============================================================
Filename: TESTBEDS.TXT
			    "Pocket PC Scanner Test 2003-07"
			    		    Henrich C. Pöhls
============================================================

This file gives an overview and lists the contents 
of VTCs testbeds used in "Pocket PC Scanner Test 2003-07":

	1) Script In-The-Wild Testbeds
	----------------------------------------------------
	1.1) scr_itw.dec02	(From upcoming aVTC Test
				 status December 31,2002)
	1.2) scr_itw.304	(Longtime ITW Nov.01-Dec.02
				 status December 31,2002)
	
	2) Macro In-The-Wild Testbeds
	----------------------------------------------------
	2.1) mac_itw.dec02	(From upcoming aVTC Test 
				 status December 31,2002)
	2.2) mac_itw.304	(Longtime ITW Nov.01-Dec.02
				 status December 31,2002)
	
Status indicates when the Testbeds were frozen.
The Testbeds for testing the products on Pocket PC 2002 
were taken from the upcoming running aVTC Test probably 
named Test 2003-09.
Additionally longtime testbeds were compiled, they contain
samples of viruses that were in-the-wild in the time between
the testbeds from the pre-test (Pocket PC Test 2003-05) and 
the regular aVTC December 2002 testbed. These second 
testbeds contain samples from all script and macro viruses
that were listed to be in-the-wild by wildlist.org from 
November 2001 to December 2002. 

				 
1.1)
Test Bed:			SCRIPT-ITW from Test 2003-09
Internal name:			scr_itw.dec02
------------------------------------------------------------
malicious samples:		178 
# of samples:			178
Size in bytes:			2.196.566
# of malware:			22

Detailed List (Path representing Name + # of samples):
------------------------------------------------------------
\scr_itw.dec02\jvs\K\Kak\A 9
\scr_itw.dec02\vbs\d\Daira\A_MM 2
\scr_itw.dec02\vbs\f\Freelink\A_MM 4
\scr_itw.dec02\vbs\h\HAPTIME\A_MM 30
\scr_itw.dec02\vbs\h\HAPTIME\D_M 10
\scr_itw.dec02\vbs\l\LOVELETT\A_MM 73
\scr_itw.dec02\vbs\l\LOVELETT\AS 1
\scr_itw.dec02\vbs\l\LOVELETT\BG 1
\scr_itw.dec02\vbs\l\LOVELETT\C 3
\scr_itw.dec02\vbs\n\NETLOG\A 11
\scr_itw.dec02\vbs\r\REDLOF\A_M 5
\scr_itw.dec02\vbs\s\SSIWG\U 1
\scr_itw.dec02\vbs\s\SSIWG2\A 4
\scr_itw.dec02\vbs\s\STAGES\A 1
\scr_itw.dec02\vbs\s\STAGES\A_14559 1
\scr_itw.dec02\vbs\s\STAGES\A_2543 1
\scr_itw.dec02\vbs\t\TAM\A_M 9
\scr_itw.dec02\vbs\v\VBSWG\AQ 1
\scr_itw.dec02\vbs\v\VBSWG\J_MM 3
\scr_itw.dec02\vbs\v\VBSWG\K_MM 1
\scr_itw.dec02\vbs\v\VBSWG\X 4
\scr_itw.dec02\vbs\v\VBSWG\Z 3

1.2)
Test Bed:			Longtime SCR-ITW Nov01-Dec02
Internal name:			scr_itw.304
------------------------------------------------------------
malicious samples:		201 
# of samples:			201
Size in bytes:			2,485,690
# of malware:			30

Detailed List (Path representing Name + # of samples):
------------------------------------------------------------
\scr_itw.304\jvs\K\Kak\A 9
\scr_itw.304\vbs\c\Cuerpo\A_MM 5
\scr_itw.304\vbs\d\Daira\A_MM 2
\scr_itw.304\vbs\f\Freelink\A_MM 4
\scr_itw.304\vbs\f\FUNNY\A 2
\scr_itw.304\vbs\h\HAPTIME\A_MM 30
\scr_itw.304\vbs\h\HAPTIME\D_M 10
\scr_itw.304\vbs\l\LOVELETT\AS 1 
\scr_itw.304\vbs\l\LOVELETT\A_MM 73
\scr_itw.304\vbs\l\LOVELETT\BG 1
\scr_itw.304\vbs\l\LOVELETT\BJ 2
\scr_itw.304\vbs\l\LOVELETT\C 3
\scr_itw.304\vbs\n\NETLOG\A 11
\scr_itw.304\vbs\r\REDLOF\A_M 5
\scr_itw.304\vbs\s\SAN\A_M 7
\scr_itw.304\vbs\s\SAN\B 2
\scr_itw.304\vbs\s\Sorry\C 1
\scr_itw.304\vbs\s\SSIWG\U 1
\scr_itw.304\vbs\s\STAGES\A 1
\scr_itw.304\vbs\s\STAGES\A_14559 1
\scr_itw.304\vbs\s\STAGES\A_2543 1
\scr_itw.304\vbs\t\TAM\A_M 9
\scr_itw.304\vbs\t\TIMOFONI\A 1
\scr_itw.304\vbs\v\VALENTIN\A_MM 5
\scr_itw.304\vbs\v\VBSWG\AQ 1
\scr_itw.304\vbs\v\VBSWG\J_MM 3
\scr_itw.304\vbs\v\VBSWG\K_MM 1
\scr_itw.304\vbs\v\VBSWG\X 4
\scr_itw.304\vbs\v\VBSWG\Y 2
\scr_itw.304\vbs\v\VBSWG\Z 3



2.1)
Test Bed:			MACRO-ITW from Test 2003-09
Internal name:			mac_itw.dec02
------------------------------------------------------------
malicious samples:		976 
# of samples:			976
Size in bytes:			47.731.639
# of malware:			76

Detailed List (Path representing Name + # of samples):
------------------------------------------------------------
\mac_itw.dec02\set07\W97M\WRENCH\E 9
\mac_itw.dec02\set07\W97M\WALKER\E 8
\mac_itw.dec02\set07\W97M\VMPCK1\DD 5
\mac_itw.dec02\set07\W97M\VMPCK1\BY 4
\mac_itw.dec02\set07\W97M\VERLOR\A 16
\mac_itw.dec02\set07\W97M\TITLE\A 5
\mac_itw.dec02\set07\W97M\TITCH\H 2
\mac_itw.dec02\set07\W97M\TITCH\D 7
\mac_itw.dec02\set07\W97M\THUS\X 12
\mac_itw.dec02\set07\W97M\THUS\I 12
\mac_itw.dec02\set07\W97M\THUS\C 9
\mac_itw.dec02\set07\W97M\THUS\A 10
\mac_itw.dec02\set06\W97M\SURROUND\A 8
\mac_itw.dec02\set06\W97M\STORY\A 11
\mac_itw.dec02\set06\W97M\SMAC\D 12
\mac_itw.dec02\set06\W97M\SERVICE\A 4
\mac_itw.dec02\set06\W97M\PROVERB\A 11
\mac_itw.dec02\set06\W97M\PRI\Q_MM 15
\mac_itw.dec02\set06\W97M\PRI\A 8
\mac_itw.dec02\set06\W97M\PANTHER\A 8
\mac_itw.dec02\set06\W97M\OSTRICH\B 30
\mac_itw.dec02\set06\W97M\OPEY\M 6
\mac_itw.dec02\set06\W97M\OPEY\A 8
\mac_itw.dec02\set06\W97M\ONEX\E 7
\mac_itw.dec02\set06\W97M\NONO\A 6
\mac_itw.dec02\set06\W97M\NAGEM\A 8
\mac_itw.dec02\set06\W97M\MYNA\C 7
\mac_itw.dec02\set06\W97M\MYNA\B 8
\mac_itw.dec02\set05\W97M\MELISSA\O_MM 15
\mac_itw.dec02\set05\W97M\MELISSA\A_MM 19
\mac_itw.dec02\set05\W97M\MARKER\Q 14
\mac_itw.dec02\set05\W97M\MARKER\O 10
\mac_itw.dec02\set05\W97M\MARKER\D 11
\mac_itw.dec02\set05\W97M\MARKER\C 10
\mac_itw.dec02\set05\W97M\MARKER\BN 15
\mac_itw.dec02\set05\W97M\LOCALE\A 8
\mac_itw.dec02\set05\W97M\GROOV\B 13
\mac_itw.dec02\set05\W97M\GROOV\A 11
\mac_itw.dec02\set05\W97M\FLOP\A 8
\mac_itw.dec02\set05\W97M\ETHAN\Q 7 
\mac_itw.dec02\set05\W97M\ETHAN\BE 6
\mac_itw.dec02\set05\W97M\ETHAN\AK 8 
\mac_itw.dec02\set05\W97M\ETHAN\A 11
\mac_itw.dec02\set05\W97M\EIGHT941\E 11
\mac_itw.dec02\set05\W97M\EIGHT941\D 12
\mac_itw.dec02\set04\WM\CONCEPT\A 47
\mac_itw.dec02\set04\W97M\COLDAPE\B 21
\mac_itw.dec02\set04\W97M\COLDAPE\A 10
\mac_itw.dec02\set04\W97M\CLASS\Q 8
\mac_itw.dec02\set04\W97M\CLASS\D 11
\mac_itw.dec02\set04\W97M\CLASS\B 6
\mac_itw.dec02\set04\W97M\CHACK\B 9
\mac_itw.dec02\set04\W97M\BOTTRA\C 14
\mac_itw.dec02\set04\W97M\BOTTRA\A 9
\mac_itw.dec02\set04\W97M\BLECK\A 9
\mac_itw.dec02\set04\W97M\BABLAS\A 7
\mac_itw.dec02\set04\W97M\ASSILEM\A 6
\mac_itw.dec02\set03\WM\CONCEPT\A 128
\mac_itw.dec02\set02\WM\WAZZU\A 10
\mac_itw.dec02\set02\WM\NPAD\A 31
\mac_itw.dec02\set02\WM\COPYCAP\A 9
\mac_itw.dec02\set02\WM\CONCEPT\A 53
\mac_itw.dec02\set02\WM\CAP\A 57
\mac_itw.dec02\set01\XM\LAROUX\A 11
\mac_itw.dec02\set01\X97M\YAWN\A 11
\mac_itw.dec02\set01\X97M\LAROUX\HO 7
\mac_itw.dec02\set01\X97M\LAROUX\E 2
\mac_itw.dec02\set01\X97M\LAROUX\DX 4
\mac_itw.dec02\set01\X97M\LAROUX\A 5
\mac_itw.dec02\set01\X97M\JINI\A 7
\mac_itw.dec02\set01\X97M\DIVI\D 4
\mac_itw.dec02\set01\X97M\DIVI\A 9
\mac_itw.dec02\set01\X97M\BARISADA\B 4
\mac_itw.dec02\set01\O97M\TRISTATE\C_XLS 8
\mac_itw.dec02\set01\O97M\TRISTATE\C_PPT 5
\mac_itw.dec02\set01\O97M\TRISTATE\C_DOC 9

2.2)
Test Bed:			Longtime MAC-ITW Nov01-Dec02
Internal name:			mac_itw.304
------------------------------------------------------------
malicious samples:		277 
# of samples:			277
Size in bytes:			13,719,985
# of malware:			118

Detailed List (Path representing Name + # of samples):
------------------------------------------------------------
\mac_itw.304\PP97M\TRISTATE\C 1
\mac_itw.304\W97M\ASSILEM\A 2
\mac_itw.304\W97M\ASSILEM\G 2
\mac_itw.304\W97M\BABLAS\A 2 
\mac_itw.304\W97M\BABLAS\BH 2
\mac_itw.304\W97M\BLECK\A 2
\mac_itw.304\W97M\BOBO\C 2
\mac_itw.304\W97M\BOTTRA\A 2
\mac_itw.304\W97M\BOTTRA\C 5
\mac_itw.304\W97M\CHACK\B 3
\mac_itw.304\W97M\CHACK\H 2
\mac_itw.304\W97M\CLASS\B 2
\mac_itw.304\W97M\CLASS\BT 2
\mac_itw.304\W97M\CLASS\D 2
\mac_itw.304\W97M\CLASS\Q 2
\mac_itw.304\W97M\CLAUD\A 2
\mac_itw.304\W97M\COLDAPE\A 2
\mac_itw.304\W97M\COLDAPE\B 11
\mac_itw.304\W97M\CONT\A 2
\mac_itw.304\W97M\DB\A 2
\mac_itw.304\W97M\DED\B 2
\mac_itw.304\W97M\EIGHT941\D 2
\mac_itw.304\W97M\EIGHT941\E 2
\mac_itw.304\W97M\EIGHT941\F 2
\mac_itw.304\W97M\ETHAN\A 4
\mac_itw.304\W97M\ETHAN\AK 2
\mac_itw.304\W97M\ETHAN\AW 2
\mac_itw.304\W97M\ETHAN\BE 4
\mac_itw.304\W97M\ETHAN\D 2
\mac_itw.304\W97M\ETHAN\Q 2
\mac_itw.304\W97M\FF\E 2
\mac_itw.304\W97M\FLOP\A 2
\mac_itw.304\W97M\FOOTER\A 2
\mac_itw.304\W97M\GROOV\A 2
\mac_itw.304\W97M\GROOV\B 2
\mac_itw.304\W97M\HOPE\A 2
\mac_itw.304\W97M\IIS\A 11
\mac_itw.304\W97M\LOCALE\A 2
\mac_itw.304\W97M\MARKER\BN 2
\mac_itw.304\W97M\MARKER\C 2
\mac_itw.304\W97M\MARKER\CB 4
\mac_itw.304\W97M\MARKER\D 2
\mac_itw.304\W97M\MARKER\O 4
\mac_itw.304\W97M\MARKER\Q 4
\mac_itw.304\W97M\MELISSA\A_MM 6
\mac_itw.304\W97M\MELISSA\O_MM 2
\mac_itw.304\W97M\MELISSA\U_MM 2
\mac_itw.304\W97M\MYNA\B 2
\mac_itw.304\W97M\MYNA\C 2
\mac_itw.304\W97M\NAGEM\A 2
\mac_itw.304\W97M\NALP\A 2
\mac_itw.304\W97M\NONO\A 2
\mac_itw.304\W97M\NOTTICE\AU 2
\mac_itw.304\W97M\ONEX\A 2
\mac_itw.304\W97M\ONEX\E 2
\mac_itw.304\W97M\OPEY\A 2
\mac_itw.304\W97M\OPEY\M 2
\mac_itw.304\W97M\OSTRICH\B 2
\mac_itw.304\W97M\PANTHER\A 2
\mac_itw.304\W97M\PANTHER\N 2
\mac_itw.304\W97M\PECAS\B 2
\mac_itw.304\W97M\PRI\A 2
\mac_itw.304\W97M\PRI\Q_MM 2
\mac_itw.304\W97M\PROVERB\A 2
\mac_itw.304\W97M\REPLOG\A 2
\mac_itw.304\W97M\SELIUQ\A 2
\mac_itw.304\W97M\SERVICE\A 4
\mac_itw.304\W97M\SHEPMAH\A 2
\mac_itw.304\W97M\SMAC\D 2
\mac_itw.304\W97M\STORY\A 2
\mac_itw.304\W97M\SURROUND\A 2
\mac_itw.304\W97M\THUS\A 2
\mac_itw.304\W97M\THUS\BH 2
\mac_itw.304\W97M\THUS\C 2
\mac_itw.304\W97M\THUS\DE 2
\mac_itw.304\W97M\THUS\EP 2
\mac_itw.304\W97M\THUS\I 3
\mac_itw.304\W97M\THUS\X 2
\mac_itw.304\W97M\TITCH\D 2
\mac_itw.304\W97M\TITCH\H 2
\mac_itw.304\W97M\TITLE\A 2
\mac_itw.304\W97M\TRISTATE\C 2
\mac_itw.304\W97M\TURN\A 2
\mac_itw.304\W97M\VERLOR\A 7
\mac_itw.304\W97M\VMPCK1\BY 2
\mac_itw.304\W97M\VMPCK1\DD 2
\mac_itw.304\W97M\WALKER\D 2
\mac_itw.304\W97M\WALKER\E 2
\mac_itw.304\W97M\WRENCH\E 2
\mac_itw.304\W97M\WRENCH\I 4
\mac_itw.304\WM\CAP\A 2
\mac_itw.304\WM\CONCEPT\A 2
\mac_itw.304\WM\COPYCAP\A 2
\mac_itw.304\WM\MENTAL\A 2
\mac_itw.304\WM\NPAD\A 2
\mac_itw.304\WM\WAZZU\A 2
\mac_itw.304\X97M\ADN\B 1
\mac_itw.304\X97M\BARISADA\A 2
\mac_itw.304\X97M\BARISADA\B 2
\mac_itw.304\X97M\BARISADA\D 2
\mac_itw.304\X97M\BARISADA\G 2
\mac_itw.304\X97M\DIVI\A 2
\mac_itw.304\X97M\DIVI\B 2
\mac_itw.304\X97M\DIVI\D 2
\mac_itw.304\X97M\LAROUX\A 1
\mac_itw.304\X97M\LAROUX\AA 2
\mac_itw.304\X97M\LAROUX\DX 3
\mac_itw.304\X97M\LAROUX\E 1
\mac_itw.304\X97M\LAROUX\HO 2
\mac_itw.304\X97M\LAROUX\KU 2
\mac_itw.304\X97M\PTH\D 2
\mac_itw.304\X97M\SQUARED\A 2
\mac_itw.304\X97M\SQUARED\B 2
\mac_itw.304\X97M\TRISTATE\C 2
\mac_itw.304\X97M\YAWN\A 2
\mac_itw.304\XF\SIC\A 1
\mac_itw.304\XM\LAROUX\A 1
\mac_itw.304\XM\LAROUX\HO 2

============================================================
End of: TESTBEDS.TXT
			    "Pocket PC Scanner Test 2003-07"
			    		    Henrich C. Pöhls
============================================================