Proaktive IT-Sicherheit
 

How can I run a safe simulation of downloading and executing a virus, and confirm Norman's antivirus product is performing as expected?

Supportartikel suchen

SUCHEN Erweiterte Suche

Veröffentlicht am: 2008-10-24       Aktualisiert am: 2011-01-17

Produkt:
Endpoint Protection, Network Protection, Network Protection for Collaboration Servers, Virus Control for Novell Netware (FireBreak)

Module(s):
On demand scanner, On access scanner

Operations System(s):
Windows XP 32 bits
Windows Vista 32 bits
Windows 2000
Linux
Windows XP 64 bits
Windows Vista 64 bits
Windows 95/98/Me
Windows NT
Novell Netware
Windows 2003 Server

Problembeschreibung

How can I run a safe simulation of downloading and executing a virus, and confirm that my Norman antivirus protection is performing as expected?

Problemlösung

There is a special file called Eicar. This is a file that doesn’t have any harmful content whatsoever, but is detected as the Eicar-virus by consensus from all antivirus companies. (For advanced users: this is the only ‘false positive’ that is kept in the definition files on purpose.)
Downloading and running Eicar is exactly the same as downloading and running a virus, except of course that there is absolutely no danger involved. If the Eicar file is intercepted/detected, the scanner is active and functional.

For more information, visit www.eicar.org. 

You can download different versions of the Eicar executable from Eicar's web site.

Note:
When executing this test through a remote session, you will not see the popup about a detected virus. In that case, just check whether the Eicar file is still where you put it after downloading and/or running it. If not, it was successfully removed by Norman.