Actions Taken With The Files - KAPERSKY ANTI-VIRUS 5.0 - FOR LINUX FREEBSD-OPENBSD MAIL SERVER Administrator's Manual

Advanced settings
Corrupted – The file is corrupted.
Protected – The file is password-protected.
With the disinfection mode enabled (section [scanner.options], parameter
Cure=yes) only those files that have the status Infected are sent for anti-virus
processing. After cleaning the file it is assigned one of the following statuses:
Cured – The file was disinfected successfully.
CureFailed – The file failed to be disinfected. Files with such a status will
be processed according to the rules specified for infected files.
You can enable the disinfection mode remotely using the Kaspersky
Anti-Virus
Figure 18).

6.2.3. Actions taken with the files

Depending on the status of the file (see section 6.2.2 on page 89) different
actions can be taken with it. By default, notification is made only of detected files
that have a certain status. These notification messages are output to the console
and to the report.
However, for files that have the statuses Infected, Suspicious, Warning and
Corrupted, a number of actions can be set up including:
Moving to a certain directory – The files that have a certain status are
moved to a preset directory. They can be moved either simply or
recursively.
Deleting the file from the file system.
Executing a certain command – the files are processed using standard
Unix commands, script files etc.
It should be noted that Kaspersky Anti-Virus
and compound objects (composed of more than one object – an archive).
Actions taken with these two kinds of objects are different too; they are divided in
different sections in the configuration file. For simple objects – [scanner.object]
section, for compound ones – [scanner.container].
®
On-Demand Scanner tab of the Webmin program (see
For the file types Protected and Cured notification can only be
output to the console and to the report.
®
distinguishes simple objects (a file)
90