KAPERSKY ANTI-VIRUS 5.7 - FOR LINUX FILE SERVER Administrator's Manual page 67

Appendix A
contained in the standard set, signatures of riskware, including adware
and remote administration programs.
Section [monitor.path] includes settings that define paths to most important files
without which the kavmonitor module will not function.
BackupPath= path – full path to the directory containing backup copies of
the objects scanned.
PidFile=path – full path to pid file of the kavmonitor component.
Section [monitor.actions] contains settings that define actions to be performed
with objects of certain types during real-time anti-virus protection.
OnInfected=action – actions to be performed when an infected file is de-
tected. If the mode of disinfection of infected files is turned on, then the
specified action will be performed with objects that could not be disin-
fected.
OnSuspicion=action – actions to be performed when a suspicious file is
detected. The file contains code which resembles a virus, but one not
known yet to Kaspersky Lab.
OnWarning=action – actions to be performed in case of a detection of a file
containing code which resembles the code of a known virus.
OnCured=action – actions to be performed in case of a detection and suc-
cessful disinfection of an infected object.
OnProtected=action – actions to be performed when a password-protected
object is detected. Such objects cannot be scanned.
OnCorrupted=action – actions to be performed when a corrupted file is de-
tected.
OnError=action – actions to be performed if a system error occurred during
the object scan.
The syntax of the action setting consists of two parts: the action itself
and an optional parameter separated by a space. The value of the op-
tional parameter is entered in quotes. For example, OnInfected=move
"/tmp/infected".
The action may accept one of the following values:

move <directory> – move file into <directory>.

movePath <directory> – move file to <directory> recursively
(with the absolute path).

remove – delete the file.

exec <parameter> – perform on the object the action defined by
the value <parameter>.
67