Selecting actions for dangerous e-mail objects

If an email virus scan shows that an e-mail or any of its parts (header, body, attachment) is infected or is suspected to be infected, the further operations of E-mail Anti-Virus depend on the status of the object and the action selected.
One of the following statuses can be assigned to the e-mail object after the scan:
By default, upon detection of a dangerous or suspicious object, E-mail Anti-Virus displays a warning on the screen and offers a choice of several actions for the object.
To change an action for an object,

open the Active Virus Shield settings window and select E-mail Anti-Virus. All possible actions for dangerous objects are listed in the Action section.

Let's look at the possible options for processing dangerous e-mail objects in more detail.

If the action selected was
When a dangerous object is detected
Prompt for action
E-mail Anti-Virus will issue a warning message containing information about what malicious program has infected (potentially infected) the file and gives you the choice of one of the following actions.
Block access
Mail Anti-Virus will not process the object. Information about this is recorded in the report. You can attempt to disinfect this object later.
Block access
      Disinfect
E-mail Anti-Virus will block access to the object and take one of the following actions:
  • attempt to treat the infected object. If it is successfully disinfected, it will available for regular use. If the object cannot be disinfected, access to it will be blocked. Information about this is recorded in the report. You can attempt to disinfect this object later.
  • move the potentially infected object to Quarantine. You can attempt to disinfect this object or restore it to its original location.
Block access
      Disinfect
      Delete
      if disinfection fails1
E-mail Anti-Virus will take one of the following actions:
  • attempt to treat the infected object. If it is successfully disinfected, it will available for regular use. If the object cannot be disinfected, it is deleted.
  • move the potentially infected object to Quarantine.
Block access
      Disinfect
      Delete
When Mail Anti-Virus detects an infected or potentially infected object, it deletes it without informing the user.
1If The Bat! is used as a mail client and this action of Mail Anti-Virus is applied, dangerous objects will be either disinfected or deleted (depending on the type of action, selected in The Bat!).
Regardless of the status of the object (infected or suspicious), before attempting to treat the object or delete it, Active Virus Shield creates a backup copy and sends it to backup in case the object needs to be restored.
Also see:

Pausing and disabling e-mail protection

Selecting an e-mail security level