2.2. Antivirus; Virus_Found (Id: 05800001); Virus_Found (Id: 05800002) - D-Link NetDefend SOHO DFL-160 Reference Manual

2.2. ANTIVIRUS

2.2. ANTIVIRUS
These log messages refer to the ANTIVIRUS (Anti-virus related events) category.

2.2.1. virus_found (ID: 05800001)

Default Severity
Log Message
Explanation
Gateway Action
Recommended Action
Revision
Parameters
Context Parameters

2.2.2. virus_found (ID: 05800002)

Default Severity
Log Message
Explanation
Gateway Action
Recommended Action
Revision
Parameters
Context Parameters
WARNING
Virus found in file <filename>. Virus Name: <virusname>. Signature:
<virussig>. Advisory ID: <advisoryid>.
A virus has been detected in a data stream. Since anti-virus is running
in protect mode, the data transfer will be aborted in order to protect the
receiver.
block_data
If the infected file is local, run anti-virus program to clean the file.
1
filename
virusname
virussig
advisoryid
[layer7_srcinfo]
[layer7_dstinfo]
ALG Module Name
ALG Session ID
Connection
WARNING
Virus found in file <filename>. Virus Name: <virusname>. Signature:
<virussig>. Advisory ID: <advisoryid>.
A virus has been detected in a data stream. Since anti-virus is running
in audit mode, the data transfer will be allowed to continue.
allow_data
If the infected file is local, run anti-virus program to clean the file.
1
filename
virusname
virussig
advisoryid
[layer7_srcinfo]
[layer7_dstinfo]
ALG Module Name
ALG Session ID
Connection
98
Chapter 2. Log Message Reference