User Guide

Administrator’s Guide 39
Setting Policy for On-Access Scanning
* There are cases where an infected file is written to disk intact even if you have selected When writing to disk on the scanner’s
detection property page. This includes the extremely rare circumstances where the deletion command fails. In those cases the virus
cannot be activated until a user attempts to open, copy, or move the infected file. At that time, the file will be scanned if you have
selected When reading from disk on the scanner’s detection property page.
Report options
The scanner lists its current settings and summarizes all of the actions it takes
during its scanning operations in a log file, which, by default is called
VSHLOG.TXT. You can accept the defaults, or make selections to customize
your log file, which you can open and print for later review.
You can use the log file to track virus activity on your system and to note
which settings the program used to detect and respond to infections. You can
also use the incident reports recorded in the file to determine which files you
need to examine in quarantine, or delete from your computer.
Selected
Action
Outcome
Status of Infected File
Windows 95 and
Windows 98
Windows NT and
Windows 2000
Read from disk Written to disk Read from disk Written to disk
Deny
Access
Success
• Left intact
• Access denied
Deleted* • Left intact
•Accessdenied
Deleted*
Failure Not applicable. Denial of access to the file is always available.
Delete
Success Deleted
Failure
• Left intact
•AccessDenied
Left intact* • Left intact
•Accessdenied
Left intact*
Move
Success Movedtoquarantinefolder
Failure
• Left intact
• Access denied
Deleted* • Left intact
•Accessdenied
Left intact*
Clean
Success Cleaned
Failure*
• File name
acquires .
VIR
extension.
• Access denied.
Deleted* •Filename
acquires .
VIR
extension.
• Access denied.
Deleted*