User Guide

90 Kaspersky Anti-Virus® for Sendmail with Milter API
Table 5. Modifications of test "virus"
Prefix Object type
No prefix,
standard test
“virus"
Infected. An error occurs during disinfection. The object will
then be deleted.
CORR–
Corrupted.
SUSP–
Suspicious (unknown virus code).
WARN–
Warning (modified code of a known virus).
ERRO–
Error.
CURE–
Curable. The object will be disinfected and the text in the
infected file will be changed to CURE.
DELE–
Infected. The object will be deleted automatically.
The first column of the table contains the prefixes that should be added to the
beginning of the line in the standard test "virus" file (e.g.
DELE–X5O!P%@AP[4\PZX54(P^)7CC)7}$EICAR-STANDARD-ANTIVIRUS-TEST-FILE!$H+H*).
After adding a prefix to the test “virus”, save it to a file with another name, for
example eicar_dele.com; assign names to all the modified “viruses” in the same
manner.
The second column contains the types of objects identified by the anti-virus
application after you added a prefix. The actions for each type of object are
defined by the application's settings customized by the administrator.
It is recommended that you test the operation of your anti-virus
application for both incoming and outgoing mail, in message bodies and
attachments. To test the detection of viruses in message bodies, paste
the text of either the standard or modified "virus" into a message body.