Tests Help
Software – Windows
Anti-virus
Description
This test verifies that the endpoint attempting to connect to your system has
the latest anti-virus software installed, that it is running, and that the virus
definitions are up-to-date.
Test Properties
Select the anti-virus software allowed on your network. Any endpoint that
does not have at least one of the anti-virus software packages selected will
fail this test. You can also enter a value in the Last scan performed within text
field, which requires the anti-virus software to have executed a scan on the
endpoint within the set number of days.
How Does this Affect Me?
Anti-virus software scans your computer, email, and other files for known
viruses, worms, and trojan horses. It searches for known files and automati-
cally removes them. A virus is a program that infects other programs and files
and can spread when a user opens a program or file containing the virus. A
virus needs a host (the program or file) to spread.
A worm is a program that can also perform malicious acts (such as delete files
and send email); however, it replicates itself and does not need a host (pro-
gram or file) to spread. Frequently, worms are used to install a backdoor (a
way for an attacker to gain access without having to login).
A trojan horse is a stand-alone program that is not what it seems. For example,
it may seem to be calendar program, but when you open it, it erases all your
files and displays a message, such as "Ha ha, I deleted your files!" Trojan horse
programs do not spread or replicate themselves.
What Do I Need to Do?
Make sure you have an anti-virus program installed, and that the virus defini-
tions are kept up-to-date.
The following link provides more information on anti-virus software and
protecting your computer:
http://www.us-cert.gov/cas/tips/ST04-005.html
A-35