Support articles

Find clear, step-by-step solutions to common WithSecure issues across installation, configuration, updates, and product performance.

Linux Security 64 real time scanning does not detect EICAR test file.

Issue:

When testing real-time scanning of Linux Security 64 with an EICAR test file, the eicar file is not detected as malicious. 

 

Resolution:

The real-time scanning feature for Linux Security 64 does not by default have any folders to files added to the Files and folders to scan list, which means that if you haven't added them the EICAR file will not be detected by real-time scanning. 

Steps to add files and folders to scan:

  1. Log in to the Policy Manager Console 
  2. Select a host or policy domain from the domain tree
  3. Open the Settings tab
  4. Navigate to the Linux > Real-time scanning settings page
  5. In the Files to scan section, add the files and paths in the Files and folders to scan field
  6. Distribute the policy (Ctrl + D)

From the same Linux > Real-time scanning settings page you can also make sure that real-time scanning is enabled from the General section by making sure Enable real-time scanning is ticked.