Amiga Antivirus Test Report 1/95


Table of contents:

  1. Introduction
  2. Copyright, License, and Disclaimer
  3. Detection rates
  4. Comments
  5. Detailed results

Introduction

Welcome to the Amiga Anti-Virus test report.

Programmes in this test:

VT 2.70
Virus Test V 2.70 by Heiner Schneegold
VW 4.8
Virus Workshop V4.8 by Markus Schmall
VZ II 1.15
Virus Z II V 1.15 by Georg Hoermann
VC 6.52
Virus Checker V 6.52 by John Veldthuis
(Brain 1.14, Unpack 39.54, BB 3.1 , BB-Brain 1.07)
SFAP 1.2
Siegfried Antivirus Professional by Siegfried Soft

Why not testing more Amiga-antivirus products ?

The selection of this products is a subjective view of the actual market. The selection of tested products represents common virus-scanners which were updated at least once in 1995.

Why we didn't test BootX-Recog:
BootX is updated within its recog-file which makes detection of modern viruses like Crime etc. impossible.
Why we didn't test Vscan:
Vscan was not able to run without crashes in our testing environment.
Official release date of this test:
The official release date of this test is the start of the CeBIT in Hannover on 8.3.1995.
Tested facilities of the products:
This test mainly shows the detection rate of the products. User-interface, styleguide etc.. are no essential topics of this test.

Copyright, License, and Disclaimer

This publication is 1995 by S. Freitag and the Virus Test Center at the University of Hamburg. Permission is granted to everybody to distribute copies of this information in electronic form, provided that this is done for free, the contents of the information is not changed in any way, and the source of the information is clearly mentioned. Those who want to re-publish the information as a whole or in parts in printed form, MUST contact S. Freitag or the VTC-Hamburg and obtain permission first.

No responsibility is assumed by the publisher for any injury and/or damage to persons or property as a matter of products liability, negligence or otherwise, or from any use or operation of any methods, products, instructions or idea contained in the material herein.


Detection rates

The malicous software was divided into the following categories:

Absolute results by virus type

Malware type         a     b     f     l     t     s     z
                                                       
VT 2.70               6   219    82    31    60    19     1
VW 4.8                6   211    82    29    60    19     1
VZ II 1.15            6   213    70    27    56    19     1
VC 6.52               6   206    64    15    16    17     1
SFAP 1.2              5   197    56    16    20    18     0

Best possible         6   220    84    31    60    19     1

Detection rate (in percents) by virus type

Malware type         a       b      f       l       t       s       z
                                                                 
VT 2.70          100.0%   99.5%   97.6%   100%    100%    100%    100%
VW 4.8           100.0%   95.9%   97.6%   93.5%   100%    100%    100%
VZ II 1.15       100.0%   96.8%   83.3%   87.1%   93.3%   100%    100%
VC 6.52          100.0%   93.6%   76.2%   48.4%   26.7%   89.5%   100%
SFAP 1.2          83.3%   89.5%   66.7%   51.6%   33.3%   94.7%     0%

Total number of detected viruses

                   Detected    by name   by family   by other
                   viruses               or member   condition
                                                    
VT 2.70              418          345          71         2
VW 4.8               408          261         146         1
VZ II 1.15           392          346          46         0
VC 6.52              325          158         168         0
SFAP 1.2             311          172         134         5

Best Possible        421          421          0          0

Total percentage of detected viruses

                   Detected    by name   by family   by other
                   viruses               or member   condition
                                                    
VT 2.70              99.3%       81.9%      16.9%        0.4%
VW 4.8               96.9%       62.0%      34.7%        0.2%
VZ II 1.15           93.1%       82.2%      10.9%        0.0%
VC 6.52              77.2%       37.5%      39.9%        0.0%
SFAP 1.2             73.9%       40.9%      31.8%        1.2%
Best Possible       100.0%      100.0%       0.0%        0.0%

Summary

Here are all results of each tested anti-virus software by malware type and degree of detection, where:

All other samples weren`t detected at all.
VT
     X   O   o   /   -   !    

a:    6   0   0   0   0   0 
b:  200  19   0   0   0   0 
f:   56  26   0   0   0   0 
l:   26   5   0   0   0   0 
t:   51   7   0   2   0   0 
s:    5  14   0   0   0   0 
z:    1   0   0   0   0   0 
VW
     X   O   o   /   -   !    

a:    4   2   0   0   0   0 
b:  108  74  28   1   2   0 
f:   61  19   2   0   0   0 
l:   24   5   0   0   0   0 
t:   59   1   0   0   0   0 
s:    4  15   0   0   0   0 
z:    1   0   0   0   0   0 
VZ
     X   O   o   /   -   !    

a:    6   0   0   0   0   0 
b:  191  22   0   0   2   0 
f:   62   8   0   0   0   0 
l:   24   3   0   0   1   0 
t:   56   0   0   0   0   0 
s:    6  13   0   0   0   0 
z:    1   0   0   0   0   0 
VC
     X   O   o   /   -   !    

a:    4   2   0   0   0   0 
b:  100  88  18   0   0   0 
f:   25  38   1   0   0   0 
l:   11   4   0   0   1   0 
t:   15   1   0   0   0   0 
s:    2  16   0   0   0   0 
z:    1   0   0   0   0   0 
SFAP
     X   O   o   /   -   !    

a:    3   2   0   0   0   0 
b:  102  80  15   0   0   0 
f:   40  15   1   0   1   0 
l:   12   3   1   0   0   0 
t:   13   0   2   5   0   0 
s:    2  14   1   0   0   0 
z:    0   0   0   0   0   0 

Ranking (detection rate, absolute)

  1. Virus Test V 2.70
  2. Virus Workshop 4.8
  3. Virus Z II 1.15
  4. Virus Checker 6.52
  5. Siegfried Antivirus Professional 1.2

Comments

The following are some peculiarities about the tested virus scanners. Those comments might be usefull to have in mind when selecting one of those products.


Other remarks

When some of the scanners remove a virus, they restart the scanning from the beginning - this is very inconvenient for owners of big hard disks. However the repair method used by the other scanners can miss some files due to the change of the directory structure that results after the repair.

VZ reports on the screen that it is performing repair even if it is started without the repair option, regardless that in this case repair doesn't actually occur.

When SFAP is run with the decrunch option, it executes parts of the files in order to decrunch them. Unfortunately in some cases this scan starts the virus in the file as has been verifyed to happen with viruses like Crime1000, Commander-Link etc. This makes the testing of this scanner extremely difficult. For instance after the Commander-Link virus infected the whole test environment, we had to restore the original state from a backup.After that we only tested the scanning capabilities of SFAP only without decrunch, due to a lack of time for re-installation.


Detailed Results

S. Freitag
Virus Test Center
University of Hamburg
Vogt Koelln Str. 30
22527 Hamburg - Germany