OfficeScan 10.6 Administrator's Guide - Trend Micro™ Online Help

TABLE 6-15. Virus/Malware Scan Actions (Continued)
ACTION DESCRIPTION
Scanning for Security Risks
Clean OfficeScan cleans the infected file before allowing full access
to the file.
If the file is uncleanable, OfficeScan performs a second
action, which can be one of the following actions: Quarantine,
Delete, Rename, and Pass. To configure the second action,
go to Networked Computers > Client Management >
Settings > {Scan Type} > Action tab.
This action can be performed on all types of malware except
probable virus/malware.
Rename OfficeScan changes the infected file's extension to "vir".
Users cannot open the renamed file initially, but can do so if
they associate the file with a certain application.
The virus/malware may execute when opening the renamed
infected file.
Pass OfficeScan can only use this scan action when it detects any
type of virus during Manual Scan, Scheduled Scan, and Scan
Now. OfficeScan cannot use this scan action during Real-time
Scan because performing no action when an attempt to open
or execute an infected file is detected will allow virus/malware
to execute. All the other scan actions can be used during
Real-time Scan.
Deny Access This scan action can only be performed during Real-time
Scan. When OfficeScan detects an attempt to open or execute
an infected file, it immediately blocks the operation.
Users can manually delete the infected file.
6-35