User Guide

AntiViral Toolkit Pro
- 54 -
6. Messages about suspicious changes or
possible virus infection
6.1 Warnings displayed upon completion of tests
Upon completion of tests, and if changes that indicate the possible presence
of viruses have been detected, AVP Inspector for Web Servers™ displays a
dialog box with the list of the suspicious changes.
Changes are considered suspicious in these cases:
• Files changed but date and time unchanged - changes in file contents,
not accompanied by changes in the date and time of last modification,
generally indicate the presence of a file virus.
• Abnormal time setting in changed files- an invalid time of last
modification in changed files: number of minutes greater than 59,
number of hours greater than 23 or number of seconds greater than 59,
can indicate the presence of a file virus. (Some viruses use this method
to “tag” infected files).
• Abnormal date setting in changed files - an invalid date of last
modification in changed files: day value exceeds 31, month value
exceeds 12 or year value exceeds current year, can indicate the presence
of a file virus. (Some viruses use this method to “tag” infected files).