Based on the full scan results, Kaspersky Anti-Virus 2011 for Mac assigns one of the following statuses to the objects detected:
malicious program (such as a virus or a Trojan)
potentially infected status when the scan cannot determine if the object is infected or not. This means that the application detected a sequence of the code from an unknown virus or a modified code from a known virus in the file.
Before attempting to disinfect or delete an infected object, Kaspersky Anti-Virus 2011 for Mac creates a backup copy of it to allow later restoration or disinfection.
How to define an action over detected threats
The default action for the Full Scan task is Prompt for action when the scan is complete. To define an action over detected threats, perform the following steps:
In the top left corner of the window click the Preferences button.
In the Preferences window go to the Virus Scan tab.
In the left part of the window select Full Scan.
In the right part of the Preferences window in the Action section select the necessary action.
To define an action over each detected object on your own:
Select the Prompt for action when the scan is complete option. At the end of scan Kaspersky Anti-Virus 2011 for Mac will notify you of all dangerous or suspicious events in the system and will prompt for an action: allow or block.
Select the Prompt for action during scan option. Kaspersky Anti-Virus 2011 for Mac will notify you of all dangerous or suspicious events in the system during scan and will prompt for an action: allow or block.
For the program to execute an action over each detected object:
Select the Do not prompt for action option:
Disinfect
Delete if disinfection fails (the option becomes active of the Disinfect option is checked)
Delete (even the objects that could be available after disinfection will be deleted)
Kaspersky Lab experts recommend to select the following actions to be performed on infected files:
Disinfect
Delete, if disinfection fails
In this case the application will perform the following actions:
Disinfect, if the file can be disinfected. Once disinfected, the file becomes available again.
Move to Quarantine, if after the analysis the application cannot determine whether the object is infected or not. If the option to scan the quarantined objects after each database update is checked, then the quarantined file will be disinfected, after the application receives new signatures, and becomes available again.
Delete, if the “virus” status is given to a file, but disinfection is impossible.
Close the Preferences and the main application windows.
Action on detected threats is defined.
To avoid unauthorized access to the Kaspersky Anti-Virus 2011 for Mac settings, it is recommended to “lock” the application settings after the changes were made.