User Guide

Administrator’s Guide 37
Setting Policy for On-Access Scanning
3. Under When a Virus is Found, select one of these options:
• Deny access to infected files and continue. Denies any user
access to an infected file. If you select this option, be sure to enable
the logging option so that you have a record of which files are
infected. See“Report options” on page 39 for details.
TIP: When you select this option, the scanner automatically
stops read and copy operations for any file that it identifies as
infected. Asaresult, the infection cannotbe transmitted once it
is identified. McAfee recommends that you select this option if
you plan to leave your server unattended for long periods.
When you areable to return your attention to the server, you
can then verify the infection, and decide whether to clean the
infection, delete the file, or restore an earlier version of the file
from backups.
• Move infected files automatically. The scanner moves infected
files to a quarantine folder as soon as it finds them.
By default, the first time that the scanner moves a file, it creates a
folder named Infected, which it uses to store quarantined files. The
default path of the quarantine file is:
<drive>:\Infected
Here, drive refers to the client disk on which the virus was detected.
If you prefer, you can enter a different name or path.
• Clean infected files immediately. The scanner removes the virus
code from the infected file as soon as it finds it.
• Delete infected files immediately. The scanner deletes every
infected file itfinds. Besure toenablethelogging feature sothatyou
have a recordof the filesthat theapplicationdeleted. You will need
to restore deleted filesfrom backup copies.If the applicationcannot
delete an infected file, it notes the incident in its log file.
For more information about the status of infected files relative to the
outcome of the scanning activity, see page 39.
4. If you want the scanner to warn users that the file they opened, copied
from,orsavedisinfected,selectSend message to user,then,inthebox
provided, enter the message you want users to see.