Protection Engine for Cloud Services

 View Only

  • 1.  Scan engine for Unix 5.2

    Posted Oct 24, 2011 12:29 AM

    Hello experts,

    I am evaluating the product by running few tests on certain Unix file systems, on one occasion the scan process reported 2 errors:

    ==================================================================================

        Virus scan process began : Fri Oct 14 10:07:00 2011
    Virus scan process completed : Fri Oct 14 19:02:12 2011

            Defs Version = 20110518.036
     Commandline Scanner = 4.3.2.19
                 Elapsed = 32111.8750

          Files Excluded = 0
           Files Scanned = 2162681
     Directories Scanned = 1002
    Directories Excluded = 0
           Files Skipped = 0
        Files Scan Error = 2
          Files Infected = 0

    Error list:

    Error processing file /objective/data1/volume1/doc/395/A2218395.3
    Error processing file /objective/data1/volume1/doc/395/A2218395.4

    ===================================================================================

    However these 2 files were marked as cleaned by another anti-virus product, they are not corrupted either, their file permission/attributes are same as other files on same directory.  What would be the possible cause?

    BTW, files A2218395.1 and A2218395.2 had no error in scan.

     

    Another issue is: I downloaded and installed the anti virus updates package (20111010-020-unix.sh) from FTP site, then restarted the scan engine, however the  "Defs Version" is still showing older version, am I missing any steps?  

    Thank you in advance.



  • 2.  RE: Scan engine for Unix 5.2

    Posted Oct 24, 2011 09:38 AM

    Run a detailed report from the Scan engine interface and find the two files mentioned above that should provide you with more information as to the scan error or error type.



  • 3.  RE: Scan engine for Unix 5.2

    Broadcom Employee
    Posted Oct 24, 2011 10:17 AM
    You will need to enable intelligent updater shadowing in order to get Scan Engine to use those definitions. Follow the steps in this document to enable this: http://www.symantec.com/business/support/index?page=content&id=TECH90925