===============================================
File 6GWNT.TXT:
-----------------------------------------------
Detailed results of Macro and Script Virus 
    related on-demand scanner tests under W-NT:
===============================================
(Formatted with non-proportional font: Courier)

The following *22* products (versions) participated 
in this part of VTC test "2001-09" (for details of 
related AV products: see A2SCNLS.txt):
 
    =================================================
    ANT     v(def): 6.8.0.2 	    sig: June 05,2001
    AVA     v(def): unknown	    sig: unknown
    AVG     v(def): 6.0.263	    sig: June 22,2001
    AVK     v(def): 10.0.167	    sig: June 21,2001
    AVP     v(def): 3.5.133.0	    sig: June 01,2001
    AVX     v(def): 6.1             sig: June 18,2001
    CMD     v(def): 4.61.5          sig: June 25,2001
    DRW     v(def): 4.25            sig: June 20,2001
    FPR     v(def): 3.09d	    sig: June 25,2001
    FPW     v(def): 3.09d	    sig: June 25,2001
    FSE     v(def): 1.00.1251       sig: June 20,2001
		    scan eng fprot: 3.09.507
		    scan eng avp:   3.55.3210
		    scan eng orion: 1.02.15
    IKA     v(def): 5.01	    sig: June 25,2001
    INO     v(def): 6.0.85  	    sig: June 14,2001
    MR2     v(def): 1.17    	    sig: June 25,2001
    NAV     v(def): 4.1.0.6 	    sig: June 22,2001
    NVC     v(def): 5.00.25 	    sig: June 19,2001
    PAV     v(def): 3.5.133.0	    sig: June 23,2001
    QHL     v(def): 6.02    	    sig: June 28,2001
    RAD     v(def): 8.1.001	    sig: June 25,2001
    RAV     v(def): 8.2.001,
                    scan eng:8.3    sig: June 25,2001
    SCN     v(def): 4144
                    scan eng:4.1.40 sig: June 20,2001
    VSP     v(def): 12.22.1 	    sig: June 25,2001
    =================================================
    Remark: following test problems with RAV under W-NT,
            this product was also tested in DOS box (RAD).
 
The following tables summarize detection and identification quality
concerning MACRO and SCRIPT viruses as well as selected MACRO and
SCRIPT MALWARE, both in full "zoo" virus collection and for viral 
In-The-Wild testbeds, under Windows-NT.

Moreover, results for detection of viruses in objects compressed 
with 6 popular packing methods are also given. Finally, a special test 
was performed concerning "false positive" virus detection of 
selected files which were deliberately chosen from available CD-ROMs
and which were definitively clean of viruses. 

For discussion of results, see 7EVALNT.txt.                As usual, 
results may be influenced by problems experienced during tests; such 
problems are documented in 8PROBLMS.TXT.


Index of tables:
---------------- 
   WNT.M1:  "MacroVirus 1": Results of "full" test 
             for macro viruses 
   WNT.M2:  "MacroVirus 2": Results of "In-The-Wild" test 
             for macro viruses
   WNT.M3V: "Comparison of Detection Rate of Packed Viruses":
             Results of Detection Rate of ITW file viruses 
             packed with PKZIP, LHA, ARJ, RAR, WinRAR and CAB
   WNT.F3F: "Comparison of Detection Rate of Packed Viral Objects":
             Results of Detection Rate of objects infected with ITW 
             file viruses and with PKZIP, LHA, ARJ, RAR, WinRAR, CAB
   WNT.M3a: "PKZIP-Packed Macro Viruses": Results of Detection 
             of ITW macro Viruses Packed with PKZIP
   WNT.M3b: "LHA-Packed Macro Viruses": Results of Detection 
             of ITW macro Viruses Packed with LHA
   WNT.M3c: "ARJ-Packed Macro Viruses": Results of Detection 
             of ITW macro Viruses Packed with ARJ
   WNT.M3d: "RAR-Packed Macro Viruses": Results of Detection 
             of ITW macro Viruses Packed with RAR
   WNT.M3e: "WinRAR-Packed Macro Viruses": Results of Detection 
             of ITW macro Viruses Packed with WinRAR
   WNT.M3f: "CAB-Packed Macro Viruses": Results of Detection 
             of ITW macro Viruses Packed with CAB
   WNT.M4:  "False Positive" detection: Results of "full" zoo test 
             for non-viral (clean) macro objects detected 
             as "false positives"  
   WNT.M5:  "Macro-Malware": Results of "full" zoo test 
             for Macro-related malware 
   WNT.S1:  "ScriptVirus 1": Results of "full" test 
             for script viruses (VBS, JS etc) 
   WNT.S2:  "ScriptVirus 2": Results of "In-The-Wild" test 
             for script viruses
   WNT.S5:  "Script-Malware": Results of "full" zoo test 
             for Script-related malware 


Table WNT.M1: "MacroVirus 1": Results of "full" zoo 
               test for macro viruses under Windows NT:
=======================================================
                           This  includes        
            Viruses     ---- unreliably ----     Files
Scanner     detected    identified   detected   detected
-----------------------------------------------------------
Testbed    6762 100.0%                         21677 100.0%
-----------------------------------------------------------
ANT        6566  97.1   185   2.7    56   0.8  20811  96.0 
AVA        6604  97.7    42   0.6    32   0.5  21202  97.8 
AVG        6651  98.4    55   0.8    13   0.2  21387  98.7 
AVK        6762 100.0   118   1.7     1   0.0  21674  100~ 
AVP        6761 100.0   118   1.7     1   0.0  21673  100~ 
AVX        6703  99.1   134   2.0     8   0.1  21474  99.1 
CMD        6760 100.0    93   1.4     1   0.0  21672  100~
DRW        6725  99.5    81   1.2    14   0.2  21574  99.5 
FPR        6760 100.0    29   0.4     1   0.0  21672  100~ 
FPW        6760 100.0    29   0.4     1   0.0  21672  100~ 
FSE        6762 100.0   120   1.8     0   0.0  21677 100.0 
IKA        6451  95.4   421   6.2   170   2.5  20723  95.6 
INO        6755  99.9   110   1.6     6   0.1  21651  99.9 
MR2          44   0.7     4   0.1     4   0.1    156   0.7 
NAV        6726  99.5   110   1.6    17   0.3  21495  99.2 
NVC        6751  99.8    89   1.3    12   0.2  21622  99.7 
PAV        6762 100.0   118   1.7     1   0.0  21674  100~ 
QHL           0   0.0     0   0.0     0   0.0      0   0.0 
RAD        6726  99.5   346   5.1    16   0.2  21546  99.4 
RAV        6726  99.5   348   5.1    15   0.2  21545  99.4 
SCN        6762 100.0    66   1.0     0   0.0  21677 100.0 
VSP           1   0.0     0   0.0     1   0.0      1   0.0 
-----------------------------------------------------------


Table WNT.M2: "MacroVirus 2": Results of "In-The-Wild" 
               test for macro viruses under Windows NT:
=======================================================
                           This  includes        
            Viruses     ---- unreliably ----     Files
Scanner     detected    identified   detected   detected
-----------------------------------------------------------
Testbed     143 100.0%                          1308 100.0%
-----------------------------------------------------------
ANT         142  99.3     7   4.9     2   1.4   1294  98.9 
AVA         143 100.0     6   4.2     3   2.1   1305  99.8 
AVG         143 100.0    11   7.7     0   0.0   1308 100.0 
AVK         143 100.0     9   6.3     0   0.0   1308 100.0 
AVP         143 100.0     9   6.3     0   0.0   1308 100.0 
AVX         143 100.0    15  10.5     0   0.0   1308 100.0 
CMD         143 100.0     2   1.4     0   0.0   1308 100.0 
DRW         143 100.0    10   7.0     0   0.0   1308 100.0 
FPR         143 100.0     2   1.4     0   0.0   1308 100.0 
FPW         143 100.0     2   1.4     0   0.0   1308 100.0 
FSE         143 100.0     9   6.3     0   0.0   1308 100.0 
IKA         142  99.3    25  17.5     2   1.4   1299  99.3 
INO         143 100.0     9   6.3     0   0.0   1308 100.0 
MR2          13   9.1     1   0.7     5   3.5    378  28.9 
NAV         143 100.0     8   5.6     0   0.0   1308 100.0 
NVC         143 100.0    11   7.7     2   1.4   1305  99.8 
PAV         143 100.0     9   6.3     0   0.0   1308 100.0 
QHL           0   0.0     0   0.0     0   0.0      0   0.0 
RAD         143 100.0    26  18.2     5   3.5   1302  99.5 
RAV         143 100.0    26  18.2     5   3.5   1302  99.5 
SCN         143 100.0     7   4.9     0   0.0   1308 100.0 
VSP           0   0.0     0   0.0     0   0.0      0   0.0 
-----------------------------------------------------------


Table WNT.M3V: "Comparison of Detection Rate of Packed Viruses":
               Results of Detection Rate of ITW macro viruses 
               packed with PKZIP, LHA, ARJ, RAR, WinRAR and CAB
================================================================
                           This  includes        
                   Viruses detected per packer
------------------------------------------------------------------------------
         ZIP    %    LHA    %    ARJ    %    RAR    %   WRAR    %    CAB    % 
------------------------------------------------------------------------------
Testbed  143 100.0   143 100.0   143 100.0   143 100.0   143 100.0   143 100.0 
------------------------------------------------------------------------------
ANT      142  99.3     0   0.0   142  99.3     0   0.0     0   0.0     0   0.0 
AVG      143 100.0     0   0.0   143 100.0   143 100.0   143 100.0     0   0.0 
AVK      143 100.0   143 100.0   143 100.0   143 100.0   143 100.0   143 100.0 
AVP      143 100.0   143 100.0   143 100.0   143 100.0   143 100.0   143 100.0 
AVX      143 100.0   143 100.0   143 100.0   143 100.0   143 100.0   143 100.0 
CMD      143 100.0   143 100.0   143 100.0   143 100.0   143 100.0   143 100.0 
DRW      143 100.0     0   0.0   143 100.0   143 100.0   143 100.0     0   0.0 
FPR      143 100.0   143 100.0   143 100.0   143 100.0   143 100.0   143 100.0 
FPW      143 100.0   143 100.0   143 100.0   143 100.0   143 100.0   143 100.0 
FSE      143 100.0   143 100.0   143 100.0   142  99.3   142  99.3   142  99.3 
IKA      142  99.3     0   0.0   142  99.3     0   0.0     0   0.0    34  23.8 
INO      143 100.0   143 100.0   143 100.0   143 100.0   139  97.2   143 100.0 
MR2        0   0.0     0   0.0     0   0.0     0   0.0     0   0.0     0   0.0 
NAV      143 100.0   143 100.0   143 100.0     0   0.0     0   0.0     0   0.0 
NVC      143 100.0     0   0.0   143 100.0     0   0.0     0   0.0     0   0.0 
PAV      143 100.0   143 100.0   143 100.0   143 100.0   143 100.0   143 100.0 
QHL      143 100.0     0   0.0   143 100.0     0   0.0     0   0.0     0   0.0
RAD      143 100.0     0   0.0   143 100.0   143 100.0   143 100.0   143 100.0  
RAV      143 100.0     0   0.0   143 100.0   143 100.0   143 100.0   143 100.0 
SCN      143 100.0   143 100.0   143 100.0   143 100.0   143 100.0   143 100.0 
VSP        0   0.0     0   0.0     0   0.0     0   0.0     0   0.0     0   0.0 
------------------------------------------------------------------------------


Table WNT.M3F: "Comparison of Detection Rate of Packed Viral Objects":
                Results of Detection Rate of objects infected with ITW 
                file viruses and with PKZIP, LHA, ARJ, RAR, WinRAR, CAB
=======================================================================
                           This  includes        
                  Viral objects detected per packer
-------------------------------------------------------------------------------
          ZIP    %    LHA    %    ARJ    %    RAR    %   WRAR    %    CAB    %
------------------------------------------------------------------------------- 
Testbed  1308 100.0  1308 100.0  1308 100.0  1308 100.0  1308 100.0  1308 100.0 
-------------------------------------------------------------------------------
ANT       142  10.9     0   0.0   142  10.9     0   0.0     0   0.0     0   0.0 
AVG      1308 100.0     0   0.0  1308 100.0  1308 100.0  1308 100.0     0   0.0 
AVK      1308 100.0  1308 100.0  1308 100.0  1308 100.0  1308 100.0  1308 100.0 
AVP      1308 100.0  1308 100.0  1308 100.0  1308 100.0  1308 100.0  1308 100.0 
AVX      1308 100.0  1308 100.0  1308 100.0  1308 100.0  1308 100.0  1308 100.0 
CMD      1308 100.0  1308 100.0  1308 100.0  1308 100.0  1308 100.0  1308 100.0 
DRW      1308 100.0     0   0.0  1308 100.0  1308 100.0  1308 100.0     0   0.0 
FPR      1308 100.0  1308 100.0  1308 100.0  1308 100.0  1308 100.0  1308 100.0 
FPW      1308 100.0  1308 100.0  1308 100.0  1308 100.0  1308 100.0  1308 100.0 
FSE      1308 100.0  1308 100.0  1308 100.0  1303  99.6  1303  99.6  1300  99.4 
IKA      1299  99.3     0   0.0  1300  99.4     0   0.0     0   0.0    34   2.6 
INO      1308 100.0  1102  84.3  1308 100.0  1308 100.0   193  14.8  1308 100.0 
MR2         0   0.0     0   0.0     0   0.0     0   0.0     0   0.0     0   0.0 
NAV      1308 100.0  1307  99.9  1308 100.0     0   0.0     0   0.0     0   0.0 
NVC      1305  99.8     0   0.0  1305  99.8     0   0.0     0   0.0     0   0.0 
PAV      1308 100.0  1308 100.0  1308 100.0  1308 100.0  1308 100.0  1308 100.0 
QHL      1267  96.9     0   0.0  1270  97.1     0   0.0     0   0.0     0   0.0 
RAD      1302  99.5     0   0.0  1302  99.5  1298  99.2  1208  92.4  1302  99.5 
RAV      1302  99.5     0   0.0  1302  99.5  1302  99.5  1302  99.5  1302  99.5 
SCN      1308 100.0  1308 100.0  1308 100.0  1308 100.0  1308 100.0  1308 100.0 
VSP         0   0.0     0   0.0     0   0.0     0   0.0     0   0.0     0   0.0 
-------------------------------------------------------------------------------



Table WNT.M3a: "PKZIP-Packed Macro Viruses": Results of Detection of
                ITW Macro Viruses Packed with PKZIP under Windows NT:
=====================================================================
                            This  includes        
            Viruses     ---- unreliably ----     Files
Scanner     detected    identified   detected   detected
-----------------------------------------------------------
Testbed     143 100.0%                          1308 100.0%
-----------------------------------------------------------
ANT         142  99.3     0   0.0   142  99.3    142  10.9 
AVG         143 100.0    11   7.7     0   0.0   1308 100.0 
AVK         143 100.0     0   0.0     0   0.0   1308 100.0 
AVP         143 100.0     9   6.3     0   0.0   1308 100.0 
AVX         143 100.0    15  10.5     0   0.0   1308 100.0 
CMD         143 100.0     2   1.4     0   0.0   1308 100.0 
DRW         143 100.0    10   7.0     0   0.0   1308 100.0 
FPR         143 100.0     2   1.4     0   0.0   1308 100.0 
FPW         143 100.0     2   1.4     0   0.0   1308 100.0 
FSE         143 100.0     9   6.3     0   0.0   1308 100.7 
IKA         142  99.3    25  17.5     2   1.4   1299  99.3 
INO         143 100.0     9   6.3     0   0.0   1308 100.0 
MR2           0   0.0     0   0.0     0   0.0      0   0.0 
NAV         143 100.0     8   5.6     0   0.0   1308 100.0 
NVC         143 100.0    11   7.7     2   1.4   1305  99.8 
PAV         143 100.0     9   6.3     0   0.0   1308 100.0 
QHL         143 100.0    18  12.6     6   4.2   1267  96.9 
RAD         143 100.0    26  18.2     5   3.5   1302  99.5 
RAV         143 100.0    26  18.2     5   3.5   1302  99.5 
SCN         143 100.0     0   0.0     0   0.0   1308 100.0 
VSP           0   0.0     0   0.0     0   0.0      0   0.0 
-----------------------------------------------------------


Table WNT.M3b: "LHA-Packed Macro Viruses": Results of Detection of
               ITW Macro Viruses Packed with LHA under Windows NT:
==================================================================
                           This  includes        
            Viruses     ---- unreliably ----     Files
Scanner     detected    identified   detected   detected
-----------------------------------------------------------
Testbed     143 100.0%                          1308 100.0%
-----------------------------------------------------------
ANT           0   0.0     0   0.0     0   0.0      0   0.0 
AVG           0   0.0     0   0.0     0   0.0      0   0.0 
AVK         143 100.0     0   0.0     0   0.0   1308 100.0 
AVP         143 100.0     9   6.3     0   0.0   1308 100.0 
AVX         143 100.0    15  10.5     0   0.0   1308 100.0 
CMD         143 100.0     2   1.4     0   0.0   1308 100.0 
DRW           0   0.0     0   0.0     0   0.0      0   0.0 
FPR         143 100.0     2   1.4     0   0.0   1308 100.0 
FPW         143 100.0     2   1.4     0   0.0   1308 100.0 
FSE         143 100.0    10   7.0     0   0.0   1308 100.0 
IKA           0   0.0     0   0.0     0   0.0      0   0.0 
INO         143 100.0     9   6.3     4   2.8   1102  84.3 
MR2           0   0.0     0   0.0     0   0.0      0   0.0 
NAV         143 100.0     8   5.6     1   0.7   1307  99.9 
NVC           0   0.0     0   0.0     0   0.0      0   0.0 
PAV         143 100.0     9   6.3     0   0.0   1308 100.0 
QHL           0   0.0     0   0.0     0   0.0      0   0.0 
RAD           0   0.0     0   0.0     0   0.0      0   0.0 
RAV           0   0.0     0   0.0     0   0.0      0   0.0 
SCN         143 100.0     7   4.9     0   0.0   1308 100.0 
VSP           0   0.0     0   0.0     0   0.0      0   0.0 
-----------------------------------------------------------


Table WNT.M3c: "ARJ-Packed Macro Viruses": Results of Detection of
               ITW Macro Viruses Packed with ARJ under Windows NT:
==================================================================
                            This  includes        
            Viruses     ---- unreliably ----     Files
Scanner     detected    identified   detected   detected
-----------------------------------------------------------
Testbed     143 100.0%                          1308 100.0%
-----------------------------------------------------------
ANT         142  99.3     0   0.0   142  99.3    142  10.9 
AVG         143 100.0    11   7.7     0   0.0   1308 100.0 
AVK         143 100.0     0   0.0     0   0.0   1308 100.0 
AVP         143 100.0     9   6.3     0   0.0   1308 100.0 
AVX         143 100.0    15  10.5     0   0.0   1308 100.0 
CMD         143 100.0     2   1.4     0   0.0   1308 100.0 
DRW         143 100.0    10   7.0     0   0.0   1308 100.0  
FPR         143 100.0     2   1.4     0   0.0   1308 100.0 
FPW         143 100.0     2   1.4     0   0.0   1308 100.0 
FSE         143 100.0    10   7.0     0   0.0   1308 100.0 
IKA         142  99.3    25  17.5     2   1.4   1300  99.4 
INO         143 100.0     9   6.3     0   0.0   1308 100.0 
MR2           0   0.0     0   0.0     0   0.0      0   0.0 
NAV         143 100.0     8   5.6     0   0.0   1308 100.0 
NVC         143 100.0    11   7.7     2   1.4   1305  99.8 
PAV         143 100.0     9   6.3     0   0.0   1308 100.0 
QHL         143 100.0    19  13.3     4   2.8   1270  97.1
RAD         143 100.0    26  18.2     5   3.5   1302  99.5 
RAV         143 100.0    26  18.2     5   3.5   1302  99.5 
SCN         143 100.0     7   4.9     0   0.0   1308 100.0 
VSP           0   0.0     0   0.0     0   0.0      0   0.0 
-----------------------------------------------------------


Table WNT.M3d: "RAR-Packed Macro Viruses": Results of Detection of
               ITW Macro Viruses Packed with RAR under Windows NT:
==================================================================
                           This  includes        
            Viruses     ---- unreliably ----     Files
Scanner     detected    identified   detected   detected
-----------------------------------------------------------
Testbed     143 100.0%                          1308 100.0%
-----------------------------------------------------------
ANT           0   0.0     0   0.0     0   0.0      0   0.0 
AVG         143 100.0    11   7.7     0   0.0   1308 100.0 
AVK         143 100.0     0   0.0     0   0.0   1308 100.0 
AVP         143 100.0     9   6.3     0   0.0   1308 100.0 
AVX         143 100.0    15  10.5     0   0.0   1308 100.0 
CMD         143 100.0     2   1.4     0   0.0   1308 100.0 
DRW         143 100.0    10   7.0     0   0.0   1308 100.0 
FPR         143 100.0     2   1.4     0   0.0   1308 100.0 
FPW         143 100.0     2   1.4     0   0.0   1308 100.0 
FSE         142  99.3     9   6.3     0   0.0   1303  99.6 
IKA           0   0.0     0   0.0     0   0.0      0   0.0 
INO         143 100.0     9   6.3     0   0.0   1308 100.0 
MR2           0   0.0     0   0.0     0   0.0      0   0.0 
NAV           0   0.0     0   0.0     0   0.0      0   0.0 
NVC           0   0.0     0   0.0     0   0.0      0   0.0 
PAV         143 100.0     9   6.3     0   0.0   1308 100.0 
QHL           0   0.0     0   0.0     0   0.0      0   0.0 
RAD         143 100.0    25  17.5     9   6.3   1298  99.2 
RAV         143 100.0    26  18.2     5   3.5   1302  99.5 
SCN         143 100.0     7   4.9     0   0.0   1308 100.0 
VSP           0   0.0     0   0.0     0   0.0      0   0.0 
-----------------------------------------------------------


Table WNT.M3e: "WinRAR-Packed Macro Viruses": Results of Detection
                of ITW Macro Viruses Packed with WinRAR:
==================================================================
                           This  includes        
            Viruses     ---- unreliably ----     Files
Scanner     detected    identified   detected   detected
-----------------------------------------------------------
Testbed     143 100.0%                          1308 100.0%
-----------------------------------------------------------
ANT           0   0.0     0   0.0     0   0.0      0   0.0 
AVG         143 100.0    11   7.7     0   0.0   1308 100.0 
AVK         143 100.0     0   0.0     0   0.0   1308 100.0 
AVP         143 100.0     9   6.3     0   0.0   1308 100.0 
AVX         143 100.0    15  10.5     0   0.0   1308 100.0 
CMD         143 100.0     2   1.4     0   0.0   1308 100.0 
DRW         143 100.0    10   7.0     0   0.0   1308 100.0 
FPR         143 100.0     2   1.4     0   0.0   1308 100.0 
FPW         143 100.0     2   1.4     0   0.0   1308 100.0 
FSE         142  99.3     9   6.3     0   0.0   1303  99.6 
IKA           0   0.0     0   0.0     0   0.0      0   0.0 
INO         139  97.2     0   0.0   137  95.8    193  14.8 
MR2           0   0.0     0   0.0     0   0.0      0   0.0 
NAV           0   0.0     0   0.0     0   0.0      0   0.0 
NVC           0   0.0     0   0.0     0   0.0      0   0.0 
PAV         143 100.0     9   6.3     0   0.0   1308 100.0 
QHL           0   0.0     0   0.0     0   0.0      0   0.0
RAD         143 100.0    25  17.5     7   4.9   1208  92.4  
RAV         143 100.0    26  18.2     5   3.5   1302  99.5 
SCN         143 100.0     7   4.9     0   0.0   1308 100.0 
VSP           0   0.0     0   0.0     0   0.0      0   0.0 
-----------------------------------------------------------


Table WNT.M3f: "CAB-Packed Macro Viruses": Results of Detection
                of ITW Macro Viruses Packed with CAB:
===============================================================
                           This  includes        
            Viruses     ---- unreliably ----     Files
Scanner     detected    identified   detected   detected
-----------------------------------------------------------
Testbed     143 100.0%                          1308 100.0%
-----------------------------------------------------------
ANT           0   0.0     0   0.0     0   0.0      0   0.0 
AVG           0   0.0     0   0.0     0   0.0      0   0.0 
AVK         143 100.0     0   0.0     0   0.0   1308 100.0 
AVP         143 100.0     9   6.3     0   0.0   1308 100.0 
AVX         143 100.0    15  10.5     0   0.0   1308 100.0 
CMD         143 100.0     3   2.1     0   0.0   1308 100.0 
DRW           0   0.0     0   0.0     0   0.0      0   0.0 
FPR         143 100.0     2   1.4     0   0.0   1308 100.0 
FPW         143 100.0     2   1.4     0   0.0   1308 100.0 
FSE         142  99.3     9   6.3     1   0.7   1300  99.4 
IKA          34  23.8     0   0.0    34  23.8     34   2.6 
INO         143 100.0     9   6.3     0   0.0   1308 100.0 
MR2           0   0.0     0   0.0     0   0.0      0   0.0 
NAV           0   0.0     0   0.0     0   0.0      0   0.0 
NVC           0   0.0     0   0.0     0   0.0      0   0.0 
PAV         143 100.0     9   6.3     0   0.0   1308 100.0 
QHL           0   0.0     0   0.0     0   0.0      0   0.0 
RAD         143 100.0    26  18.2     5   3.5   1302  99.5 
RAV         143 100.0    26  18.2     5   3.5   1302  99.5 
SCN         143 100.0     7   4.9     0   0.0   1308 100.0 
VSP           0   0.0     0   0.0     0   0.0      0   0.0 
-----------------------------------------------------------


Table WNT.M4: "False Positive" macro virus detection: Results of 
              "full" zoo test for non-viral (clean) macro objects 
               detected as "false positives" under Windows NT:
=================================================================
              False         This  includes        
              Virus      ---- unreliably ----     Files
Scanner       Alarm     identified   detected   detected
-----------------------------------------------------------
Maximum      26 100.0%                           329 100.0%
-----------------------------------------------------------
ANT           0   0.0     0   0.0     0   0.0      0   0.0 
AVA           0   0.0     0   0.0     0   0.0      0   0.0 
AVG           0   0.0     0   0.0     0   0.0      0   0.0 
AVK           0   0.0     0   0.0     0   0.0      0   0.0 
AVP           2   7.7     0   0.0     2   7.7      4   1.2 
AVX          15  57.7     0   0.0    15  57.7     18   5.5 
CMD           1   3.8     0   0.0     1   3.8      2   0.6 
DRW          10  38.5     0   0.0    10  38.5     29   8.8 
FPR           1   3.8     0   0.0     1   3.8      2   0.6 
FPW           1   3.8     0   0.0     1   3.8      2   0.6 
FSE           1   3.8     0   0.0     1   3.8      2   0.6 
IKA           8  30.8     0   0.0     8  30.8     12   3.6 
INO           0   0.0     0   0.0     0   0.0      0   0.0 
MR2           0   0.0     0   0.0     0   0.0      0   0.0 
NAV           5  19.2     0   0.0     5  19.2      5   1.5 
NVC           3  11.5     0   0.0     3  11.5      5   1.5 
PAV           2   7.7     0   0.0     2   7.7      4   1.2 
QHL           0   0.0     0   0.0     0   0.0      0   0.0 
RAD           0   0.0     0   0.0     0   0.0      0   0.0 
RAV           1   3.8     0   0.0     1   3.8      1   0.3 
SCN           0   0.0     0   0.0     0   0.0      0   0.0 
VSP           0   0.0     0   0.0     0   0.0      0   0.0 
-----------------------------------------------------------
Remark: within 26 non-viral directories and totally 329 non-
        viral objects, at least one sample in N directories
        was falsely detected (N = number in column 1) 


Table WNT.M5: "Macro-Malware": Results of "full" test for
               Macro-related malware under Windows NT:
=========================================================
              Macro         This  includes        
             Malware     ---- unreliably ----     Files
Scanner     detected    identified   detected   detected
-----------------------------------------------------------
Testbed     426 100.0%                           683 100.0%
-----------------------------------------------------------
ANT         378  88.7     9   2.1     9   2.1    606  88.7 
AVA         377  88.5     3   0.7     6   1.4    584  85.5 
AVG         352  82.6     1   0.2     5   1.2    584  85.5 
AVK         425  99.8     0   0.0     0   0.0    682  99.9 
AVP         425  99.8     0   0.0     0   0.0    682  99.9 
AVX         392  92.0    10   2.3     4   0.9    630  92.2 
CMD         424  99.5     6   1.4     0   0.0    676  99.0 
DRW         387  90.8     1   0.2     7   1.6    622  91.1 
FPR         424  99.5     2   0.5     0   0.0    676  99.0 
FPW         424  99.5     2   0.5     0   0.0    676  99.0 
FSE         425  99.8     0   0.0     0   0.0    682  99.9 
IKA         383  89.9    14   3.3    10   2.3    612  89.6 
INO         398  93.4     6   1.4     1   0.2    653  95.6 
MR2         135  31.7     5   1.2     2   0.5    208  30.5 
NAV         368  86.4     4   0.9     7   1.6    596  87.3 
NVC         421  98.8    11   2.6     2   0.5    660  96.6 
PAV         426 100.0     0   0.0     0   0.0    683 100.0 
QHL           0   0.0     0   0.0     0   0.0      0   0.0 
RAD         416  97.7    28   6.6     4   0.9    663  97.1 
RAV         415  97.4    28   6.6     4   0.9    662  96.9 
SCN         426 100.0     0   0.0     0   0.0    683 100.0 
VSP           1   0.2     0   0.0     0   0.0      1   0.1 
-----------------------------------------------------------


Table WNT.S1: "ScriptVirus 1": Results of "full"
               Zoo test for script viruses:
=================================================
                           This  includes        
            Viruses     ---- unreliably ----     Files
Scanner     detected    identified   detected   detected
-----------------------------------------------------------
Testbed     588 100.0%                          1079 100.0%
-----------------------------------------------------------
ANT         481  81.8    41   7.0    34   5.8    835  77.4 
AVA         174  29.6     8   1.4    25   4.3    380  35.2 
AVG         370  62.9    22   3.7    32   5.4    727  67.4 
AVK         588 100.0    58   9.9     0   0.0   1079 100.0 
AVP         588 100.0    48   8.2     0   0.0   1079 100.0 
AVX         412  70.1    19   3.2    42   7.1    730  67.7 
CMD         552  93.9    21   3.6    16   2.7    987  91.5 
DRW         561  95.4    32   5.4    12   2.0    992  91.9 
FPR         558  94.9    23   3.9    17   2.9    994  92.1 
FPW         556  94.6    22   3.7    17   2.9    989  91.7 
FSE         588 100.0    50   8.5     1   0.2   1076  99.7 
IKA         457  77.7    46   7.8    45   7.7    812  75.3 
INO         559  95.1    58   9.9    15   2.6   1022  94.7 
MR2         490  83.3    54   9.2    44   7.5    829  76.8 
NAV         554  94.2    37   6.3    25   4.3    984  91.2 
NVC         537  91.3    61  10.4    13   2.2    960  89.0 
PAV         588 100.0    48   8.2     0   0.0   1079 100.0 
QHL           1   0.2     0   0.0     1   0.2      1   0.1
RAD         485  82.5    51   8.7    33   5.6    800  74.1  
RAV           1   0.2     0   0.0     1   0.2      1   0.1 
SCN         587  99.8    39   6.6     1   0.2   1077  99.8 
VSP         494  84.0    54   9.2    44   7.5    835  77.4 
-----------------------------------------------------------


Table WNT.S2: "ScriptVirus 2": Results of "In-The-Wild" 
               test for script viruses:
=======================================================
                           This  includes        
            Viruses     ---- unreliably ----     Files
Scanner     detected    identified   detected   detected
-----------------------------------------------------------
Testbed      19 100.0%                           110 100.0%
-----------------------------------------------------------
ANT          19 100.0     7  36.8     2  10.5    109  99.1 
AVA          18  94.7     4  21.1     5  26.3     99  90.0 
AVG          19 100.0     2  10.5     5  26.3    107  97.3 
AVK          19 100.0     3  15.8     0   0.0    110 100.0 
AVP          19 100.0     2  10.5     0   0.0    110 100.0 
AVX          19 100.0     2  10.5     2  10.5    110 100.0
CMD          19 100.0     3  15.8     1   5.3    109  99.1 
DRW          19 100.0     2  10.5     0   0.0    110 100.0 
FPR          19 100.0     3  15.8     1   5.3    109  99.1 
FPW          19 100.0     3  15.8     1   5.3    109  99.1 
FSE          19 100.0     3  15.8     0   0.0    110 100.0 
IKA          18  94.7     6  31.6     4  21.1    101  91.8 
INO          19 100.0     4  21.1     2  10.5    110 100.0 
MR2          17  89.5     2  10.5     8  42.1     86  78.2 
NAV          19 100.0     7  36.8     0   0.0    110 100.0 
NVC          19 100.0    12  63.2     0   0.0    110 100.0 
PAV          19 100.0     2  10.5     0   0.0    110 100.0 
QHL           1   5.3     0   0.0     1   5.3      1   0.9 
RAD          18  94.7     2  10.5     5  26.3    109  99.1 
RAV           0   0.0     0   0.0     0   0.0      0   0.0 
SCN          19 100.0     0   0.0     0   0.0    110 100.0 
VSP          17  89.5     3  15.8     7  36.8     87  79.1 
-----------------------------------------------------------


Table WNT.S5: "Script-Malware": Results of "full" test for
               Script-related malware under Windows NT:
=========================================================
              Macro         This  includes        
             Malware     ---- unreliably ----     Files
Scanner     detected    identified   detected   detected
----------------------------------------------------------
Testbed      22 100.0                             30 100.0
----------------------------------------------------------
ANT           0   0.0     0   0.0     0   0.0      0   0.0 
AVA		**    No report  -  See problem-list   **
AVG           5  22.7     0   0.0     1   4.5      5  16.7 
AVK          22 100.0     1   4.5     0   0.0     30 100.0 
AVP          22 100.0     1   4.5     0   0.0     30 100.0 
AVX           2   9.1     1   4.5     0   0.0      3  10.0 
CMD          14  63.6     0   0.0     0   0.0     16  53.3 
DRW           8  36.4     0   0.0     0   0.0      9  30.0 
FPR          14  63.6     0   0.0     0   0.0     16  53.3 
FPW          14  63.6     0   0.0     0   0.0     16  53.3 
FSE          22 100.0     1   4.5     0   0.0     30 100.0 
IKA           8  36.4     0   0.0     0   0.0      8  26.7 
INO          15  68.2     1   4.5     0   0.0     19  63.3 
MR2           5  22.7     1   4.5     0   0.0      6  20.0 
NAV           8  36.4     0   0.0     0   0.0     11  36.7 
NVC           2   9.1     0   0.0     0   0.0      2   6.7 
PAV          22 100.0     1   4.5     0   0.0     30 100.0 
QHL           1   4.5     0   0.0     0   0.0      1   3.3
RAD          18  81.8     0   0.0     0   0.0     25  83.3  
RAV           0   0.0     0   0.0     0   0.0      0   0.0 
SCN          22 100.0     2   9.1     0   0.0     30 100.0 
VSP           5  22.7     1   4.5     0   0.0      6  20.0 
----------------------------------------------------------
