Actions on mail objects

Kaspersky Anti-Virus processes objects in accordance with their assigned status following anti-virus scanning and filtering of attachments. Uninfected objects are returned to the mail system without any changes. Actions on infected, not scanned, and protected objects can be configured by the administrator. Actions to be taken by the application are defined separately for each object status.

The following actions are taken on objects by default:

• If an object is labeled as infected, Kaspersky Anti-Virus disinfects it and returns the disinfected object to the mail system.
• If an object could not be scanned (for example, the time assigned for scanning has elapsed) or the object is a password-protected archive, Kaspersky Anti-Virus skips this object.

By default, copies are stored in the Quarantine database before objects are cured or deleted. Information about detected objects and actions taken on them is recorded in the Event log and statistics database.

After all objects included in the email message undergo anti-virus scanning and the configured actions are taken on them, the entire email message can be subjected to one of the following additional actions:

• additional information can be added to a subject or message body.
• notifications are composed and delivered to senders, recipients and administrators (notification is disabled by default).
• the entire original message is moved to the Quarantine database if an infected object has been detected in the message.