User Guide

Additional settings of Kaspersky Anti-Virus 37
• INFECTED – the object is infected and cannot be cured or disinfection
has not been attempted.
• CURED – the object was infected; it has been cured successfully.
• WARNING – the object contains code that resembles a known virus.
• SUSPICIOUS – the object is suspected of being infected with an
unknown virus.
• PROTECTED – the object is password-protected and therefore it cannot
be scanned.
• CORRUPTED – the object is damaged.
• ERROR – object scanning resulted in an error.
Actions performed by Kaspersky Anti-Virus over objects with a specific status are
determined by the parameters in the [icapserver.actions] section (for the
default group) and [icapserver.actions:<group name>] section (for groups
created by the administrator):
• InfectedAction – action over an infected object that has not been cured
or cannot be cured.
• SuspiciousAction – action over an objects suspected of being infected
with an unknown virus.
• WarningAction – action over an object containing code that resembles a
known virus.
• ErrorAction – action over an object that has been assigned the ERROR
status.
• ProtectedAction – action over a password-protected object.
• CorruptedAction – action over a damaged object.
• CuredAction – action over a disinfected object.
The listed parameters can take the following values:
• skip – allows object transfer.
• deny – prohibits object transfer replacing such object with a
corresponding notification file.
If deny is the action used on an object, then, depending upon the object's status,
it will be replaced with one of the following placeholder files located in the
/opt/kav/5.5/kav4proxy/share/notify: directory:
• object_infected – template containing a notification about detection of an
infected object.