more f-secure test cases
bugfix to aliases
adding sophos test data