Endpoint Protection

 View Only
  • 1.  EICAR.Com fake virus file is not detected by ScanEngine

    Posted Nov 16, 2010 02:26 AM

    Hi,

       I am evaluating the symantec scanengine 5.2 (Trial version)  for our application. Its a web portal where users can upload the file.

     

    I am successful setting and up and instantiating scan engine for virus scan. But it always returns the LICENSE_NA  filestatus and com.symantec.scanengine.api.ErrorCode.ERR_SUCCESSFUL_CONN for all the requests. I am using EICAR.com fake virus file for testing the scan engine mentioned by symantec http://securityresponse.symantec.com/security_response/writeup.jsp?docid=2003-121611-3209-99.

    But i copied the same file to my Endpoint protection enabled machine, it detects and quarantined  right away.


    Is this due to the Trial version limitation of scan engine or am i missing something.??

     

    Cheers

    Ramesh vel



  • 2.  RE: EICAR.Com fake virus file is not detected by ScanEngine

    Broadcom Employee
    Posted Nov 16, 2010 02:39 AM

    arethe services of scan engine running?

    it's the feature of Auto Protect that detcts the threat.



  • 3.  RE: EICAR.Com fake virus file is not detected by ScanEngine

    Posted Nov 16, 2010 02:42 AM

     I dont think its active without license; please update the license



  • 4.  RE: EICAR.Com fake virus file is not detected by ScanEngine

    Posted Nov 16, 2010 02:52 AM

    Yeah pete, its running. I was successful establishing connection and initiatinf scan.

     



  • 5.  RE: EICAR.Com fake virus file is not detected by ScanEngine

    Broadcom Employee
    Posted Nov 16, 2010 03:13 AM

    i assume the trial should work with Eicar, let know if the URL is helpful

    http://www.symantec.com/business/support/index?page=content&id=TECH134229



  • 6.  RE: EICAR.Com fake virus file is not detected by ScanEngine

    Posted Nov 16, 2010 04:01 AM

    Hi pete,

           thanks for the link, i have dowloaded all the test files from eicar site. But none of them detected by scan engine.