36
Kaspersky Security 5.5 for Microsoft Exchange Server 2003
Prefix
Object type
No prefix, standard
test "virus"
Infected. An error occurs during an attempt to disinfect
the object; apply action set for objects that cannot be
disinfected.
CORR-
Corrupted.
SUSP-
Suspicious (unknown virus code).
WARN-
Warning (modified code of a known virus).
ERRO-
An error corresponding to detection of a corrupted object.
CURE-
Infected (can be cured). The object will be disinfected; the
text of the "virus" body will be replaced with the word
"DISINFECTED".
DELE-
Infected (cannot be cured). Apply action set for objects
that cannot be disinfected.
The first table column lists prefixes to be added at the beginning of the string of
the standard test "virus" (for example,
DELE-X5O!P%@AP[4\PZX54(P^)7CC)7}$EICAR-STANDARD-ANTIVIRUS-
TEST-FILE!$H+H*).
After adding a prefix to the test "virus" save it, for example, to a file under the
name
eicar_dele.com
(assign names to all the modified "viruses" in the same
manner).
The second column of this table contains the types of objects identified by the
anti-virus application after you have added a prefix. The actions for each type of
objects are defined by the anti-virus scan settings (see section 6.5, page 57)
customized by the administrator.
4.7.2. Testing the anti-spam protection
system
You can use a test message identified as SPAM to test the anti-spam server
protection.
The subject of the test message must contain the following line:
Spam is bad
do not send it
.
