The infected attachments can be moved to Quarantine – a special directory (/var/drweb/infected), where the malicious objects are isolated from the rest of the system.
By default, the quarantine is enabled. To disable it, set the value No for the Quarantine enabled anti-virus parameter. In case quarantine is disabled, the infected objects will be deleted.
|
If a file moved to quarantine has the same name as a file that is already in quarantine, an index number will be added to the name of the new file. For example, the file file.com will be renamed to file.com_01, etc. |
The quarantined files can be reviewed and processed only by the superuser (root). The files can be removed from quarantine or saved on the disk.
|
In case Kerio MailServer versions from 6.2 to 6.7.2 inclusive are used, the cyrillic file names may be displayed incorrectly in logs and quarantine list. If the name of infected file that is moved to Dr.Web quarantine contains cyrillic symbols, these symbols are deleted from the file name. However, this error do not influence the messages delivery. |