User Guide - Kaspersky Lab

File Anti-Virus 93
7.2.6. Selecting actions for objects
If File Anti-Virus discovers or suspects an infection in a file while scanning it for
viruses, the program’s next steps depend on the object’s status and the action
selected.
File Anti-Virus can label an object with one of the following statuses:
• Malicious program status (for example, virus, Trojan).
• Potentially infected, when the scan cannot determine whether the object
is infected. This means that the program detected a sequence of code in
the file from an unknown virus or modified code from a known virus.
By default, all infected files are subject to disinfection, and if they are potentially
infected, they are sent to Quarantine.
To edit an action for an object:
open the application settings window and select File Anti-Virus under
Protection. All potential actions are displayed in the appropriate sections
(see Figure 24).
Figure 24. Possible File Anti-Virus actions with dangerous objects
If the action selected was When it detects a dangerous object
Prompt for action File Anti-Virus issues a warning message
containing information about what malicious
program has infected or potentially infected the
file, and gives you a choice of actions. The choice
can vary depending on the status of the object.
Block access
File Anti-Virus blocks access to the object.
Information about this is recorded in the report
(see 19.3 on pg. 240). Later you can attempt to
disinfect this object.