What Should Be Sent - F-SECURE CLIENT SECURITY 7.00 Administrator's Manual

10.4.2 What Should Be Sent

All ZIP packages should be named using only English letters or/and
numbers. You can use long file names. If you send multiple archives (for
example because of e-mail server limitations) please either send them in
separate messages or add a counter to the archive parts, for example:
sample_part1.zip
sample_part2.zip
...
sample_part18.zip
Your e-mail server or ISP (Internet Service Provider) may have an
e-mail scanner (antivirus program that checks all incoming and
outgoing messages for viruses). Your virus samples might be
deleted before they get to us. Send samples in a
password-protected ZIP archive. You can send the password for
the archive in the same or in a separate e-mail.
Viruses are not all of the same type, so they cannot all be sent in one
specific way. The following lists what to send according to the virus types:
1. Macro virus
Send an infected copy of the NORMAL.DOT file (the global template)
in addition to the infected DOC files. With Excel viruses, send the
PERSONAL.XLS file, if it exists, in addition to the infected XLS files. If
the macro virus also infected other applications (for example Tristate),
send a sample of every file type.
2. Virus that infects executable files
Try to get different infected files from your system. Usually 3-5
different samples are enough. If possible, add clean copies of the
same files as well (taken from backups). To do this, use two
directories in your zip file, for example:
ORIGINAL\APPPEND.EXE
ORIGINAL\COMMAND.COM
INFECTED\APPEND.EXE
INFECTED\COMMAND.COM
CHAPTER 10 247