Why EICAR file is not removed every time during the test?
Applies to
- ONTAP 9
- VSCAN
- EICAR
Answer
- Vscan engine cannot handle all scan requests due to Internal error and the EICAR file is not removed.
- In AVSHIM log similar errors can be seen:
03/30/21-21:34:53.161Z Sending id 103 (rsrv-id: 7) for \\?\UNC\10.10.10.11\ontap_admin$\AV Test\New Test 30 Mar\eicar.com
03/30/21-21:34:53.161Z Sent!
03/30/21-21:34:53.161Z VS_ScanCompletion: request id 103 of path \\?\UNC\10.10.10.11\ontap_admin$\AV Test\New Test 30 Mar\eicar.com completed with status[333300002, VSENGINE_SCAN_FAILED], str 'E'
Additional Information
- How to enable ONTAP Antivirus Connector Logging
- Eicar test file can be found on: eicar.org