RSJ> Methods can vary, but as most people with LAN's know you have to make
RSJ> backups, since we were building this server from scratch with the
RSJ> files on it, we did a byte level comparison to tape and set the abort
RSJ> level as 100,000 file errors.
Richard this will not mean that you have 100,000 viruses infections.
It could mean a lot of other things also. Maybe, you have 100,000
corrupted files. 50,000 viruses infections, 50,000 corrupted files.
1 infected files 99,999 corrupted files etc... Viruses do not always
infect hosts correctly and just may corrupt the file with the virus
body or part of the body. Some virus scanners will identify these
corrupted files as REAL viruses. Unfortunetly, they are not REAL viruses
only corrupted files. You method for testing viruses scanners does not
work.
Step 1. Let competent people do anti-virus scanner testing.
If Step 1 fails goto step 1
How many different viruses did you use? How did you know that these
were real viruses? How do you know that they correctly infected the
host files? How did you activate the viruses in your test set?
What was you test system? You tested the scanners on a server? Did
you use server versions or stand alone versions? If you used stand
alone versions on a server why?
Please list the viruses you used in your tests? How did you choose
a number of 100,000? Why did you choose a test set to have 100,000
infected hosts?
RSJ> This also gave us a quick builing function because we knew the series
RSJ> of files on the tape were clean, just put multiple copies out there
RSJ> first. backed it up completely as 1 server with 400,000 files. Then
RSJ> started contamination procedure and quit when we got 100,000 file
RSJ> comparison errors.
The only way to do accurate virus scanner testing is to build a quality
virus zoo the old fashion way. Replicate each virus yourself. This is
the ONLY way you can be accurate. Doing a server backup and compare
will tell you absolutely NOTHING about the quality of a antivirus
scanner.
Sincerely,
Keith A. Peer
... Central Command Inc. U.S. Distributor for AVP and HS
 * Silver Xpress V4.4P [Reg]
--- InterEcho 1.19
---------------