Comparison Test of Anti-Virus-Software 2001-07 (Groupware products) of the
University of Magdeburg and GEGA IT-Solutions GbR (http://www.av-test.org)
Copyright (c) 2001 Andreas Marx <amarx@gega-it.de>

Last update: 2001-07-29 (Data: 2001-07-16)


Hint (2001-07-02): The test of the virus detection was done using the
WildList 05/2001 (not including JS/Seeker.A, because it is not a virus).


COMM-N5
Command Software
Command AV for Lotus Notes

Comments (Notes 5):
- According to the vendor, a new version of the product is available, which
  does not have the limitations on the virus detection (the tested version
  uses an old scan engine and therefore it has not found all of the ITW
  viruses)
- CSAV database have to be add manually to the workplace
- Configuration settings - for example, changes on the options if a virus
  was found or notification settings - will be active after a long delay
  (a little bit more than 15 minutes)
- Bad support of UUEncode mails: Most files will not be scanned and passed
  wrongly encoded to the recipient

Missed ITW viruses (On-Access, Notes 5):
- Win32/Magistr.A (2x), Win32/Mtx.A (1x), Win32/Mtx.B (2x), W97M/Service.A
  (2x), X97M/Jini.A1 (2x), JS/Kak.A (1x MSG), VBS/Newlove.A (1x VBS),
  VBS/Valentine.A (2x), VBS/San.B (2x), VBS/San.A (2x)


GRSH-N4, GRSH-N5
Network Associates
GroupShield Domino

Comments (Notes 4/5):
- On-Demand: A notification on a started scan does not take place, but on
  the console the database which will be scanned at the moment will be
  shown; the scan takes a long time

Missed ITW viruses (On-Access, Notes 4/5):
- (All viruses found)


INOA-N4
Computer Associates
InoculateIT AE

Comments (Notes 4):
- Notice from the producer: A completely new version 6.0 of the program
  was at the time of the test in a beta test phase
- Installation has to be done in the following order: First install
  InoculateIT Advanced Edition (without reboot), after this, the Driver
  Update from the Support site has to be applied (drvupdi.exe), in the next
  step the patch LO71090 (Download Manager) has to be be applied, after
  this, a scanner update should be downloaded, and finally the Notes Option
  (LO76608) should be installed (not the version on the CD!), after this,
  Notes should be started and in the real-time monitor the search should be
  limited to "Incoming" and as search objects "E-Mail" should be enabled
  (the register "E-Mail-Options" including advanced options will be visible
  after this)
- On-Access: During the convertion process of an SMTP e-mail into the Notes
  format the Server virus guard (not the Notes plug-in!) will find an
  infected mail and denies access to it - therefore, a complete test of the
  Notes plug-in was not possible; however, the Notes plug-in has no
  problems to check Notes internal mails, which has been send, for example,
  from one Notes Client to another one
- Notice to virus detection: The desktop product - using the same engine
  and signature files - was able to find all ITW viruses 

Missed ITW viruses (On-Access, Notes 4):
- No declaration possible (see comments)


PAND-N4, PAND-N5
Panda Software
Panda AV Local Networks

Comments (Notes 4/5):
- In the standard configuration the samples of VBS/Stages.A will be missed,
  since the scanner does not check SHS files according to the extention
  list

Missed ITW viruses (On-Access, Notes 4/5):
- Win32/Blebla.A (1x CHM), Win32/Blebla.B (1x CHM), W97M/Beast.A (2x),
  VBS/Stages.A (2x)


SCML-N4, SCML-N5
Trend Micro
ScanMail for Lotus Notes

Comments (Notes 4/5):
- On-Demand scan utility does not have a real-time display of the scan
  process, but the results will be send by mail

Missed ITW viruses (On-Access, Notes 4/5):
- (All viruses found)


SOPH-N4
Sophos
Sophos AV for Notes/Domino

Comments (Notes 4):
- The installation of the Notes solution requires an installation of Sophos
  Anti-Virus for Windows NT, because it uses the Sophos' own SAVI API to
  scan for viruses, which will be provided by the InterCheck Server
- After the installation, the virus guard is disabled by default
- Option "Disinfect infected attachments" is only available for macro
  viruses - attachments infected by file viruses will not be cleaned for
  security reasons

Missed ITW viruses (On-Access, Notes 4):
- (All viruses found)


SYMC-N4, SYMC-N5
Symantec
Norton AV for Lotus Notes

Comments (Notes 4/5):
- Installation program says it is version 2.5.0, but the main program shows
  it is version 2.0 only
- Information about the version, scan engine and signature date are spread
  over the whole interface - at best, this information can be found under
  "NAV Log" | "Server Messages", since a lot of data can be found here on
  a single place
- According to the producer, it is possible using a add-on program
  (LiveUpdate Administration Utility) to download updates using HTTP, too

Missed ITW viruses (On-Access, Notes 4/5):
- (All viruses found)


### END OF FILE ###
