Kaspersky PURE User Guide - Kaspersky Lab

U S E R G U I D ETESTING THE SMTP TRAFFIC PROTECTIONIn order to detect viruses in data streams transferred using SMTP protocol, you must use an email system that uses thisprotocol to transfer data.You are advised to check virus detection in different parts of outgoing mail: in message body and in attachments. Pleaseuse the EICAR test "virus" file for testing (see section "Test "virus" EICAR and its modifications" on page 232).To test virus detection in the stream of data transferred over SMTP, perform the following steps:1. Create a plain text format message using an email client installed on your computer.A message that contains a test virus is not scanned if it is created in RTF or HTML format!2. Depending upon the message part, in which the application should detect a virus, perform the following steps:to check virus detection in message body, add the standard or modified EICAR test "virus" text to themessage beginning;to check virus detection in attachments, attach to the message a file containing the EICAR test "virus".3. Send the message to the administrator.The application will detect the object, identify it as infected, and block the message.VALIDATING FILE ANTI-VIRUS SETTINGSIn order to verify that the File Anti-Virus configuration is correct:1. Create a folder on the disk. Copy into this folder the test "virus" downloaded from the official EICAR website(http://www.eicar.org/anti_virus_test_file.htm), as well as all the test "virus" modifications you have created.2. Allow all events to be logged so the report file retains data on corrupted objects or objects skipped due toerrors.3. Run the test "virus" or one of its modified versions.The File Anti-Virus will intercept the call to execute the file, scan it, and perform the action specified in the settings forobjects of that status. By selecting different actions to be performed with the detected object, you can perform a fullcheck of the component's operation.You can view information about the results of the File Anti-Virus operation in the report about the component's operation.VALIDATING VIRUS SCAN TASK SETTINGSIn order to verify that the virus scan task is correctly configured:1. Create a folder on the disk. Copy into this folder the test "virus" downloaded from the official EICAR website(http://www.eicar.org/anti_virus_test_file.htm), as well as all the test "virus" modifications you have created.2. Create a new virus scan task and select the folder, containing the set of test "viruses", as the object toscan.234