================================================
         File 6GWNT.TXT/Heureka-Test:
==================================================
Detailed results of Macro and Script Virus related 
    on-demand scanner tests under Windows NT:
==================================================
(Formatted with non-proportional font: Courier; 72 columns)

Following VTC test "2001-09" where 22 products were submitted
for test (with testbed frozen on April 30, 2001 and products 
submitted June 2001), the producers of 21 AV products agreed 
that their Windows-NT related products were tested against 
special testbeds including macro and script viruses and malware 
reported BETWEEN May 1, 2001 and July 31, 2001 (testbed 
"Jul01=017") as well as BETWEEN August 1,2001 and 
October 31,2001 (testbed "Oct01=01A"), respectively.

For details of related AV producers: see A2SCNLS.txt. For a list 
of acronyms (abbreviations) for AV products: see A5CodNam.txt.
 
	 --------------------------------------------------------
           Products submitted for aVTC test under Windows-NT:
	 --------------------------------------------------------
     	   ANT     v(def): 6.8.0.2 	    sig: June 05,2001
	   AVA     v(def): unknown	    sig: unknown
 	   AVG     v(def): 6.0.263	    sig: June 22,2001
 	   AVK     v(def): 10.0.167	    sig: June 21,2001
 	   AVP     v(def): 3.5.133.0	    sig: June 01,2001
 	   AVX     v(def): 6.1              sig: June 18,2001
 	   CMD     v(def): 4.61.5           sig: June 25,2001
 	   DRW     v(def): 4.25             sig: June 20,2001
 	   FPR     v(def): 3.09d	    sig: June 25,2001
 	   FPW     v(def): 3.09d	    sig: June 25,2001
 	   FSE     v(def): 1.00.1251        sig: June 20,2001
		           scan eng fprot:  3.09.507
		    	   scan eng avp:    3.55.3210
		           scan eng orion:  1.02.15
 	   IKA     v(def): 5.01	            sig: June 25,2001
 	   INO     v(def): 6.0.85  	    sig: June 14,2001
	   MR2     v(def): 1.17    	    sig: June 25,2001
 	   NVC     v(def): 5.00.25 	    sig: June 19,2001
 	   PAV     v(def): 3.5.133.0	    sig: June 23,2001
 	   QHL     v(def): 6.02    	    sig: June 28,2001
 	   RAD     v(def): 8.1.001	    sig: June 25,2001
 	   RAV     v(def): 8.2.001,
                    	   scan eng:8.3     sig: June 25,2001
 	   SCN     v(def): 4144
                    	   scan eng:4.1.40  sig: June 20,2001
 	   VSP     v(def): 12.22.1 	    sig: June 25,2001
         --------------------------------------------------------
	 One products (NAV) was withdrawn from this test, 
         due to "new engines".


   Index of tables:
   ===========================================================
                 Part I: Reference testbed "Jul01=017" 
   ===========================================================
   Reference "014":  Detection rates for macro and script
                 viruses/malware in VTC test "2001-04"
                 using testbeds "017" (May 1-July 31, 2001)
   -----------------------------------------------------------
   WNT.M1/014:  "MacroVirus 1/014":  Results of "full" test 
                                     for macro viruses 
   WNT.M2/014:  "MacroVirus 2/014":  Results of "In-The-Wild" 
                                     test for macro viruses
   WNT.M5/014:  "MacroMalware/014":  Results of "full" zoo test
                                     for Macro-related malware 
   WNT.S1/014:  "ScriptVirus 1/014": Results of "full" test for 
                                     script viruses (VBS, JS etc) 
   WNT.S2/014:  "ScriptVirus 2/014": Results of "In-The-Wild" 
		                     test for script viruses
   WNT.S5/014:  "ScriptMalware/014": Results of "full" zoo test
                                     for script-related malware 

   ===========================================================
                 Part II: Heureka testbed "Jul-01=017" 
   ===========================================================
   Heureka "017": Detection rates for macro and script
                  viruses/malware in VTC test "2002-02",
                  using testbeds "017", including viruses
		  detected between May 1,2001 and July 31,2001
   -----------------------------------------------------------
   WNT.M1/017:  "MacroVirus 1/017":  Results of "full" test 
                                     for macro viruses 
   WNT.M2/017:  "MacroVirus 2/017":  Results of "In-The-Wild" 
		                     test for macro viruses
   WNT.M5/017:  "MacroMalware/017":  Results of "full" zoo test 
		                     for Macro-related malware 
   WNT.S1/017:  "ScriptVirus 1/017": Results of "full" test for
                                     script viruses (VBS, JS etc) 
   WNT.S2/017:  "ScriptVirus 2/017": Results of "In-The-Wild" 
		                     test for macro viruses
   WNT.S5/017:  "ScriptMalware/017": Results of "full" zoo test 
		                     for Macro-related malware 

   ===========================================================
                Part III: Heureka testbed "01A" 
   ===========================================================
   Heureka "01A": Detection rates for macro and script
                  viruses/malware in VTC test "2002-02",
                  using testbeds "01A", including viruses
		  detected between Aug.1,2001 and Oct.31,2001
   -----------------------------------------------------------
   WNT.M1/01A:  "MacroVirus 1/01A":  Results of "full" test 
                                     for macro viruses 
   WNT.M2/01A:  "MacroVirus 2/01A":  Results of "In-The-Wild" 
		                     test for macro viruses
   WNT.M5/01A:  "MacroMalware/01A":  Results of "full" zoo test
		                     for Macro-related malware 
   WNT.S1/01A:  "ScriptVirus 1/01A": Results of "full" test for
                                     script viruses (VBS, JS etc)
   WNT.S2/01A:  "ScriptVirus 2/01A": Results of "In-The-Wild" 
		                     test for macro viruses
   WNT.S5/01A:  "ScriptMalware/01A": Results of "full" zoo test
		                     for Macro-related malware
   ==============================================================  


	=================================================
	Part I: Reference tables (results for test "014")
                 with testbeds frozen on April 30, 2001
	=================================================

Table WNT.M1/014: "MacroVirus 1/014": Results of "full" zoo test 
             with testbed "014" for macro viruses under Windows NT:
===================================================================
                           This  includes        
            Viruses     ---- unreliably ----     Files
Scanner     detected    identified   detected   detected
----------+-----------+-----------------------+------------
Testbed    6762 100.0%                         21677 100.0%
----------+-----------+-----------------------+------------
ANT        6566  97.1   185   2.7    56   0.8  20811  96.0 
AVA        6604  97.7    42   0.6    32   0.5  21202  97.8 
AVG        6651  98.4    55   0.8    13   0.2  21387  98.7 
AVK        6762 100.0   118   1.7     1   0.0  21674  100~ 
AVP        6761 100.0   118   1.7     1   0.0  21673  100~ 
AVX        6703  99.1   134   2.0     8   0.1  21474  99.1 
CMD        6760 100.0    93   1.4     1   0.0  21672  100~
DRW        6725  99.5    81   1.2    14   0.2  21574  99.5 
FPR        6760 100.0    29   0.4     1   0.0  21672  100~ 
FPW        6760 100.0    29   0.4     1   0.0  21672  100~ 
FSE        6762 100.0   120   1.8     0   0.0  21677 100.0 
IKA        6451  95.4   421   6.2   170   2.5  20723  95.6 
INO        6755  99.9   110   1.6     6   0.1  21651  99.9 
MR2          44   0.7     4   0.1     4   0.1    156   0.7 
NAV        6726  99.5   110   1.6    17   0.3  21495  99.2  (*)
NVC        6751  99.8    89   1.3    12   0.2  21622  99.7 
PAV        6762 100.0   118   1.7     1   0.0  21674  100~ 
QHL           0   0.0     0   0.0     0   0.0      0   0.0 
RAD        6726  99.5   346   5.1    16   0.2  21546  99.4 
RAV        6726  99.5   348   5.1    15   0.2  21545  99.4 
SCN        6762 100.0    66   1.0     0   0.0  21677 100.0 
VSP           1   0.0     0   0.0     1   0.0      1   0.0 
----------+-----------+-----------------------+------------
(*) NAV withdrawn from "Heureka test".


Table WNT.M2/014: "MacroVirus 2/014": Results of "In-The-Wild" 
                  test for macro viruses under Windows NT:
==============================================================
                           This  includes        
            Viruses     ---- unreliably ----     Files
Scanner     detected    identified   detected   detected
----------+-----------+-----------------------+------------
Testbed     143 100.0%                          1308 100.0%
----------+-----------+-----------------------+------------
ANT         142  99.3     7   4.9     2   1.4   1294  98.9 
AVA         143 100.0     6   4.2     3   2.1   1305  99.8 
AVG         143 100.0    11   7.7     0   0.0   1308 100.0 
AVK         143 100.0     9   6.3     0   0.0   1308 100.0 
AVP         143 100.0     9   6.3     0   0.0   1308 100.0 
AVX         143 100.0    15  10.5     0   0.0   1308 100.0 
CMD         143 100.0     2   1.4     0   0.0   1308 100.0 
DRW         143 100.0    10   7.0     0   0.0   1308 100.0 
FPR         143 100.0     2   1.4     0   0.0   1308 100.0 
FPW         143 100.0     2   1.4     0   0.0   1308 100.0 
FSE         143 100.0     9   6.3     0   0.0   1308 100.0 
IKA         142  99.3    25  17.5     2   1.4   1299  99.3 
INO         143 100.0     9   6.3     0   0.0   1308 100.0 
MR2          13   9.1     1   0.7     5   3.5    378  28.9 
NAV         143 100.0     8   5.6     0   0.0   1308 100.0  (*)
NVC         143 100.0    11   7.7     2   1.4   1305  99.8 
PAV         143 100.0     9   6.3     0   0.0   1308 100.0 
QHL           0   0.0     0   0.0     0   0.0      0   0.0 
RAD         143 100.0    26  18.2     5   3.5   1302  99.5 
RAV         143 100.0    26  18.2     5   3.5   1302  99.5 
SCN         143 100.0     7   4.9     0   0.0   1308 100.0 
VSP           0   0.0     0   0.0     0   0.0      0   0.0 
----------+-----------+-----------------------+------------
(*) NAV withdrawn from "Heureka test".


Table WNT.M5/014: "Macro-Malware/014": Results of "full" test
	          for Macro-related malware under Windows NT:
=============================================================
              Macro         This  includes        
             Malware     ---- unreliably ----     Files
Scanner     detected    identified   detected   detected
----------+-----------+-----------------------+------------
Testbed     426 100.0%                           683 100.0%
----------+-----------+-----------------------+------------
ANT         378  88.7     9   2.1     9   2.1    606  88.7 
AVA         377  88.5     3   0.7     6   1.4    584  85.5 
AVG         352  82.6     1   0.2     5   1.2    584  85.5 
AVK         425  99.8     0   0.0     0   0.0    682  99.9 
AVP         425  99.8     0   0.0     0   0.0    682  99.9 
AVX         392  92.0    10   2.3     4   0.9    630  92.2 
CMD         424  99.5     6   1.4     0   0.0    676  99.0 
DRW         387  90.8     1   0.2     7   1.6    622  91.1 
FPR         424  99.5     2   0.5     0   0.0    676  99.0 
FPW         424  99.5     2   0.5     0   0.0    676  99.0 
FSE         425  99.8     0   0.0     0   0.0    682  99.9 
IKA         383  89.9    14   3.3    10   2.3    612  89.6 
INO         398  93.4     6   1.4     1   0.2    653  95.6 
MR2         135  31.7     5   1.2     2   0.5    208  30.5 
NAV         368  86.4     4   0.9     7   1.6    596  87.3  (*)
NVC         421  98.8    11   2.6     2   0.5    660  96.6 
PAV         426 100.0     0   0.0     0   0.0    683 100.0 
QHL           0   0.0     0   0.0     0   0.0      0   0.0 
RAD         416  97.7    28   6.6     4   0.9    663  97.1 
RAV         415  97.4    28   6.6     4   0.9    662  96.9 
SCN         426 100.0     0   0.0     0   0.0    683 100.0 
VSP           1   0.2     0   0.0     0   0.0      1   0.1 
----------+-----------+-----------------------+------------
(*) NAV withdrawn from "Heureka test".


Table WNT.S1/014: "ScriptVirus 1/014": Results of
                  "full" Zoo test for script viruses:
=====================================================
                           This  includes        
            Viruses     ---- unreliably ----     Files
Scanner     detected    identified   detected   detected
----------+-----------+-----------------------+------------
Testbed     588 100.0%                          1079 100.0%
----------+-----------+-----------------------+------------
ANT         481  81.8    41   7.0    34   5.8    835  77.4 
AVA         174  29.6     8   1.4    25   4.3    380  35.2 
AVG         370  62.9    22   3.7    32   5.4    727  67.4 
AVK         588 100.0    58   9.9     0   0.0   1079 100.0 
AVP         588 100.0    48   8.2     0   0.0   1079 100.0 
AVX         412  70.1    19   3.2    42   7.1    730  67.7 
CMD         552  93.9    21   3.6    16   2.7    987  91.5 
DRW         561  95.4    32   5.4    12   2.0    992  91.9 
FPR         558  94.9    23   3.9    17   2.9    994  92.1 
FPW         556  94.6    22   3.7    17   2.9    989  91.7 
FSE         588 100.0    50   8.5     1   0.2   1076  99.7 
IKA         457  77.7    46   7.8    45   7.7    812  75.3 
INO         559  95.1    58   9.9    15   2.6   1022  94.7 
MR2         490  83.3    54   9.2    44   7.5    829  76.8 
NAV         554  94.2    37   6.3    25   4.3    984  91.2  (*) 
NVC         537  91.3    61  10.4    13   2.2    960  89.0 
PAV         588 100.0    48   8.2     0   0.0   1079 100.0 
QHL           1   0.2     0   0.0     1   0.2      1   0.1
RAD         485  82.5    51   8.7    33   5.6    800  74.1  
RAV           1   0.2     0   0.0     1   0.2      1   0.1 
SCN         587  99.8    39   6.6     1   0.2   1077  99.8 
VSP         494  84.0    54   9.2    44   7.5    835  77.4 
----------+-----------+-----------------------+------------
(*) NAV withdrawn from "Heureka test".


Table WNT.S2/014: "ScriptVirus 2/014": Results of 
		  "In-The-Wild" test for script viruses:
========================================================
                           This  includes        
            Viruses     ---- unreliably ----     Files
Scanner     detected    identified   detected   detected
----------+-----------+-----------------------+------------
Testbed      19 100.0%                           110 100.0%
----------+-----------+-----------------------+------------
ANT          19 100.0     7  36.8     2  10.5    109  99.1 
AVA          18  94.7     4  21.1     5  26.3     99  90.0 
AVG          19 100.0     2  10.5     5  26.3    107  97.3 
AVK          19 100.0     3  15.8     0   0.0    110 100.0 
AVP          19 100.0     2  10.5     0   0.0    110 100.0 
AVX          19 100.0     2  10.5     2  10.5    110 100.0
CMD          19 100.0     3  15.8     1   5.3    109  99.1 
DRW          19 100.0     2  10.5     0   0.0    110 100.0 
FPR          19 100.0     3  15.8     1   5.3    109  99.1 
FPW          19 100.0     3  15.8     1   5.3    109  99.1 
FSE          19 100.0     3  15.8     0   0.0    110 100.0 
IKA          18  94.7     6  31.6     4  21.1    101  91.8 
INO          19 100.0     4  21.1     2  10.5    110 100.0 
MR2          17  89.5     2  10.5     8  42.1     86  78.2 
NAV          19 100.0     7  36.8     0   0.0    110 100.0  (*) 
NVC          19 100.0    12  63.2     0   0.0    110 100.0 
PAV          19 100.0     2  10.5     0   0.0    110 100.0 
QHL           1   5.3     0   0.0     1   5.3      1   0.9 
RAD          18  94.7     2  10.5     5  26.3    109  99.1 
RAV           0   0.0     0   0.0     0   0.0      0   0.0 
SCN          19 100.0     0   0.0     0   0.0    110 100.0 
VSP          17  89.5     3  15.8     7  36.8     87  79.1 
----------+-----------+-----------------------+------------
(*) NAV withdrawn from "Heureka test".


Table WNT.S5: "Script-Malware": Results of "full" test for
               Script-related malware under Windows NT:
=========================================================
              Macro         This  includes        
             Malware     ---- unreliably ----     Files
Scanner     detected    identified   detected   detected
----------+-----------+-----------------------+------------
Testbed      22 100.0                             30 100.0
----------+-----------+-----------------------+------------
ANT           0   0.0     0   0.0     0   0.0      0   0.0 
AVA		**    No report  -  See problem-list   **
AVG           5  22.7     0   0.0     1   4.5      5  16.7 
AVK          22 100.0     1   4.5     0   0.0     30 100.0 
AVP          22 100.0     1   4.5     0   0.0     30 100.0 
AVX           2   9.1     1   4.5     0   0.0      3  10.0 
CMD          14  63.6     0   0.0     0   0.0     16  53.3 
DRW           8  36.4     0   0.0     0   0.0      9  30.0 
FPR          14  63.6     0   0.0     0   0.0     16  53.3 
FPW          14  63.6     0   0.0     0   0.0     16  53.3 
FSE          22 100.0     1   4.5     0   0.0     30 100.0 
IKA           8  36.4     0   0.0     0   0.0      8  26.7 
INO          15  68.2     1   4.5     0   0.0     19  63.3 
MR2           5  22.7     1   4.5     0   0.0      6  20.0 
NAV           8  36.4     0   0.0     0   0.0     11  36.7  (*)
NVC           2   9.1     0   0.0     0   0.0      2   6.7 
PAV          22 100.0     1   4.5     0   0.0     30 100.0 
QHL           1   4.5     0   0.0     0   0.0      1   3.3
RAD          18  81.8     0   0.0     0   0.0     25  83.3  
RAV           0   0.0     0   0.0     0   0.0      0   0.0 
SCN          22 100.0     2   9.1     0   0.0     30 100.0 
VSP           5  22.7     1   4.5     0   0.0      6  20.0 
----------+-----------+-----------------------+------------
(*) NAV withdrawn from "Heureka test".



	======================================
	Part II: Results of Heureka test "017"
        ======================================

Table WNT.M1/017: "MacroVirus 1/017": Results of "full" zoo test 
          with testbed "Jul-01" for macro viruses under Windows NT:
===================================================================
                           This  includes        
            Viruses     ---- unreliably ----     Files
Scanner     detected    identified   detected   detected
----------+-----------+-----------------------+------------
Testbed     357 100.0%                          1259 100.0%
----------+-----------+-----------------------+------------
ANT         221  61.9     3   0.8     3   0.8    712  56.6
AVA         254  71.1     1   0.3     4   1.1    833  66.2
AVG         318  89.1     3   0.8     1   0.3   1117  88.7
AVK         288  80.7     1   0.3     0   0.0   1001  79.5
AVP         292  81.8     0   0.0     0   0.0   1016  80.7
AVX         343  96.1     7   2.0     3   0.8   1192  94.7
CMD         324  90.8     4   1.1     4   1.1   1143  90.8
DRW         344  96.4     2   0.6     2   0.6   1219  96.8
FPR         322  90.2     4   1.1     4   1.1   1136  90.2
FPW         322  90.2     4   1.1     4   1.1   1136  90.2
FSE         341  95.5   234  65.5     1   0.3   1205  95.7
IKA         290  81.2     8   2.2     5   1.4   1040  82.6
INO         339  95.0     5   1.4     1   0.3   1178  93.6
MCV    *** no report - see problem list              ***
MR2           6   1.7     0   0.0     0   0.0     16   1.3
NVC         223  62.5     6   1.7     1   0.3    797  63.3
PAV         292  81.8     0   0.0     0   0.0   1016  80.7
QHL           0   0.0     0   0.0     0   0.0      0   0.0
RAV         330  92.4    14   3.9     5   1.4   1142  90.7
SCN         349  97.8     5   1.4     0   0.0   1244  98.8
VSP           0   0.0     0   0.0     0   0.0      0   0.0
----------+-----------+-----------------------+------------


Table WNT.M2/017: "MacroVirus 2/017": Results of "In-The-Wild" 
                   test for macro viruses under Windows NT:
==============================================================
                           This  includes        
            Viruses     ---- unreliably ----     Files
Scanner     detected    identified   detected   detected
----------+-----------+-----------------------+------------
Testbed      17 100.0%                            78 100.0%
----------+-----------+-----------------------+------------
ANT          14  82.4     1   5.9     0   0.0     44  56.4
AVA          16  94.1     0   0.0     0   0.0     50  64.1
AVG          17 100.0     0   0.0     0   0.0     78 100.0
AVK          17 100.0     1   5.9     0   0.0     78 100.0
AVP          17 100.0     0   0.0     0   0.0     78 100.0
AVX          16  94.1     0   0.0     0   0.0     50  64.1
CMD          17 100.0     2  11.8     0   0.0     78 100.0
DRW          17 100.0     0   0.0     0   0.0     78 100.0
FPR          17 100.0     2  11.8     0   0.0     78 100.0
FPW          17 100.0     2  11.8     0   0.0     78 100.0
FSE          17 100.0     2  11.8     0   0.0     78 100.0
IKA          17 100.0     1   5.9     2  11.8     76  97.4
INO          16  94.1     0   0.0     0   0.0     50  64.1
MCV    *** no report - see problem list              ***
MR2           0   0.0     0   0.0     0   0.0      0   0.0
NVC          17 100.0     3  17.6     0   0.0     78 100.0
PAV          17 100.0     0   0.0     0   0.0     78 100.0
QHL           0   0.0     0   0.0     0   0.0      0   0.0
RAV          17 100.0     2  11.8     1   5.9     51  65.4
SCN          17 100.0     2  11.8     0   0.0     78 100.0
VSP           0   0.0     0   0.0     0   0.0      0   0.0
----------+-----------+-----------------------+------------


Table WNT.M5/017: "Macro-Malware/017": Results of "full" test
	           for Macro-related malware under Windows NT:
==============================================================
              Macro         This  includes        
             Malware     ---- unreliably ----     Files
Scanner     detected    identified   detected   detected
----------+-----------+-----------------------+------------
Testbed      22 100.0%                            30 100.0%
----------+-----------+-----------------------+------------
ANT          10  45.5     1   4.5     0   0.0     13  43.3
AVA          11  50.0     0   0.0     0   0.0     15  50.0
AVG          14  63.6     0   0.0     0   0.0     20  66.7
AVK          12  54.5     0   0.0     0   0.0     14  46.7
AVP          14  63.6     0   0.0     0   0.0     17  56.7
AVX          18  81.8     0   0.0     0   0.0     24  80.0
CMD          15  68.2     0   0.0     0   0.0     21  70.0
DRW          18  81.8     0   0.0     0   0.0     24  80.0
FPR          15  68.2     0   0.0     0   0.0     21  70.0
FPW          15  68.2     0   0.0     0   0.0     21  70.0
FSE          17  77.3     2   9.1     0   0.0     23  76.7
IKA          16  72.7     0   0.0     0   0.0     21  70.0
INO          15  68.2     0   0.0     0   0.0     21  70.0
MCV    *** no report - see problem list              ***
MR2           0   0.0     0   0.0     0   0.0      0   0.0
NVC          12  54.5     0   0.0     0   0.0     15  50.0
PAV          14  63.6     0   0.0     0   0.0     17  56.7
QHL           0   0.0     0   0.0     0   0.0      0   0.0
RAV          17  77.3     0   0.0     0   0.0     25  83.3
SCN          17  77.3     0   0.0     0   0.0     23  76.7
VSP           0   0.0     0   0.0     0   0.0      0   0.0
----------+-----------+-----------------------+------------


Table WNT.S1/017: "ScriptVirus 1/017": Results of
                  "full" Zoo test for script viruses:
=====================================================
                           This  includes        
            Viruses     ---- unreliably ----     Files
Scanner     detected    identified   detected   detected
----------+-----------+-----------------------+------------
Testbed     164 100.0%                           382 100.0%
----------+-----------+-----------------------+------------
ANT          42  25.6     2   1.2    12   7.3     84  22.0
AVA          32  19.5     1   0.6     6   3.7     76  19.9
AVG          85  51.8     4   2.4     9   5.5    169  44.2
AVK         126  76.8    13   7.9     9   5.5    306  80.1
AVP         126  76.8    13   7.9     9   5.5    306  80.1
AVX          89  54.3     0   0.0    17  10.4    196  51.3
CMD         104  63.4     1   0.6    10   6.1    199  52.1
DRW         136  82.9    11   6.7    12   7.3    273  71.5
FPR         104  63.4     1   0.6    10   6.1    199  52.1
FPW         104  63.4     1   0.6    10   6.1    199  52.1
FSE         141  86.0    42  25.6     8   4.9    326  85.3
IKA         104  63.4     4   2.4    20  12.2    208  54.5
INO          78  47.6     4   2.4    15   9.1    137  35.9
MCV    *** no report - see problem list              ***
MR2          93  56.7    13   7.9    14   8.5    166  43.5
NVC          74  45.1     3   1.8     9   5.5    147  38.5
PAV         126  76.8    13   7.9     9   5.5    306  80.1
QHL           1   0.6     0   0.0     0   0.0      1   0.3
RAV           0   0.0     0   0.0     0   0.0      0   0.0
SCN         134  81.7     7   4.3    11   6.7    307  80.4
VSP          93  56.7    13   7.9    14   8.5    166  43.5
----------+-----------+-----------------------+------------


Table WNT.S2/017: "ScriptVirus 2/017": Results of "In-The-Wild" 
                   test for script viruses under Windows NT:
==============================================================
                           This  includes        
            Viruses     ---- unreliably ----     Files
Scanner     detected    identified   detected   detected
----------+-----------+-----------------------+------------
Testbed      10 100.0%                            37 100.0%
----------+-----------+-----------------------+------------
ANT          10 100.0     1  10.0     2  20.0     31  83.8
AVA          10 100.0     0   0.0     2  20.0     29  78.4
AVG          10 100.0     0   0.0     1  10.0     34  91.9
AVK          10 100.0     1  10.0     0   0.0     37 100.0
AVP          10 100.0     1  10.0     0   0.0     37 100.0
AVX          10 100.0     0   0.0     2  20.0     31  83.8
CMD          10 100.0     1  10.0     0   0.0     37 100.0
DRW          10 100.0     1  10.0     0   0.0     37 100.0
FPR          10 100.0     1  10.0     0   0.0     37 100.0
FPW          10 100.0     1  10.0     0   0.0     37 100.0
FSE          10 100.0     1  10.0     0   0.0     37 100.0
IKA          10 100.0     2  20.0     1  10.0     36  97.3
INO           7  70.0     0   0.0     1  10.0      7  18.9
MCV    *** no report - see problem list              ***
MR2          10 100.0     0   0.0     2  20.0     27  73.0
NVC          10 100.0     0   0.0     2  20.0     32  86.5
PAV          10 100.0     1  10.0     0   0.0     37 100.0
QHL           1  10.0     0   0.0     0   0.0      1   2.7
RAV           0   0.0     0   0.0     0   0.0      0   0.0
SCN          10 100.0     0   0.0     1  10.0     36  97.3
VSP          10 100.0     0   0.0     2  20.0     27  73.0
----------+-----------+-----------------------+------------


Table WNT.S5/017: "Script-Malware/017": Results of "full" test
	           for Script-related malware under Windows NT:
===============================================================
              Script        This  includes        
             Malware     ---- unreliably ----     Files
Scanner     detected    identified   detected   detected
----------+-----------+-----------------------+------------
Testbed      37 100.0%                            73 100.0%
----------+-----------+-----------------------+------------
ANT           7  18.9     0   0.0     5  13.5     12  16.4
AVA           1   2.7     0   0.0     1   2.7      1   1.4
AVG           4  10.8     0   0.0     0   0.0      9  12.3
AVK          25  67.6     1   2.7     5  13.5     45  61.6
AVP          28  75.7     2   5.4     6  16.2     51  69.9
AVX          10  27.0     1   2.7     5  13.5     16  21.9
CMD           8  21.6     0   0.0     0   0.0     13  17.8
DRW          19  51.4     0   0.0     6  16.2     31  42.5
FPR           8  21.6     0   0.0     0   0.0     13  17.8
FPW           8  21.6     0   0.0     0   0.0     13  17.8
FSE          32  86.5     6  16.2     7  18.9     57  78.1
IKA          15  40.5     0   0.0     6  16.2     20  27.4
INO           9  24.3     0   0.0     4  10.8     19  26.0
MCV    *** no report - see problem list              ***
MR2           4  10.8     0   0.0     1   2.7      8  11.0
NVC           5  13.5     0   0.0     2   5.4      9  12.3
PAV          25  67.6     1   2.7     5  13.5     45  61.6
QHL           1   2.7     0   0.0     1   2.7      1   1.4
RAV           0   0.0     0   0.0     0   0.0      0   0.0
SCN          27  73.0     2   5.4     4  10.8     53  72.6
VSP           4  10.8     0   0.0     1   2.7      8  11.0
----------+-----------+-----------------------+------------



	=======================================
	Part III: Results of Heureka test "01A"
	=======================================

Table WNT.M1/01A: "MacroVirus 1/01A": Results of "full" zoo test 
          with testbed "Oct-01" for macro viruses under Windows NT:
===================================================================
                           This  includes        
            Viruses     ---- unreliably ----     Files
Scanner     detected    identified   detected   detected
----------+-----------+-----------------------+------------
Testbed     176 100.0%                           678 100.0%
----------+-----------+-----------------------+------------
ANT          77  43.8     1   0.6     1   0.6    248  36.6
AVA          97  55.1     0   0.0     1   0.6    310  45.7
AVG         117  66.5     0   0.0     0   0.0    384  56.6
AVK          69  39.2     0   0.0     0   0.0    192  28.3
AVP          70  39.8     0   0.0     0   0.0    199  29.4
AVX         166  94.3     2   1.1     1   0.6    648  95.6
CMD         128  72.7     0   0.0     0   0.0    500  73.7
DRW         169  96.0     0   0.0     0   0.0    656  96.8
FPR         127  72.2     0   0.0     0   0.0    496  73.2
FPW         127  72.2     0   0.0     0   0.0    496  73.2
FSE         151  85.8    35  19.9     0   0.0    572  84.4
IKA         107  60.8     2   1.1     0   0.0    411  60.6
INO         167  94.9     2   1.1     0   0.0    652  96.2
MCV    *** no report - see problem list              ***
MR2           5   2.8     0   0.0     2   1.1     14   2.1
NVC          50  28.4     0   0.0     0   0.0    189  27.9
PAV          70  39.8     0   0.0     0   0.0    199  29.4
QHL           0   0.0     0   0.0     0   0.0      0   0.0
RAV         134  76.1     2   1.1     2   1.1    530  78.2
SCN         167  94.9     1   0.6     0   0.0    654  96.5
VSP           1   0.6     0   0.0     1   0.6      1   0.1
----------+-----------+-----------------------+------------


Table WNT.M2/01A: "MacroVirus 2/01A": Results of "In-The-Wild" 
                   test for macro viruses under Windows NT:
==============================================================
                           This  includes        
            Viruses     ---- unreliably ----     Files
Scanner     detected    identified   detected   detected
----------+-----------+-----------------------+------------
Testbed       7 100.0%                            14 100.0%
----------+-----------+-----------------------+------------
ANT           5  71.4     0   0.0     0   0.0     10  71.4
AVA           5  71.4     0   0.0     0   0.0     10  71.4
AVG           7 100.0     0   0.0     0   0.0     14 100.0
AVK           7 100.0     0   0.0     0   0.0     14 100.0
AVP           7 100.0     0   0.0     0   0.0     14 100.0
AVX           6  85.7     1  14.3     0   0.0     12  85.7
CMD           7 100.0     0   0.0     0   0.0     14 100.0
DRW           7 100.0     0   0.0     0   0.0     14 100.0
FPR           7 100.0     0   0.0     0   0.0     14 100.0
FPW           7 100.0     0   0.0     0   0.0     14 100.0
FSE           7 100.0     0   0.0     0   0.0     14 100.0
IKA           7 100.0     0   0.0     0   0.0     14 100.0
INO           7 100.0     0   0.0     0   0.0     14 100.0
MCV    *** no report - see problem list              ***
MR2           0   0.0     0   0.0     0   0.0      0   0.0
NVC           6  85.7     0   0.0     0   0.0     12  85.7
PAV           7 100.0     0   0.0     0   0.0     14 100.0
QHL           0   0.0     0   0.0     0   0.0      0   0.0
RAV           7 100.0     1  14.3     0   0.0     14 100.0
SCN           7 100.0     0   0.0     0   0.0     14 100.0
VSP           0   0.0     0   0.0     0   0.0      0   0.0
----------+-----------+-----------------------+------------


Table WNT.M5/01A: "Macro-Malware/01A": Results of "full" test
	           for Macro-related malware under Windows NT:
==============================================================
              Macro         This  includes        
             Malware     ---- unreliably ----     Files
Scanner     detected    identified   detected   detected
----------+-----------+-----------------------+------------
Testbed       7 100.0%                             7 100.0%
----------+-----------+-----------------------+------------
ANT           4  57.1     0   0.0     0   0.0      4  57.1
AVA           3  42.9     0   0.0     0   0.0      3  42.9
AVG           1  14.3     0   0.0     0   0.0      1  14.3
AVK           3  42.9     0   0.0     0   0.0      3  42.9
AVP           3  42.9     0   0.0     0   0.0      3  42.9
AVX           7 100.0     0   0.0     0   0.0      7 100.0
CMD           4  57.1     0   0.0     0   0.0      4  57.1
DRW           7 100.0     0   0.0     0   0.0      7 100.0
FPR           4  57.1     0   0.0     0   0.0      4  57.1
FPW           4  57.1     0   0.0     0   0.0      4  57.1
FSE           4  57.1     0   0.0     0   0.0      4  57.1
IKA           5  71.4     0   0.0     0   0.0      5  71.4
INO           5  71.4     0   0.0     0   0.0      5  71.4
MCV    *** no report - see problem list              ***
MR2           2  28.6     0   0.0     0   0.0      2  28.6
NVC           3  42.9     0   0.0     0   0.0      3  42.9
PAV           3  42.9     0   0.0     0   0.0      3  42.9
QHL           0   0.0     0   0.0     0   0.0      0   0.0
RAV           5  71.4     0   0.0     0   0.0      5  71.4
SCN           3  42.9     0   0.0     0   0.0      3  42.9
VSP           0   0.0     0   0.0     0   0.0      0   0.0
----------+-----------+-----------------------+------------


Table WNT.S1/01A: "ScriptVirus 1/01A": Results of
                  "full" Zoo test for script viruses:
=====================================================
                           This  includes        
            Viruses     ---- unreliably ----     Files
Scanner     detected    identified   detected   detected
----------+-----------+-----------------------+------------
Testbed     102 100.0%                           184 100.0%
----------+-----------+-----------------------+------------
ANT          12  11.8     1   1.0     2   2.0     14   7.6
AVA          11  10.8     0   0.0     2   2.0     13   7.1
AVG          40  39.2     1   1.0     6   5.9     58  31.5
AVK          52  51.0     2   2.0     7   6.9     78  42.4
AVP          49  48.0     2   2.0     6   5.9     79  42.9
AVX          31  30.4     1   1.0     3   2.9     45  24.5
CMD          46  45.1     1   1.0     4   3.9     61  33.2
DRW          72  70.6     4   3.9    13  12.7    106  57.6
FPR          46  45.1     1   1.0     4   3.9     61  33.2
FPW          46  45.1     1   1.0     4   3.9     61  33.2
FSE          71  69.6     7   6.9    10   9.8    112  60.9
IKA          49  48.0     1   1.0     6   5.9     74  40.2
INO          34  33.3     1   1.0     7   6.9     51  27.7
MCV    *** no report - see problem list              ***
MR2          45  44.1     3   2.9     8   7.8     72  39.1
NVC          27  26.5     1   1.0     3   2.9     35  19.0
PAV          47  46.1     2   2.0     5   4.9     71  38.6
QHL           1   1.0     0   0.0     0   0.0      1   0.5
RAV           0   0.0     0   0.0     0   0.0      0   0.0
SCN          58  56.9     2   2.0     8   7.8     85  46.2
VSP          45  44.1     3   2.9     8   7.8     72  39.1
----------+-----------+-----------------------+------------


Table WNT.S2/01A: "ScriptVirus 2/01A": Results of "In-The-Wild" 
                   test for script viruses under Windows NT:
==============================================================
                           This  includes        
            Viruses     ---- unreliably ----     Files
Scanner     detected    identified   detected   detected
----------+-----------+-----------------------+------------
Testbed       6 100.0%                             6 100.0%
----------+-----------+-----------------------+------------
ANT           2  33.3     0   0.0     0   0.0      2  33.3
AVA           2  33.3     0   0.0     0   0.0      2  33.3
AVG           4  66.7     0   0.0     0   0.0      4  66.7
AVK           4  66.7     0   0.0     0   0.0      4  66.7
AVP           4  66.7     0   0.0     0   0.0      4  66.7
AVX           2  33.3     0   0.0     0   0.0      2  33.3
CMD           5  83.3     0   0.0     0   0.0      5  83.3
DRW           4  66.7     0   0.0     0   0.0      4  66.7
FPR           5  83.3     0   0.0     0   0.0      5  83.3
FPW           5  83.3     0   0.0     0   0.0      5  83.3
FSE           5  83.3     0   0.0     0   0.0      5  83.3
IKA           4  66.7     0   0.0     0   0.0      4  66.7
INO           1  16.7     0   0.0     0   0.0      1  16.7
MCV    *** no report - see problem list              ***
MR2           1  16.7     0   0.0     0   0.0      1  16.7
NVC           3  50.0     0   0.0     0   0.0      3  50.0
PAV           4  66.7     0   0.0     0   0.0      4  66.7
QHL           1  16.7     0   0.0     0   0.0      1  16.7
RAV           0   0.0     0   0.0     0   0.0      0   0.0
SCN           4  66.7     0   0.0     0   0.0      4  66.7
VSP           1  16.7     0   0.0     0   0.0      1  16.7
----------+-----------+-----------------------+------------


Table WNT.S5/01A: "Script-Malware/01A": Results of "full" test
	           for Script-related malware under Windows NT:
===============================================================
              Script        This  includes        
             Malware     ---- unreliably ----     Files
Scanner     detected    identified   detected   detected
----------+-----------+-----------------------+------------
Testbed      73 100.0%                           167 100.0%
----------+-----------+-----------------------+------------
ANT           5   6.8     0   0.0     1   1.4      5   3.0
AVA           2   2.7     0   0.0     1   1.4      2   1.2
AVG           4   5.5     0   0.0     0   0.0      5   3.0
AVK          20  27.4     1   1.4     5   6.8     24  14.4
AVP          20  27.4     1   1.4     5   6.8     24  14.4
AVX           8  11.0     0   0.0     1   1.4      8   4.8
CMD           4   5.5     0   0.0     0   0.0      4   2.4
DRW          21  28.8     0   0.0     7   9.6     25  15.0
FPR           4   5.5     0   0.0     0   0.0      4   2.4
FPW           4   5.5     0   0.0     0   0.0      4   2.4
FSE          24  32.9     1   1.4     5   6.8     28  16.8
IKA          11  15.1     0   0.0     0   0.0     12   7.2
INO          14  19.2     0   0.0     2   2.7     19  11.4
MCV    *** no report - see problem list              ***
MR2          10  13.7     0   0.0     1   1.4     11   6.6
NVC           4   5.5     0   0.0     0   0.0      4   2.4
PAV          20  27.4     1   1.4     5   6.8     24  14.4
QHL           1   1.4     0   0.0     0   0.0      1   0.6
RAV           0   0.0     0   0.0     0   0.0      0   0.0
SCN          21  28.8     0   0.0     5   6.8     24  14.4
VSP          10  13.7     0   0.0     1   1.4     11   6.6
----------+-----------+-----------------------+------------





