KAPERSKY ANTI-VIRUS 5.5 - FOR LINUX-FREEBSD WORKSTATION AND FILE SERVER Administrator's Manual page 57

Appendix A
Section [scanner.container] includes settings that determine actions to be
performed with archives during the anti-virus protection of the server's file
systems.
OnCorrupted=action – actions to be performed in case of a detection of a cor-
rupted container.
OnInfected=action – actions to be performed in case of a detection of an in-
fected objects in the container. If the mode of disinfection of infected files is
turned on, then the specified action will be performed with containers that could
not be disinfected after all other actions with the objects of the container have
been completed.
OnSuspicion=action – actions to be performed in case of a detection of a sus-
picious object inside a container.
OnWarning=action – actions to be performed in case of a detection inside a
container of an object the code of which resembles the code of a known virus.
OnCured =action – actions to be performed in case of a detection inside a con-
tainer of an infected file that was successfully disinfected.
OnProtected=action – actions to be performed in case of a detection of a
password-protected object. Such objects cannot be scanned.
OnError=actions – actions to be performed if an error occurred during the con-
tainer scan.
The syntax of the action setting consists of two parts: the action itself and
an optional parameter divided with a space. The value of the optional pa-
rameter is entered in quotes. For example,
"/tmp/infected"
The action may accept one of the following values:
•
•
absolute path).
•
•
the value <parameter>.
The following is used as macros of the optional parameter of the exec ac-
tion for the containers:
•
rupted files found in the container. The file format is as follows:
<virus name>\t<filename>.
•
move <folder> – move file into <folder>.
movePath <folder> – move file to <folder> recursive (with the
remove – delete the file.
exec <parameter> – perform with the object action defined by
%LIST% – filename or the list of infected, suspicious and cor-
%FULLPATH% – full path to the container.
OnInfected=move
57