERK.B (2), LOCALE.A (2), LOCALE.B (2), MARKER.AE (2), MARKER.AQ (2),
MARKER.AR (2), MARKER.C (2), MARKER.D (2), MARKER.O (2), MARKER.P (2),
MARKER.Q (2), MARKER.X (2), MELISSA.A (2), MELISSA.AA (2), MELISSA.AB (2),
MELISSA.I (2), MELISSA.M (2), MELISSA.U (2), MYNA.B (2), NONO.A (2),
NOTTICE.A (2), NOTTICE.D (2), OPEY.C (2), OZWER.F (2), PANTHER.A (2),
PRI.A (2), PRI.B (2), PRI.Q (2), PROTECED.A (2), STORY.A (2), THUS.A (2),
TRISTATE.C (2), TURN.A (2), VELOR.A (2), VMPCK1.BY (2), WALKER.D (2),
WALKER.E (2)



*** Macro viruses: -> XF: -> ITW (V:\ITW\MACRO\XF) ***

PAIX.A (2), SIC.A (2)



*** Macro viruses: -> XM: -> ITW (V:\ITW\MACRO\XM) ***

COMPAT.A (2), EXTRAS.A (2), LAROUX.A (2), LAROUX.AN (2), LAROUX.CF (2),
LAROUX.DO (2), LAROUX.DX (2), LAROUX.E (2), LAROUX.HO (2), LAROUX.IC (2),
LAROUX.JO (2)



*** Macro viruses: -> X97M: -> ITW (V:\ITW\MACRO\X97M) ***

CLONAR.A (2), DIVI.A (2), EXTRAS.A (2), EXTRAS.B (2), HALFCROSS.A (2),
LAROUX.A (2), LAROUX.CF (2), LAROUX.CN (2), LAROUX.DO (2), LAROUX.DX (2),
LAROUX.E (2), LAROUX.EI (2), LAROUX.FC (2), LAROUX.HJ (2), LAROUX.HO (2),
LAROUX.JP (2), LAROUX.JX (2), MANALO.E (2), PTH.D (2), TRISTATE.C (2),
VCX.A (2)



*** Script malware: -> VBS: -> ITW (V:\ITW\SCRIPT\VBS) ***

BUBBLEBOY.A (2), COLDAPE (2), FREELINKS (2), HAPPY.A (2)



*** False positives: -> Standard (W:\FALSEPOS) ***

(not listed here, see test documentation)



### END OF FILE ###
