windows event ID when finding a virus??

28/04/2005, 15h57

Hello,
I am using Symantec Antivirus and Norton Antivirus as antivirus
software in my network. Because I want to monitor my network with
whats'sup, I need the eventID that I get in the event manager when a
virus is found.
(For example, if a file could not be opened, the event ID I get is 6
(with as source Symantec Antivirus). Which is the corresponding event
ID when a virus is found???

Thanx in advance

28/04/2005, 17h49

paul b wrote:

> I am using Symantec Antivirus and Norton Antivirus as antivirus
> software in my network. Because I want to monitor my network with
> whats'sup, I need the eventID that I get in the event manager when a
> virus is found.
> (For example, if a file could not be opened, the event ID I get is 6
> (with as source Symantec Antivirus). Which is the corresponding event
> ID when a virus is found???

You can use the Eicar test file to find out.

Newsgroups narrowed, follow-ups set.

Thor

--
http://www.anta.net/OH2GDF

29/04/2005, 04h29

In news:1f716d42.0504280657.43fe5937@posting.google.c om,
paul b <bisibis@pt.lu> had this to say:

My reply is at the bottom of your sent message:

> Hello,
> I am using Symantec Antivirus and Norton Antivirus as antivirus
> software in my network. Because I want to monitor my network with
> whats'sup, I need the eventID that I get in the event manager when a
> virus is found.
> (For example, if a file could not be opened, the event ID I get is 6
> (with as source Symantec Antivirus). Which is the corresponding event
> ID when a virus is found???
>
> Thanx in advance

I don't know if NAV does but I know KAV doesn't (from my logs though it
could be my configuration) write an event to the event log when viruses (or
is that virii??? no one seems to know) found. All I can say is you've been
told where to download eicar which might trigger the event if, indeed, one
is found. I just tested that and nothing came up in mine.

Galen
--

"My mind rebels at stagnation. Give me problems, give me work, give me
the most abstruse cryptogram or the most intricate analysis, and I am
in my own proper atmosphere. I can dispense then with artificial
stimulants. But I abhor the dull routine of existence. I crave for
mental exaltation." -- Sherlock Holmes

28/04/2005, 15h57	#1 (permalink)
paul b Messages: n/a Hébergeur:	windows event ID when finding a virus?? Hello, I am using Symantec Antivirus and Norton Antivirus as antivirus software in my network. Because I want to monitor my network with whats'sup, I need the eventID that I get in the event manager when a virus is found. (For example, if a file could not be opened, the event ID I get is 6 (with as source Symantec Antivirus). Which is the corresponding event ID when a virus is found??? Thanx in advance

28/04/2005, 17h49	#2 (permalink)
Thor Kottelin Messages: n/a Hébergeur:	Re: windows event ID when finding a virus?? paul b wrote: > I am using Symantec Antivirus and Norton Antivirus as antivirus > software in my network. Because I want to monitor my network with > whats'sup, I need the eventID that I get in the event manager when a > virus is found. > (For example, if a file could not be opened, the event ID I get is 6 > (with as source Symantec Antivirus). Which is the corresponding event > ID when a virus is found??? You can use the Eicar test file to find out. Newsgroups narrowed, follow-ups set. Thor -- http://www.anta.net/OH2GDF

29/04/2005, 04h29	#3 (permalink)
Galen Messages: n/a Hébergeur:	Re: windows event ID when finding a virus?? In news:1f716d42.0504280657.43fe5937@posting.google.c om, paul b <bisibis@pt.lu> had this to say: My reply is at the bottom of your sent message: > Hello, > I am using Symantec Antivirus and Norton Antivirus as antivirus > software in my network. Because I want to monitor my network with > whats'sup, I need the eventID that I get in the event manager when a > virus is found. > (For example, if a file could not be opened, the event ID I get is 6 > (with as source Symantec Antivirus). Which is the corresponding event > ID when a virus is found??? > > Thanx in advance I don't know if NAV does but I know KAV doesn't (from my logs though it could be my configuration) write an event to the event log when viruses (or is that virii??? no one seems to know) found. All I can say is you've been told where to download eicar which might trigger the event if, indeed, one is found. I just tested that and nothing came up in mine. Galen -- "My mind rebels at stagnation. Give me problems, give me work, give me the most abstruse cryptogram or the most intricate analysis, and I am in my own proper atmosphere. I can dispense then with artificial stimulants. But I abhor the dull routine of existence. I crave for mental exaltation." -- Sherlock Holmes

Outils de la discussion
Afficher une version imprimable Envoyer un lien vers cette page par email