Actions Taken With The Files - KAPERSKY Anti-Virus 5.0 for Linux, FreeBSD and OpenBSD File Server Administrator's Manual

Advanced settings
Clear – No viruses were detected in the file.
Infected – The file is infected.
Warning – The code of the file is similar to that of a known virus.
Suspicious – The code of the file is similar to that of an unknown virus.
Corrupted – The file is corrupted.
Protected – The file is password-protected.
With the disinfection mode enabled (section [scanner.options], parameter
Cure=yes) only those files that have the status Infected are sent for anti-virus
processing. After cleaning, a file is assigned one of the following statuses:
Cured – The file was disinfected successfully.
CureFailed – The file failed to be disinfected. Files with such a status will
be processed according to the rules specified for infected files.
You can enable the disinfection mode remotely using the Kaspersky
Anti-Virus
Figure 4).

5.1.3. Actions taken with the files

Depending on the status of the file (see section 5.1.2 on page 40) different
actions can be taken with it. By default, notification is made only of detected files
that have a certain status. These notification messages are output to the console
and to the report.
However, for files that have the statuses Infected, Suspicious, Warning and
Corrupted, a number of actions can be set up including:
Moving to a certain directory – The files that have a certain status are
moved to a preset directory. They can be moved either simply or
recursively.
Deleting the file from the file system.
Executing a certain command – the files are processed using standard
Unix commands, script files etc.
It should be noted that Kaspersky Anti-Virus
and compound objects (composed of more than one object – an archive).
®
On-Demand Scanner tab of the Webmin program (see
For the file types Protected and Cured, notification can only be
output to the console and to the report.
®
distinguishes simple objects (a file)
41