Comparison Test of Anti-Virus-Software 2001-04 (PC-WELT) of the
University of Magdeburg and GEGA IT-Solutions GbR (http://www.av-test.org)
Copyright (c) 2001 PC-WELT and Andreas Marx

Last Update: 2001-04-12 (Data: 2001-04-06)


AVIR-98, AVIR-ME
H+BEDV Datentechnik
AntiVir Personal Edition

Comments:
- Hint on password-protected files: "Fehler bei internen Entpackroutine.
  Das Archiv ist mglicherweise beschdigt." (Translated: "Error in
  internal unzip program. The archive seems to be damaged."

Missed ITW viruses (Windows 98):
- On-Demand: Win32/Blebla.A (1x CHM), Win32/Blebla.B (1x CHM),
  Win32/Msinit.A (2x), X97M/Jini.A1 (2x), JS/Kak.A (1x), JS/Unicle.A (2x)
- On-Access: Win32/Blebla.A (1x CHM), Win32/Blebla.B (1x CHM),
  Win32/Msinit.A (2x), W97M/Service.A (2x), X97M/Jini.A1 (2x),
  JS/Kak.A (1x), JS/Unicle.A (2x)

Missed ITW viruses (Windows ME):
- On-Demand: Win32/Blebla.A (1x CHM), Win32/Blebla.B (1x CHM),
  Win32/Msinit.A (2x), X97M/Jini.A1 (2x), JS/Kak.A (1x), JS/Unicle.A (2x)
- On-Access: Win32/Blebla.A (1x CHM), Win32/Blebla.B (1x CHM),
  Win32/Msinit.A (2x), W97M/Service.A (2x), X97M/Jini.A1 (2x),
  JS/Kak.A (1x), JS/Unicle.A (2x)

Disinfection:
- W97M: 109x macro virus warning and/or message "Datei nicht gefunden"
  (translated: "File not found") or "Sub oder Function nicht definiert"
  (translated: "Sub or Function not declared"), VBA editor cannot be opened
  anymore
- WM: 6x macro virus warning, message: "Makrospeicher konnte nicht geffnet
  werden" (translated: "Macro storage could not be opened"), no Project
  available


AVKI-98, AVKI-ME
G Data
AntiVirenKit 10

Comments:
- (None)

Missed ITW viruses (Windows 98):
- On-Access: Alle Bootviren, VBS/Newlova.A (2x)

Missed ITW viruses (Windows ME):
- On-Access: Alle Bootviren, VBS/Newlova.A (2x)

Disinfection:
- PP97M: 2x macro virus warning, modules are not removed
- WM: 6x macro virus warning, message: "Makrospeicher konnte nicht geffnet
  werden" (translated: "Macro storage could not be opened"), no Project
  available
- XF: 2x macro virus warning


FPDS-98, FPDS-ME
Frisk, perComp
F-Prot (DOS-Box)

Comments:
- (None)

Missed ITW viruses (Windows 98):
- (All viruses found)

Missed ITW viruses (Windows ME):
- (All viruses found)

Disinfection:
- W97M: 109x message: "Makrospeicher konnte nicht geffnet werden"
  (translated: "Macro storage could not be opened") or "Word konnte den
  Vorgang nicht starten" (translated: "Word could not start procedure")
  during open of the VBA editor, no Project available
- WM: 6x macro virus warning, message: "Makrospeicher konnte nicht geffnet
  werden" (translated: "Macro storage could not be opened"), no Project
  available


FPWP-98, FPWP-ME
Frisk, perComp
F-Prot for Windows

Comments:
- Does not delete or rename files infected with macro viruses, even if the
  repective option is set in the scanner options

Missed ITW viruses (Windows 98):
- On-Access: Michelangelo (2x)

Missed ITW viruses (Windows ME):
- On-Access: Michelangelo (2x)

Disinfection:
- W97M: 109x message: "Makrospeicher konnte nicht geffnet werden"
  (translated: "Macro storage could not be opened") or "Word konnte den
  Vorgang nicht starten" (translated: "Word could not start procedure")
  during open of the VBA editor, no Project available
- WM: 6x macro virus warning, message: "Makrospeicher konnte nicht geffnet
  werden" (translated: "Macro storage could not be opened"), no Project
  available


FSAV-98, FSAV-ME
F-Secure
Anti-Virus

Comments:
- (None)

Missed ITW viruses (Windows 98):
- On-Access: Michelangelo (2x)

Missed ITW viruses (Windows ME):
- (All viruses found)

Disinfection:
- W97M: 109x message: "Makrospeicher konnte nicht geffnet werden"
  (translated: "Macro storage could not be opened") or "Word konnte den
  Vorgang nicht starten" (translated: "Word could not start procedure")
  during open of the VBA editor, no Project available
- WM: 6x macro virus warning, message: "Makrospeicher konnte nicht geffnet
  werden" (translated: "Macro storage could not be opened"), no Project
  available


INOP-98, INOP-ME
Computer Associates
InoculateIT Personal Edition

Comments:
- (None)

Missed ITW viruses (Windows 98):
- On-Demand: Michelangelo (2x)
- On-Access: Win32/Babylonia.11036.A (1x HLP), JS/Kak.A (1x),
  JS/Unicle.A (1x)

Missed ITW viruses (Windows ME):
- On-Access: Win32/Babylonia.11036.A (1x HLP), JS/Kak.A (1x),
  JS/Unicle.A (1x)

Disinfection:
- W97M: 87x macro virus warning
- WM: 12x macro virus warning
- XF: 2x macro virus warning


KASP-98, KASP-ME
Kaspersky Lab, Datsec
Anti-Virus

Comments:
- Powerpoint macro viruses can be found on-access, however, they are only
  blocked, but an option like clean or delete will be completely ignored

Missed ITW viruses (Windows 98):
- (All viruses found)

Missed ITW viruses (Windows ME):
- (All viruses found)

Disinfection:
- PP97M: 2x macro virus warning, modules are not removed
- WM: 6x macro virus warning, message: "Makrospeicher konnte nicht geffnet
  werden" (translated: "Macro storage could not be opened"), no Project
  available
- XF: macro virus warning


MCAF-98, MCAF-ME
Network Associates
McAfee VirusScan

Comments:
- Pre-setting like "Clean", "Rename" or "Delete" of virus infected files
  are always executed wrong (German GUI localisation problem)
- No interception of critical errors (e.g. the program says, it has
  deleted or cleaned a file successfully, even if this file was
  write-protected and the operation has failed)

Missed ITW viruses (Windows 98):
- On-Demand: Michelangelo (2x)
- On-Access: Win32/Blebla.A (1x CHM), Win32/Blebla.B (1x CHM),
  X97M/Jini.A1, X97M/Laroux.KU (2x), VBS/Newlove.A (1x)

Missed ITW viruses (Windows ME):
- On-Demand: Michelangelo (2x)
- On-Access: Win32/Blebla.A (1x CHM), Win32/Blebla.B (1x CHM),
  VBS/Newlove.A (1x)

Disinfection:
- PP97M: 2x macro virus warning, modules are not removed
- WM: 6x macro virus warning, message: "Makrospeicher konnte nicht geffnet
  werden" (translated: "Macro storage could not be opened"), no Project
  available


NORT-98, NORT-ME
Symantec
Norton AntiVirus 2001

Comments:
- (None)

Missed ITW viruses (Windows 98):
- On-Demand: Win32/Blebla.A (1x CHM), Win32/Blebla.B (1x CHM),
  JS/Kak.A (1x), JS/Unicle.A (1x)
- On-Access: Win32/Blebla.A (1x CHM), Win32/Blebla.B (1x CHM),
  JS/Kak.A (2x), JS/Unicle.A (1x)

Missed ITW viruses (Windows ME):
- On-Demand: Win32/Blebla.A (1x CHM), Win32/Blebla.B (1x CHM),
  JS/Kak.A (1x), JS/Unicle.A (1x)
- On-Access: Win32/Blebla.A (1x CHM), Win32/Blebla.B (1x CHM),
  JS/Kak.A (2x), JS/Unicle.A (1x)

Disinfection:
- (None)


NVCC-98, NVCC-ME
Norman
Virus Control

Comments:
- Hint on password-protected files: "Cannot unpack"

Missed ITW viruses (Windows 98):
- (All viruses found)

Missed ITW viruses (Windows ME):
- (All viruses found)

Disinfection:
- WM: 12x macro virus warning, message: "Makrospeicher konnte nicht
  geffnet werden" (translated: "Macro storage could not be opened"), no
  Project available
- XF: 2x message: "Kann <Name>, der beim ffnen von <Name> ablaufen soll,
  nicht finden. Fortsetzen kann zu fehlerhaften Ergebnissen fhren. ffnen
  abbrechen?" (translated: "Could not find <name>, which should be
  executed during open of <name>. Continue of this operation can cause
  incorrect results. Abort open?")


PAND-98, PAND-ME
Panda Software
Antivirus Platinum

Comments:
- (None)

Missed ITW viruses (Windows 98):
- On-Access: Jumper.B, Win32/Blebla.A (1x CHM), Win32/Blebla.B (1x CHM)

Missed ITW viruses (Windows ME):
- On-Demand: Win32/Blebla.A (1x CHM), Win32/Blebla.B (1x CHM)

Disinfection:
- PP97M: 2x macro virus warning, modules are not removed
- W97M: 109x message: "Makrospeicher konnte nicht geffnet werden"
  (translated: "Macro storage could not be opened") or "Word konnte den
  Vorgang nicht starten" (translated: "Word could not start procedure")
  during open of the VBA editor, no Project available
- WM: 6x macro virus warning, message: "Makrospeicher konnte nicht geffnet
  werden" (translated: "Macro storage could not be opened"), no Project
  available


PCCI-98, PCCI-ME
Trend Micro
PC-Cillin

Comments:
- The VBS file extension is not on the extension list of the virus guard,
  therefore no VBS files are checked at all

Missed ITW viruses (Windows 98):
- On-Demand: Michelangelo (2x)
- On-Access: Michelangelo (2x), Win32/Babylonia.11036.A (1x HLP),
  Win32/Blebla.A (1x CHM), Win32/Blebla.B (1x CHM), X97M/Compat.A (1x XLA),
  all VBS viruses, JS/Kak.A (2x)

Missed ITW viruses (Windows ME):
- On-Demand: Michelangelo (2x)
- On-Access: Michelangelo (2x), Win32/Babylonia.11036.A (1x HLP),
  Win32/Blebla.A (1x CHM), Win32/Blebla.B (1x CHM), X97M/Compat.A (1x XLA),
  all VBS viruses, JS/Kak.A (2x)

Disinfection:
- W97M: 2x macro virus warning, modules are not removed
- WM: 2x macro virus warning, Project cannot be displayed anymore


### END OF FILE ###
