>
> "Antivirus � Protecting systems from viruses that may reside in an AD is
> virtually impossible at this time. None of the major anti-virus vendors
> are capable of detecting viruses in alternate streams with scheduled file
> scans. The best protection available currently is to enable real-time
> virus scanning on systems. With real-time scanning if a virus in an ADS
> is executed the system will scan it as it is accessed on the disk. If it
> has a known signature the virus software should protect the system.
> However, on most production systems the resources consumed by real-time
> scanning make this option less than desirable."
I am not so sure that realtime protection works. We have seen systems that were not protected by it, and have seen similar reports from other ResNet admins. Typical symptom is that without any noticable trigger suddenly explorer.exe becomes a spam engine. I would at the very least scan your harddisk with Crucial ADS: http://www.crucialsecurity.com/downloads.html
Jochem
[Todays Threads] [This Message] [Subscription] [Fast Unsubscribe] [User Settings]
