2.7 Antivirus guard

Service "Antivirus" allows making anti-virus check of all incoming files hurriedly. As the scanner service uses ClamAV server working in local network:

http://clamav.net

http://sosdg.org/clamav-win32

That the scanner could process network streams, it is necessary to uncomment parameters TCPSocket and TCPAddr, and comment LocalSocket and FixStaleSocket in ClamAV adjustments (a file etc\clamd.conf).

In service parameters it is necessary to specify the address and port for ClamAV server, the size of the buffer for accepted files, a kind of the message, a field’s delimiter, a folder name for preservation and a storage period of log files in days.

In case of detection of a virus the text file is created. In this file the following things are fixed:

• date and time of visiting
• the address of the client
• the name of the found out signature
• the address of the document

For creation of the printed form of the report it is necessary to set its type (A – album orientation of page), to set an interval or the period of time and to press button "Create".

The ready report can be printed out or kept on a disk in format PDF.

Button "Clear" deletes all log files from a folder.

For check of serviceability we shall try to upload the test signature of a virus located in: http://eicar.org/85-0-Download.html

If adjustments of service and an antivirus are made correctly, the following message will appear in a window of a browser:

The message about the found virus will appear in case of if the size of the accepted file appears to be smaller, than the buffer size specified in parameters of service.

In the hyperpool.stream.net.smtp plugin "Antivirus SMTP" service is also located for checking incoming e-mail on the smtp-server.