Selecting the action to take on infected files

January 10, 2024

ID 132121

You can specify the actions that Kaspersky Security will perform when it detects infected files.

To specify actions to take on infected files, execute the following command:

lightagent scan [<path to the file or folder>] [--i<0-4>]

where:

  • <path to the file or folder> – path to the file or folder that you want to scan for viruses and other malware. If you do not specify the paths to files or folders, the application scans all objects of the file system of the protected virtual machine.
  • i0 – on detecting infected files, perform the Inform action. If this parameter is specified, Kaspersky Security informs you about the detection of infected files.
  • i1 – on detecting infected files, perform the Disinfect action. If this parameter is specified, Kaspersky Security automatically attempts to disinfect all infected files that are detected. If disinfection fails, the application leaves such files unchanged.
  • i2 – on detecting infected files, perform the Disinfect action. Delete if disinfection fails. Skip compound files if they cannot be disinfected or deleted. If this parameter is specified, Kaspersky Security automatically attempts to disinfect all infected files that are detected. If disinfection fails, the application removes them. If the infected file is part of a compound file and cannot be deleted, the application leaves this file unchanged.
  • i3 – on detecting infected files, perform the Disinfect action. Delete if disinfection fails option is selected by default. If this parameter is specified, Kaspersky Security automatically attempts to disinfect all infected files that are detected. If disinfection fails, the application removes them. If the infected file is part of a compound file and cannot be deleted, the application deletes the entire compound file. This action is performed by default.
  • i4 – on detecting infected files, perform the Delete action. If this parameter is specified, Kaspersky Security automatically deletes the infected file, having first created a backup copy of the file. If the infected file that is part of a compound file cannot be deleted, the application deletes the entire compound file.

Did you find this article helpful?
What can we do better?
Thank you for your feedback! You're helping us improve.
Thank you for your feedback! You're helping us improve.