User Guide

AntiViral Toolkit Pro
- 23 -
The following changes are categorized as suspicious:
• changes in file contents where the file modification date and time remain
the same (characteristic of most file viruses).
• different files have a similar size change.
• invalid date and time of last file modification, for example: day greater
than 31, month greater than 12 or year greater than the current year;
minutes greater than 59, hours greater than 23 or seconds greater than 59
(a common technique used by viruses to mark files that have been
infected).
• changes in files listed as unchangeable (stable).
• changes characteristic of viruses that attack the DOS kernel (IO.SYS,
IBMBIO.BIN files, etc.).
3.2.1 What to do if AVP Inspector for Web Servers™
reports changes
Always take note if AVP Inspector for Web Servers™ reports changes to
disk files or sectors, especially where it indicates suspicious changes. If the
reason for these messages is unclear, it should be established. If program
messages contain information that you don’t understand, contact a qualified
specialist or call AVP Technical Support for further information.
ATTENTION!
Failure to heed warning messages increases the risk
of a virus infecting your computer and the chances of data loss.