======================================== aVTC Test "2004-07" (File 6NCMPOS.TXT): ---------------------------------------- Comparison of Detection Quality of Scanning Engines for ALL systems: (Win-2000 / Win-XP / Linux) ======================================== Formatted with non-proportional font (Courier) The following tables summarize the respective detection rates of those 11 products for which products for both 32-bit platforms (Windows-2000 and Windows-XP) as well as for Linux were submitted. Working Hypothesis: ------------------- First: scanning engines for 32 bit platforms SHOULD a priori produce equal results (see 6MCMP32.txt). Second: As engines on LINUX will be differently implemented from W32 engines, detection results will likely differ. Third: Equal results of engines under W32 AND LINUX would be an indication of good malware base maintenance AND good implementation. Products with identical detection quality for ALL 3 systems instantiations are marked with "*". If the difference is less then 1%, results would be regarded as "almost identical" (~). Comparative tables: ------------------- Table Comp.F1v: Detection Quality of Zoo File viruses Table Comp.F1f: Detection Quality of Zoo File infected files Table Comp.F2v: Detection Quality of ITW File viruses Table Comp.F2f: Detection Quality of ITW File infected files Table Comp.F3m: Detection Quality of Zoo File Malware Table Comp.M1v: Detection Quality of Zoo Macro viruses Table Comp.M1f: Detection Quality of Zoo Macro infected files Table Comp.M2v: Detection Quality of ITW Macro viruses Table Comp.M2f: Detection Quality of ITW Macro infected files Table Comp.M3m: Detection Quality of Zoo Macro Malware Table Comp.S1v: Detection Quality of Zoo Script viruses Table Comp.S1f: Detection Quality of Zoo Script infected files Table Comp.S2v: Detection Quality of ITW Script viruses Table Comp.S2f: Detection Quality of ITW Script infected files Table Comp.S3m: Detection Quality of Zoo Script Malware Table Comp.F1v: Detection Quality of Zoo File Viruses: ====================================================== ======== Detection Quality ============== ALL Product LINUX Windows 2000 Windows XP systems Testbed 23209 100.0% 23209 100.0% 23209 100.0% match --------+---------------+--------------+--------------+--------- ANT 21093 90.9% 21090 90.9% 21090 90.9% ~ AVA ----- ------ 22214 95.7% 22214 95.7% * AVG ----- ------ 18527 79.8% 18527 79.8% * AVK ----- ------ 23208 100.~% 23208 100.~% * AVP 23206 100.~% 23201 100.~% 23206 100.~% ~ BDF ----- ------ 19590 84.4% 19590 84.4% * CMD 22999 99.1% 22891 98.6% 22891 98.6% ~ DRW 18326 79.0% 18325 79.0% 18056 77.8% FIR ----- ------ 17503 75.4% 17503 75.4% * FPR 23119 99.6% 23096 99.5% 23096 99.5% ~ FSE 23207 100.~% 23208 100.~% 23208 100.~% ~ GLA ----- ------ 9437 40.7% 9437 40.7% * IKA ----- ------ 21071 90.8% 21013 90.5% * INO 22135 95.4% 22235 95.8% 22235 95.8% ~ NAV ----- ------ 23058 99.3% 23058 99.3% * NVC ----- ------ 22041 95.0% 22041 95.0% * PAV ----- ------ 23204 100.~% 23204 100.~% * PER ----- ------ 8330 35.9% 8330 35.9% * PRO ----- ------ 15600 67.2% 15600 67.2% * QHL ----- ------ 13700 59.0% 12987 56.0% * RAV ----- ------ 23080 99.4% 23080 99.4% * SCN 23202 100.~% 23198 100.~% 23198 100.~% ~ SWP 22800 98.2% 22782 98.2% 22782 98.2% ~ VBR ----- ------ 15887 68.5% 15887 68.5% * VSP ----- ------ 3391 14.6% 3391 14.6% * --------+---------------+--------------+--------------+--------- Table Comp.M1f: Detection Quality of Zoo File infected files: ============================================================= ======== Detection Quality ============== ALL Product LINUX Windows 2000 Windows XP systems Testbed 166327 100.0% 166327 100.0% 166327 100.0% match --------+---------------+--------------+--------------+--------- ANT 152875 91.9% 152870 91.9% 152870 91.9% AVA ----- ------ 161271 97.0% 161271 97.0% * AVG ----- ------ 140021 84.2% 140021 84.2% * AVK ----- ------ 166321 100.~% 166321 100.~% * AVP 166313 100.~% 166309 100.~% 166313 100.~% BDF ----- ------ 144442 86.8% 144442 86.8% * CMD 165232 99.3% 164861 99.1% 164861 99.1% DRW 135528 81.5% 135529 81.5% 133295 80.1% FIR ----- ------ 91938 55.3% 91938 55.3% * FPR 166136 99.9% 166069 99.8% 166069 99.8% FSE 166319 100.~% 166321 100.~% 166321 100.~% GLA ----- ------ 59417 35.7% 59417 35.7% * IKA ----- ------ 151335 91.0% 151096 90.8% INO 162288 97.6% 162888 97.9% 162888 97.9% NAV ----- ------ 162773 97.9% 162773 97.9% * NVC ----- ------ 160606 96.6% 160605 96.6% PAV ----- ------ 166294 100.~% 166294 100.~% * PER ----- ------ 58628 35.2% 58628 35.2% * PRO ----- ------ 111236 66.9% 111236 66.9% * QHL ----- ------ 58930 35.4% 53559 32.2% RAV ----- ------ 165538 99.5% 165538 99.5% * SCN 166315 100.~% 166310 100.~% 166310 100.~% SWP 164197 98.7% 164343 98.8% 164343 98.8% VBR ----- ------ 117661 70.7% 117661 70.7% * VSP ----- ------ 22444 13.5% 22444 13.5% * --------+---------------+--------------+--------------+--------- Table Comp.F2v: Detection Quality of ITW File Viruses: ====================================================== ======== Detection Quality ============== ALL Product LINUX Windows 2000 Windows XP systems Testbed 107 100.0% 107 100.0% 107 100.0% match --------+---------------+--------------+--------------+--------- ANT 107 100.0% 107 100.0% 107 100.0% * AVA ----- ------ 106 99.1% 106 99.1% * AVG ----- ------ 106 99.1% 106 99.1% * AVK ----- ------ 106 99.1% 106 99.1% * AVP 106 99.1% 106 99.1% 106 99.1% * BDF ----- ------ 106 99.1% 106 99.1% * CMD 107 100.0% 106 99.1% 106 99.1% DRW 106 99.1% 106 99.1% 106 99.1% * FIR ----- ------ 89 83.2% 89 83.2% * FPR 106 99.1% 106 99.1% 106 99.1% * FSE 106 99.1% 106 99.1% 106 99.1% * GLA ----- ------ 61 57.0% 61 57.0% * IKA ----- ------ 106 99.1% 106 99.1% * INO 106 99.1% 106 99.1% 106 99.1% * NAV ----- ------ 106 99.1% 106 99.1% * NVC ----- ------ 106 99.1% 106 99.1% * PAV ----- ------ 106 99.1% 106 99.1% * PER ----- ------ 71 66.4% 71 66.4% * PRO ----- ------ 106 99.1% 106 99.1% * QHL ----- ------ 103 96.3% 103 96.3% * RAV ----- ------ 106 99.1% 106 99.1% * SCN 107 100.0% 107 100.0% 107 100.0% * SWP 106 99.1% 106 99.1% 106 99.1% * VBR ----- ------ 103 96.3% 103 96.3% * VSP ----- ------ 3 2.8% 3 2.8% * --------+---------------+--------------+--------------+--------- Table Comp.F2f: Detection Quality of ITW File infected files: ============================================================= ======== Detection Quality ============== ALL Product LINUX Windows 2000 Windows XP systems Testbed 638 100.0% 638 100.0% 638 100.0% match --------+---------------+--------------+--------------+--------- ANT 631 98.9% 631 98.9% 631 98.9% * AVA ----- ------ 632 99.1% 632 99.1% * AVG ----- ------ 631 98.9% 631 98.9% * AVK ----- ------ 637 99.8% 637 99.8% * AVP 637 99.8% 637 99.8% 637 99.8% * BDF ----- ------ 623 97.6% 623 97.6% * CMD 633 99.2% 629 98.6% 629 98.6% DRW 637 99.8% 637 99.8% 637 99.8% * FIR ----- ------ 505 79.2% 505 79.2% * FPR 637 99.8% 637 99.8% 637 99.8% * FSE 637 99.8% 637 99.8% 637 99.8% * GLA ----- ------ 289 45.3% 289 45.3% * IKA ----- ------ 617 96.7% 617 96.7% * INO 635 99.5% 635 99.5% 635 99.5% * NAV ----- ------ 637 99.8% 637 99.8% * NVC ----- ------ 628 98.4% 628 98.4% * PAV ----- ------ 637 99.8% 637 99.8% * PER ----- ------ 438 68.7% 438 68.7% * PRO ----- ------ 618 96.9% 618 96.9% * QHL ----- ------ 611 95.8% 611 95.8% * RAV ----- ------ 637 99.8% 637 99.8% * SCN 638 100.0% 638 100.0% 638 100.0% * SWP 635 99.5% 635 99.5% 635 99.5% * VBR ----- ------ 552 86.5% 552 86.5% * VSP ----- ------ 104 16.3% 104 16.3% * --------+---------------+--------------+--------------+--------- Table Comp.F3m: Detection Quality of Zoo File Malware: ====================================================== ======== Detection Quality ============== ALL Product LINUX Windows 2000 Windows XP systems Testbed 28621 100.0% 28621 100.0% 28621 100.0% match --------+---------------+--------------+--------------+--------- ANT 17401 60.8% 17029 59.5% 17029 59.5% AVA ----- ------ 18281 63.9% 23055 80.6% AVG ----- ------ 13720 47.9% 13720 47.9% * AVK ----- ------ 28515 99.6% 28515 99.6% * AVP 28465 99.5% 28112 98.2% 28465 99.5% BDF ----- ------ 19733 68.9% 19733 68.9% * CMD 26796 93.6% 24976 87.3% 24976 87.3% DRW 1254 4.4% 1249 4.4% 1249 4.4% FIR ----- ------ 10953 38.3% 10953 38.3% * FPR 27486 96.0% 28308 98.9% 28308 98.9% FSE 28587 99.9% 28574 99.8% 28574 99.8% GLA ----- ------ 10292 36.0% 10292 36.0% * IKA ----- ------ 17409 60.8% 17409 60.8% * INO* 10300 36.0% 22644 79.1% 22644 79.1% NAV ----- ------ 25579 89.4% 25579 89.4% * NVC ----- ------ 18220 63.7% 18222 63.7% PAV ----- ------ 28442 99.4% 28442 99.4% * PER ----- ------ 1495 5.2% 1495 5.2% * PRO ----- ------ 10233 35.8% 10233 35.8% * QHL ----- ------ 2968 10.4% 2824 9.9% RAV ----- ------ 18316 64.0% 25030 87.5% SCN 28259 98.7% 28228 98.6% 28228 98.6% SWP 25189 88.0% 24558 85.8% 24558 85.8% VBR ----- ------ 9831 34.3% 9831 34.3% * VSP ----- ------ 6675 23.3% 6675 23.3% * --------+---------------+--------------+--------------+--------- Table Comp.M1v: Detection Quality of Zoo Macro Viruses: ======================================================= ======== Detection Quality ============== ALL Product LINUX Windows 2000 Windows XP systems Testbed 7796 100.0% 7796 100.0% 7796 100.0% match --------+---------------+--------------+--------------+--------- ANT 7634 97.9% 7632 97.9% 7632 97.9% AVA ----- ------ 7630 97.9% 7630 97.9% * AVG ----- ------ 7638 98.0% 7638 98.0% * AVK ----- ------ 7795 100.~% 7795 100.~% * AVP 7795 100.~% 7795 100.~% 7795 100.~% * BDF ----- ------ 7648 98.1% 7648 98.1% * CMD 7789 99.9% 7787 99.9% 7787 99.9% DRW 7750 99.4% 7750 99.4% 7750 99.4% * FIR ----- ------ 6700 85.9% 6700 85.9% * FPR 7790 99.9% 7790 99.9% 7790 99.9% * FSE 7796 100.0% 7795 100.~% 7795 100.~% GLA ----- ------ 118 1.5% 118 1.5% * IKA ----- ------ 7526 96.5% 5963 76.5% * INO 7744 99.3% 7787 99.9% 7787 99.9% NAV ----- ------ 7789 99.9% 7789 99.9% * NVC ----- ------ 7737 99.2% 7737 99.2% * PAV ----- ------ 7795 100.~% 7795 100.~% * PER ----- ------ 5441 69.8% 5441 69.8% * PRO ----- ------ 5698 73.1% 5698 73.1% * RAV ----- ------ 7784 99.8% 7784 99.8% * SCN 7795 100.~% 7795 100.~% 7795 100.~% * SWP 7778 99.8% 7773 99.7% 7773 99.7% VBR ----- ------ 7669 98.4% 7671 98.4% * VSP ----- ------ 8 0.1% 8 0.1% * --------+---------------+--------------+--------------+--------- Table Comp.M1f: Detection Quality of Zoo Macro infected files: ============================================================== ======== Detection Quality ============== ALL Product LINUX Windows 2000 Windows XP systems Testbed 27370 100.0% 27370 100.0% 27370 100.0% match --------+---------------+--------------+--------------+--------- ANT 26759 97.8% 26757 97.8% 26757 97.8% AVA ----- ------ 26829 98.0% 26829 98.0% * AVG ----- ------ 26920 98.4% 26920 98.4% * AVK ----- ------ 27367 100.~% 27367 100.~% * AVP 27364 100.~% 27364 100.~% 27364 100.~% * BDF ----- ------ 26964 98.5% 26964 98.5% * CMD 27351 99.9% 27348 99.9% 27348 99.9% DRW 27253 99.6% 27253 99.6% 27253 99.6% * FIR ----- ------ 23369 85.4% 23369 85.4% * FPR 27352 99.9% 27352 99.9% 27352 99.9% * FSE 27369 100.0% 27368 100.~% 27368 100.~% GLA ----- ------ 375 1.4% 375 1.4% * IKA ----- ------ 26500 96.8% 21784 79.6% INO 27224 99.5% 27317 99.8% 27317 99.8% NAV ----- ------ 27340 99.9% 27340 99.9% * NVC ----- ------ 27041 98.8% 27041 98.8% * PAV ----- ------ 27364 100.~% 27364 100.~% * PER ----- ------ 19235 70.3% 19235 70.3% * PRO ----- ------ 19113 69.8% 19113 69.8% * RAV ----- ------ 27328 99.9% 27328 99.9% * SCN 27361 100.~% 27360 100.~% 27360 100.~% SWP 27338 99.9% 27331 99.9% 27331 99.9% VBR ----- ------ 27078 98.9% 27087 99.0% VSP ----- ------ 9 0.~% 9 0.~% * --------+---------------+--------------+--------------+--------- Table Comp.M2v: Detection Quality of ITW Macro Viruses: ======================================================= ======== Detection Quality ============== ALL Product LINUX Windows 2000 Windows XP systems Testbed 74 100.0% 74 100.0% 74 100.0% match --------+---------------+--------------+--------------+--------- ANT 74 100.0% 74 100.0% 74 100.0% * AVA ----- ------ 74 100.0% 74 100.0% * AVG ----- ------ 74 100.0% 74 100.0% * AVK ----- ------ 74 100.0% 74 100.0% * AVP 74 100.0% 74 100.0% 74 100.0% * BDF ----- ------ 74 100.0% 74 100.0% * CMD 74 100.0% 74 100.0% 74 100.0% * DRW 73 98.6% 74 100.0% 74 100.0% FIR ----- ------ 71 95.9% 71 95.9% * FPR 74 100.0% 74 100.0% 74 100.0% * FSE 74 100.0% 74 100.0% 74 100.0% * GLA ----- ------ 3 4.1% 3 4.1% * IKA ----- ------ 74 100.0% 74 100.0% * INO 74 100.0% 74 100.0% 74 100.0% * NAV ----- ------ 74 100.0% 74 100.0% * NVC ----- ------ 74 100.0% 74 100.0% * PAV ----- ------ 74 100.0% 74 100.0% * PER ----- ------ 64 86.5% 64 86.5% * PRO ----- ------ 74 100.0% 74 100.0% * QHL ----- ------ 74 100.0% 74 100.0% * RAV ----- ------ 74 100.0% 74 100.0% * SCN 74 100.0% 74 100.0% 74 100.0% * SWP 74 100.0% 74 100.0% 74 100.0% * VBR ----- ------ 73 98.6% 73 98.6% * VSP ----- ------ 1 1.4% 1 1.4% * --------+---------------+--------------+--------------+--------- Table Comp.M2f: Detection Quality of ITW Macro infected files: ============================================================== ======== Detection Quality ============== ALL Product LINUX Windows 2000 Windows XP systems Testbed 976 100.0% 976 100.0% 976 100.0% match --------+---------------+--------------+--------------+--------- ANT 976 100.0% 976 100.0% 976 100.0% * AVA ----- ------ 971 99.5% 971 99.5% * AVG ----- ------ 975 99.9% 975 99.9% * AVK ----- ------ 976 100.0% 976 100.0% * AVP 976 100.0% 976 100.0% 976 100.0% * BDF ----- ------ 976 100.0% 976 100.0% * CMD 975 99.9% 975 99.9% 975 99.9% * DRW 971 99.5% 976 100.0% 976 100.0% FIR ----- ------ 923 94.6% 923 94.6% * FPR 975 99.9% 975 99.9% 975 99.9% * FSE 976 100.0% 976 100.0% 976 100.0% * GLA ----- ------ 18 1.8% 18 1.8% * IKA ----- ------ 970 99.4% 970 99.4% * INO 975 99.9% 975 99.9% 975 99.9% * NAV ----- ------ 976 100.0% 976 100.0% * NVC ----- ------ 965 98.9% 965 98.9% * PAV ----- ------ 976 100.0% 976 100.0% * PER ----- ------ 873 89.4% 873 89.4% * PRO ----- ------ 969 99.3% 969 99.3% * QHL ----- ------ 948 97.1% 948 97.1% * RAV ----- ------ 975 99.9% 975 99.9% * SCN 976 100.0% 976 100.0% 976 100.0% * SWP 976 100.0% 976 100.0% 976 100.0% * VBR ----- ------ 971 99.5% 971 99.5% * VSP ----- ------ 1 0.1% 1 0.1% * --------+---------------+--------------+--------------+--------- Table Comp.M3m: Detection Quality of Zoo Macro Malware: ======================================================= ======== Detection Quality ============== ALL Product LINUX Windows 2000 Windows XP systems Testbed 792 100.0% 792 100.0% 792 100.0% match --------+---------------+--------------+--------------+---------- ANT 697 88.0% 696 87.9% 696 87.9% AVA ----- ------ 724 91.4% 724 91.4% * AVG ----- ------ 644 81.3% 644 81.3% * AVK ----- ------ 792 100.0% 792 100.0% * AVP 791 99.9% 791 99.9% 791 99.9% * BDF ----- ------ 750 94.7% 750 94.7% * CMD 789 99.6% 792 100.0% 792 100.0% DRW 783 98.9% 783 98.9% 783 98.9% * FIR ----- ------ 599 75.6% 599 75.6% * FPR 792 100.0% 792 100.0% 792 100.0% * FSE 792 100.0% 792 100.0% 792 100.0% * GLA ----- ------ 15 1.9% 15 1.9% * IKA ----- ------ 725 91.5% 725 91.5% * INO 719 90.8% 774 97.7% 774 97.7% NAV ----- ------ 777 98.1% 777 98.1% * NVC ----- ------ 736 92.9% 736 92.9% * PAV ----- ------ 791 99.9% 791 99.9% * PER ----- ------ 463 58.5% 463 58.5% * PRO ----- ------ 425 53.7% 425 53.7% * QHL ----- ------ 620 78.3% 620 78.3% * RAV ----- ------ 784 99.0% 784 99.0% * SCN 790 99.7% 790 99.7% 790 99.7% * SWP 771 97.3% 771 97.3% 771 97.3% * VBR ----- ------ 749 94.6% 749 94.6% * VSP ----- ------ 1 0.1% 1 0.1% * --------+---------------+--------------+--------------+--------- Table Comp.S1v: Detection Quality of Zoo Script Viruses: ======================================================== ======== Detection Quality ============== ALL Product LINUX Windows 2000 Windows XP systems Testbed 959 100.0% 959 100.0% 959 100.0% match --------+---------------+--------------+--------------+--------- ANT 840 87.6% 839 87.5% 839 87.5% AVA ----- ------ 851 88.7% 852 88.8% * AVG ----- ------ 654 68.2% 654 68.2% * AVK ----- ------ 957 99.8% 957 99.8% * AVP 956 99.7% 956 99.7% 956 99.7% * BDF ----- ------ 904 94.3% 904 94.3% * CMD 953 99.4% 945 98.5% 945 98.5% DRW 915 95.4% 915 95.4% 915 95.4% * FIR ----- ------ 728 75.9% 728 75.9% * FPR 953 99.4% 952 99.3% 952 99.3% FSE 958 99.9% 959 100.0% 959 100.0% GLA ----- ------ 475 49.5% 475 49.5% * IKA ----- ------ 879 91.7% 879 91.7% * INO 926 96.6% 935 97.5% 935 97.5% NAV ----- ------ 947 98.7% 947 98.7% * NVC ----- ------ 828 86.3% 828 86.3% * PAV ----- ------ 956 99.7% 956 99.7% * PER ----- ------ 220 22.9% 220 22.9% * PRO ----- ------ 675 70.4% 675 70.4% * QHL ----- ------ 279 29.1% 279 29.1% * RAV ----- ------ 956 99.7% 956 99.7% * SCN 957 99.8% 959 100.0% 959 100.0% SWP 932 97.2% 928 96.8% 928 96.8% VBR ----- ------ 445 46.4% 445 46.4% * VSP ----- ------ 801 83.5% 801 83.5% * --------+---------------+--------------+--------------+---------- Table Comp.S1f: Detection Quality of Zoo Script infected files: =============================================================== ======== Detection Quality ============== ALL Product LINUX Windows 2000 Windows XP systems Testbed 2222 100.0% 2222 100.0% 2222 100.0% match --------+---------------+--------------+--------------+---------- ANT 1803 81.1% 1796 80.8% 1796 80.8% AVA ----- ------ 1916 86.2% 1923 86.5% AVG ----- ------ 1566 70.5% 1566 70.5% * AVK ----- ------ 2218 99.8% 2218 99.8% * AVP 2216 99.7% 2216 99.7% 2216 99.7% * BDF ----- ------ 2008 90.4% 2008 90.4% * CMD 2185 98.3% 2136 96.1% 2136 96.1% DRW 2081 93.7% 2080 93.6% 2080 93.6% FIR ----- ------ 1434 64.5% 1434 64.5% * FPR 2196 98.8% 2191 98.6% 2191 98.6% FSE 2220 99.9% 2219 99.9% 2219 99.9% GLA ----- ------ 1096 49.3% 1096 49.3% * IKA ----- ------ 1955 88.0% 1955 88.0% * INO 2124 95.6% 2147 96.6% 2147 96.6% NAV ----- ------ 2185 98.3% 2185 98.3% * NVC ----- ------ 1794 80.7% 1794 80.7% * PAV ----- ------ 2216 99.7% 2216 99.7% * PER ----- ------ 632 28.4% 632 28.4% * PRO ----- ------ 1464 65.9% 1464 65.9% * QHL ----- ------ 832 37.4% 832 37.4% * RAV ----- ------ 2192 98.6% 2192 98.6% * SCN 2215 99.7% 2218 99.8% 2218 99.8% SWP 2112 95.0% 2099 94.5% 2099 94.5% VBR ----- ------ 1127 50.7% 1127 50.7% * VSP ----- ------ 1614 72.6% 1614 72.6% * --------+---------------+--------------+--------------+--------- Table Comp.S2v: Detection Quality of ITW Script Viruses: ======================================================== ======== Detection Quality ============== ALL Product LINUX Windows 2000 Windows XP systems Testbed 22 100.0% 22 100.0% 22 100.0% match --------+---------------+--------------+--------------+--------- ANT 22 100.0% 22 100.0% 22 100.0% * AVA ----- ------ 22 100.0% 22 100.0% * AVG ----- ------ 22 100.0% 22 100.0% * AVK ----- ------ 22 100.0% 22 100.0% * AVP 22 100.0% 22 100.0% 22 100.0% * BDF ----- ------ 22 100.0% 22 100.0% * CMD 22 100.0% 22 100.0% 22 100.0% * DRW 22 100.0% 22 100.0% 22 100.0% * FIR ----- ------ 21 95.5% 21 95.5% * FPR 22 100.0% 22 100.0% 22 100.0% * FSE 22 100.0% 22 100.0% 22 100.0% * GLA ----- ------ 12 54.5% 12 54.5% * IKA ----- ------ 22 100.0% 22 100.0% * INO 22 100.0% 22 100.0% 22 100.0% * NAV ----- ------ 22 100.0% 22 100.0% * NVC ----- ------ 22 100.0% 22 100.0% * PAV ----- ------ 22 100.0% 22 100.0% * PER ----- ------ 15 68.2% 15 68.2% * PRO ----- ------ 22 100.0% 22 100.0% * QHL ----- ------ 21 95.5% 21 95.5% * RAV ----- ------ 22 100.0% 22 100.0% * SCN 22 100.0% 22 100.0% 22 100.0% * SWP 22 100.0% 22 100.0% 22 100.0% * VBR ----- ------ 16 72.7% 16 72.7% * VSP ----- ------ 20 90.9% 20 90.9% * --------+---------------+--------------+--------------+--------- Table Comp.S2f: Detection Quality of ITW Script infected files: ============================================================ ======== Detection Quality ============== ALL Product LINUX Windows 2000 Windows XP systems Testbed 178 100.0% 178 100.0% 178 100.0% match --------+---------------+--------------+--------------+--------- ANT 157 88.2% 154 86.5% 154 86.5% AVA ----- ------ 174 97.8% 174 97.8% * AVG ----- ------ 169 94.9% 169 94.9% * AVK ----- ------ 178 100.0% 178 100.0% * AVP 178 100.0% 178 100.0% 178 100.0% * BDF ----- ------ 172 96.6% 172 96.6% * CMD 177 99.4% 174 97.8% 174 97.8% DRW 174 97.8% 174 97.8% 174 97.8% * FIR ----- ------ 137 77.0% 137 77.0% * FPR 177 99.4% 177 99.4% 177 99.4% * FSE 177 99.4% 178 100.0% 178 100.0% GLA ----- ------ 113 63.5% 113 63.5% * IKA ----- ------ 176 98.9% 176 98.9% * INO 170 95.5% 177 99.4% 177 99.4% NAV ----- ------ 178 100.0% 178 100.0% * NVC ----- ------ 168 94.4% 168 94.4% * PAV ----- ------ 178 100.0% 178 100.0% * PER ----- ------ 104 58.4% 104 58.4% * PRO ----- ------ 151 84.8% 151 84.8% * QHL ----- ------ 154 86.5% 154 86.5% * RAV ----- ------ 177 99.4% 177 99.4% * SCN 178 100.0% 178 100.0% 178 100.0% * SWP 168 94.4% 168 94.4% 168 94.4% * VBR ----- ------ 129 72.5% 129 72.5% * VSP ----- ------ 145 81.5% 145 81.5% * --------+---------------+--------------+--------------+--------- Table Comp.S3m: Detection Quality of Zoo Script Malware: ======================================================== ======== Detection Quality ============== ALL Product LINUX Windows 2000 Windows XP systems Testbed 1103 100.0% 1103 100.0% 1103 100.0% match --------+---------------+--------------+--------------+--------- ANT 406 36.8% 394 35.7% 394 35.7% AVA ----- ------ 782 70.9% 782 70.9% * AVG ----- ------ 183 16.6% 183 16.6% * AVK ----- ------ 1085 98.4% 1085 98.4% * AVP 1075 97.5% 1075 97.5% 1075 97.5% * BDF ----- ------ 441 40.0% 441 40.0% * CMD 861 78.1% 577 52.3% 577 52.3% DRW 636 57.7% 634 57.5% 634 57.5% FIR ----- ------ 168 15.2% 168 15.2% * FPR 871 79.0% 868 78.7% 868 78.7% FSE 1092 99.0% 1086 98.5% 1086 98.5% GLA ----- ------ 128 11.6% 128 11.6% * IKA ----- ------ 393 35.6% 393 35.6% * INO 645 58.5% 688 62.4% 688 62.4% NAV ----- ------ 967 87.7% 967 87.7% * NVC ----- ------ 212 19.2% 212 19.2% * PAV ----- ------ 1074 97.4% 1074 97.4% * PER ----- ------ 18 1.6% 18 1.6% * PRO ----- ------ 235 21.3% 235 21.3% * QHL ----- ------ 141 12.8% 141 12.8% * RAV ----- ------ 922 83.6% 922 83.6% * SCN 1067 96.7% 1067 96.7% 1067 96.7% * SWP 695 63.0% 648 58.7% 648 58.7% VBR ----- ------ 106 9.6% 106 9.6% * VSP ----- ------ 197 17.9% 197 17.9% * --------+---------------+--------------+--------------+---------