 |
Suspicious objects discovered |
If File Anti-Virus, E-Mail Anti-Virus, or a virus scan detects an object containing code from an unknown virus or modified code of a known virus, a special notification will pop up.
The notification will contain:
- The name of the component that detected the object (for example, Virus scan).
- The threat type (for instance, virus modification) and name of the object as listed in the Kaspersky Lab Virus Encycopedia. The name of the dangerous object is given as a link to www.viruslist.com, where you can find more detailed information on the type of threat detected on your computer.
- Full name of the object and a path to it.
- Brief description and a set of potential actions to take for the object. This description shows what sort of object the dangerous program has infected.
You are asked to select one of the following responses to the object:
- Quarantine - Move the suspicious object to Quarantine. When you place an object in Quarantine, it is moved, not copied. The object is deleted from the disk or e-mail and is saved in the Quarantine folder. Files in Quarantine are saved in a special format and are not dangerous.
When you scan Quarantine later with updated threat signatures, the status of the object could change. For example, the object may be identified as infected and can be processed using an updated database. Otherwise, the object could be assigned the status not infected and could be restored.
- Delete - delete the object. Before deleting, a backup copy is made of the object in case the necessity arise to restore it or a portrait of its infection.
- Skip - block access to the object but take no actions on it; simply record information about it in the report.
You can later come back to skipped objects in the report window. However, you cannot postpone processing objects detected in e-mails.
You can apply the selected action to all objects with the same status detected in the current session of the program. To do so, check
Apply in all similar cases.