Kaspersky Lab Internet Security 2011, Base, 5U, 2Y, ENG KL1837UCEDS User Manual
Product codes
KL1837UCEDS
V
A L I D A T I N G
K
A S P E R S K Y
I
N T E R N E T
S
E C U R I T Y S E T T I N G S
191
Make sure you have resumed anti-virus protection after downloading the test "virus" and creating its modifications.
Table 2.
Modifications of the test virus
Prefix
Object status
Object processing information
No prefix, standard
test "virus".
test "virus".
Infected.
Object contains code
of a known virus.
Disinfection
impossible.
of a known virus.
Disinfection
impossible.
The application identifies the object as a non-disinfectable virus.
An error occurs while attempting to disinfect the object; the action
performed is that specified for non-disinfectable objects.
performed is that specified for non-disinfectable objects.
CORR-
Corrupted.
The application could access the object but could not scan it because it
is corrupted (for example, the file structure is corrupted, or the file
format is invalid). You can find the information that the object has been
processed in the report on the application's operation.
is corrupted (for example, the file structure is corrupted, or the file
format is invalid). You can find the information that the object has been
processed in the report on the application's operation.
WARN-
Suspicious.
The object contains
code of an unknown
virus. Disinfection
impossible.
code of an unknown
virus. Disinfection
impossible.
The object has been considered suspicious. At the time of detection,
the application databases contain no description of the procedure for
disinfecting this object. You will be notified when an object of this type
is detected.
the application databases contain no description of the procedure for
disinfecting this object. You will be notified when an object of this type
is detected.
SUSP-
Suspicious.
The object contains
modified code of a
known virus.
Disinfection
impossible.
modified code of a
known virus.
Disinfection
impossible.
The application detected a partial correspondence of a section of object
code with a section of code of a known virus. At the time of detection,
the application databases contain no description of the procedure for
disinfecting this object. You will be notified when an object of this type
is detected.
code with a section of code of a known virus. At the time of detection,
the application databases contain no description of the procedure for
disinfecting this object. You will be notified when an object of this type
is detected.
ERRO-
Scan error.
An error occurred during the scan of an object. The application could
not access the object, since the integrity of the object has been
breached (for example, no end to a multivolume archive) or there is no
connection to it (if the object is scanned on a network resource). You
can find the information that the object has been processed in the
report on the application's operation.
not access the object, since the integrity of the object has been
breached (for example, no end to a multivolume archive) or there is no
connection to it (if the object is scanned on a network resource). You
can find the information that the object has been processed in the
report on the application's operation.
CURE-
Infected.
Object contains code
of a known virus.
Disinfectable.
of a known virus.
Disinfectable.
Object contains a virus that can be disinfected. The application
disinfects the object; the text of the virus body is replaced with the word
CURE. You will be notified when an object of this type is detected.
disinfects the object; the text of the virus body is replaced with the word
CURE. You will be notified when an object of this type is detected.
DELE-
Infected.
Object contains code
of a known virus.
Disinfection
impossible.
of a known virus.
Disinfection
impossible.
The application identifies the object as a non-disinfectable virus.
An error occurs while attempting to disinfect the object; the action
performed is that specified for non-disinfectable objects.
performed is that specified for non-disinfectable objects.
You will be notified when an object of this type is detected.
T
ESTING THE
HTTP
TRAFFIC PROTECTION
In order to verify that viruses are successfully detected in a data stream transferred via the HTTP protocol:
try to download this test "virus" from the EICAR's official website at
When the computer attempts to download the test "virus", Kaspersky Internet Security detects the object, identifies it as
an infected object that cannot be disinfected, and performs the action specified in the HTTP traffic scan settings for
objects with this status. By default, when you attempt to download the test "virus", the connection with the website is
terminated and the browser displays a message indicating that the object is infected with the EICAR-Test-File virus.
an infected object that cannot be disinfected, and performs the action specified in the HTTP traffic scan settings for
objects with this status. By default, when you attempt to download the test "virus", the connection with the website is
terminated and the browser displays a message indicating that the object is infected with the EICAR-Test-File virus.