|
http://smtp25.blogspot.com/ |
|
Forefront SharePoint Virus upload Test |
|
Forefront Virus Test |
|
|
|
Oz.ozugurlu |
|
1/7/2009 |
From one of the recent project I was giving task to document what user experience would be when they upload the “effected document” to one of the websites within share point, MOSS.
Installation share point was very straight forward and easy and I am including MS best practices link in this article. Simulation user experience ahead of time was fun and I used hand from close body Pushpendu Biswas.
Here are the notes and hope helps someone out there.
Forefront SharePoint
-
Verify that antivirus has been configured in MOSS:
-
In Central Administration navigate to Operations
-
In the Security Configuration section select Antivirus
-
Make sure that Scan documents on upload and Scan documents on download are checked
Preparation
-
Open your notepad and copy and paste this and save it as “Virus_Test.txt”
-
Open your MOS and go to any site
-
Click on shared documents
-
Click Upload, browse to same file, click open and ok to upload it to the site
-
You will receive
|
Virus Found "SMTP25.org_Virus_Test.txt" contains the following virus: "VIRUS= EICAR_test_file (VBuster,Kaspersky5,AhnLab,Microsoft,Sophos); Tagged ID: B08F17DD_DF65_4B87_9364_B0EF1CF11205" . This file cannot be saved to the document library. If you want to save this file to the document library, clean the file using alternative virus scanning software and try saving it again. Troubleshoot issues with Windows SharePoint Services. |
Here is Virus file, Copy and paste this into notepad and save it on the local hard drive MOSS server to be uploaded into one of the sites to test the Forefront functionality.
|
X5O!P%@AP[4\PZX54(P^)7CC)7}$EICAR-STANDARD-ANTIVIRUS-TEST-FILE!$H+H* |
USER Experience when infected file is uploaded
User is uploading infected file to the SharePoint site names MCC home
As it is seen on the screen the file has been blocked by Forefront security and user had received working page
If you find this document useful please take minute to leave comments to my blog site as professional courtesy.
Thanks
Oz ozugurlu
Oz ozugurlu MVP (Exchange)
MCITP (EMA), MCITP (EA) MCITP (SA),
MCSE (M+, S+) MCDST,
Security+, Server +, Project+
Blog: http://smtp25.blogspot.com/
Blog: http://telnet25.wordpress.com/