
List of Problems experienced during test:
-----------------------------------------

For automatic tests on huge viral databases, and for automatic processing
of large scanner log files, a set of test conditions is prerequisite for
scanners to participate in a VTC test. (See: 4TESTCON.TXT).

Generally, few scanners could not been persuaded to run under VTC
test conditions. These scanners have not been included in the test
report. In some cases, scanners were "specialised", esp. for detection
of macro viruses; in one case (Virus Buster), the specialised macro
virus detection tool was not available (from distributor).

Some scanners could be tested *without any problem*. Such benevolent
behaviour was esp. observed with: 

Dos:     Ibm, Sweep

Win95:   Ibm, Norton, Solomon, Vet, Sweep, AVP, VDS

WinNT:   Ibm, Solomon, AVP, Sweep, Pccillin

Some more scanners had only minor problems which were easily detected 
and cured with some "manual" assistance. This esp. included:

	 AVP, DSAV, NAV and TNT. 

Win95:  Norman, Thunderbyte, Pccillin, AVS, Perforin

WinNT:  Norton, Mcafee, AVS

In most other cases, serious problems were observed during some test. 
Dos-Scanners were either not suitably running under SIMBOOT and crashed, 
or problems appeared with the (rather large) file virus database. 
In some cases, scanners crashed upon detecting some specific virus; 
in few cases, "manual" operation instead of automatic (batch) operation 
helped solving some of these problems. Such curative action was also 
applied when possible in cases where log files were inadequate (e.g.
needed manual operation for export).

A general problem with Dos-Scanners is the counter for files and viruses
which seems to be designed as integers, so they start after 65536 with 0.
The scanners where we reckognized this problem are: ALERT, AVAST, AVG,
VIRUS BUSTER and VET.

In detail, the following problems have been encountered with 
different scanners during the tests.

ALERT/Look: DOS:        Crash on one Virus (Olivia).
                        Didn't scan all subdirectories.
                        Remark: After scanning the very large nyetcaro
                        directory the following Win95, OS2 and unknown
                        directories were not scanned. Manual restart on
                        this directories fixed the problem.
                        
AVAST!/Alwil: DOS:      All Versions: See problem described for Alert/Look.
                        Version 7-70-04: Crash on one Virus (Olivia).

AVAST32/Alwil: Win95 and NT: Tries to write report to the scanned drive, but
                        access is denied, so no report is written.

AVG/Grisoft: DOS:       Version 4.1: See problem described for Alert/Look
                        Version 5.0: crashed randomly on file viruses.
                        Manual restart on some directories fixed the problem.
                        Crashed on exiting after writing the report.   

AVP/KAMI: DOS:          See directory problem described for Alert/Look.
          Win95:        No Problem
          WinNt:        No Problem

AVScan/H+B EDV: DOS:    AVSCAN: See directory problem described for Alert/Look
                        AVE: See directory problem described for Alert/Look.
                             Didn't work with Simboot and was not able to
                             scan the images directly, not testable.
                Win95:  Crash on one macro virus (Irish)
                WinNT:  Crash on one macro virus (Irish)

Cure/Iris: DOS:         See directory problem described for Alert/Look.

DrWeb/Dialogue SC: DOS: See directory problem described for Alert/Look.

DSAV/DrSolomon: DOS:    See directory problem described for Alert/Look.
                        No test problems in macro and boot scanning.
                        In file test, three files were not
                        read; in single test, virus properly identified.
                Win95:  No Problem
                WinNT:  No Problem

F-PROT/Frisk Software: DOS: See directory problem described for Alert/Look.

F/Win / Kurtzhals:      No test problem.

Integrity Master/Stiller: DOS: No test problem with macro viruses;
                        In file test, scanner stopped after scanning
                        3,200 directories. Manual restart needed.

IBM AV/IBM: DOS:        No test problems. (Even scanned correctly the Win95,
                        OS2, and unknown-directories without manual restart)
            Win95:      No Problem
            WinNT.      No Problem

InVircible/NetZ:        No Report file for file and boot test generated.
                        The Report for the macro test was not usable.
                        Tries to write report file to the drive that is
                        scanned.

Norton AV/Symantec: DOS:Needed 72 hours for scanning.
                        No problems with test of macro and boot viruses.
			In automatic file test mode, scanner crashed after
			having processed the smaller (CARO) directory, 
			upon entering the larger one (NYETCARO). In manual
                        mode, file test succeeded in 5 steps.
                Win95:  No Problem
                WinNT:  Scanned completely but stored some information in the
                        main memory so the used memory exceeded 240 MB! 

Norman VC/Norman Data Defence: DOS: See directory problem described for
                        Alert/Look.
                Win95:  Crashed after writing the report.
                WinNT:  No Problems

PAV/GData: DOS:         See directory problem described for Alert/Look.
           Win95:       AVP 6.05 (Prerelease): No Problem,
                        Counter starts after 32768 (integer) with 0.
                        AVP 3.0: No Problem
           WinNT:       No Problem

Pccillin/Trendmicro: Dos: Crashes on several files, not testable
                Win95:  Crashes on some members of the Nutcracker-
                        Virus-Family, Crashed on some other files.
                        Not testable on file viruses.
                WinNT:  No Problems

PCVP/CSE: DOS:          Crashed on several files. Not testable

Scan/McAfee:    DOS:    See directory problem described for Alert/Look.
                Win95:  Crash on one Virus (Olivia)
                WinNT:  V3.0 Sig 3006: Crash on Olivia and Vienna
                        V3.02: Crash on Olivia

Sweep/Sophos: DOS:      No test problems. (Even scanned correctly the Win95,
                        OS2, and unknown-directories without manual restart)
              Win95:    No Problem
              WinNT:    No Problem
              
TBAV/ThunderByte: DOS:  No test problem on file and macro test. Crash on one
                        Boot Virus (Joshi B).
                 Win95: Crash on one Virus family (Whale).
                 WinNT: Crash on one Virus (Xram 1000).
                        Crash on "Access denied" files, not testable on
                        file viruses.

VDS/Adv.Res.Group: DOS: Scanned all directories but attempted to move all
                        viruses to C:\VDS-CELL.
                 Win95: No Problems
VDS/Macrobuster: Win95: Defective menu, Problem solved by editing ini-file.

VET/Cybec: DOS:         See directory problem described for Alert/Look.
           Win95:       No Problems
           WinNT:       No Problems

Virus Buster/Leprechaun: DOS: No problems with file test. In boot test, scanner
			does not work with SIMBOOT. Scanner does not detect
			macro viruses; in macro test of special module
			DocCheck, product attempted to access documents
			in write mode which was rejected by the NT database
			server (all files "read-only").
                
Macrobuster/Leprechaun: Win95: Scanning no Problem, the Report contains
                        descriptions of the macros, but is not usable for
                        counting.
                                

