Norman SandBox
Norman’s SandBox technology detects new and unknown computer viruses, including trojans and worms. Today, an email worm can infect tens of thousands of workstations in a matter of seconds. The antivirus vendors are expected to find the cure, update the virus definition files, and distribute these to its customers immediately. The need for speed is paramount. Norman’s SandBox is a virtual world where everything is simulated. An emulator provides an environment where possible virus infected executables “run" just as they would do on a real system. When execution stops, the SandBox is analyzed for changes. The SandBox is particularly tuned to find new email-, network- and peer-to-peer worms.

Installation
Norman Virus Control for Linux is available in the three most popular package formats for Linux; RPM, DEB and TGZ.
 

Command line scanner
This scanner is used to manually scan selected areas of a machine for viruses.

The On-demand scanner can use Norman’s SandBox technology to further increase protection by detecting new unknown computer virus, worms, trojans before they can cause harm.

NVC for Linux can also scan remote NFS volumes. Local users can also scan their home directories for possible malware.
 

Automatic updates
Norman Internet Update (NIU) is an integrated part of NVC and can be configured with a 3rd party sheduler to regularly check for new and updated files on Norman’s product servers. NIU provides complete updating and upgrading of the application software and virus definition files to ensure that the latest version of the software is always installed.

NIU employs incremental updates of virus definition files to keep the size of the updates as small as possible, thereby reducing download time.

With the use of SAMBA application, it is possible to update Windows 32-bit clients in the network from a Linux server acting as a NVC distribution server. This provides a “total" antivirus solution to those companies that use Linux as their server platform and Windows as operating system on their workstations.
 

Decompression library
A new advanced decompression module has been developed to scan files that have been compressed with different archive programs. With this module NVC can now scan more than 30 archive types and variants like ZIP, TAR, RAR, ARJ, UUENCODE, ARC etc. Files that contain other files of different archive formats will also be scanned to further increase security. In addition, if malware is found within an archived file, NVC will - if possible - clean the infection and repack the file (only valid for some formats)

.