CHAPTER 5. ADDITIONAL
SETTINGS
The following databases are used by Kaspersky Anti-Virus for Lotus
Notes/Domino during its operation:
•
Quarantine
database for
:
•
Database objects
, i.e. objects quarantined after being scanned
by the
Kavdbscanner
and
Kavreplmonitor
modules.
•
E-mail messages
, i.e. objects quarantined after scanning by
the
Kavmailmonitor
module.
•
Worklog
– database used to store reports about the events occurring
during operation of Kaspersky Anti-Virus.
•
Statistics
– database used to store results of the anti-virus scan of each
object.
5.1. Quarantine database
Quarantine is a special storage used to isolate objects suspected of infection
with viruses or modifications thereof.
Sometimes there is no way to identify unambiguously whether an object is
infected or clean. The reasons for that are as follows:
•
The object being scanned contains the code that resembles a known
threat but it is partially different.
If malware evolves and the anti-virus databases do not yet reflect these changes,
Kaspersky Anti-Virus will recognize an object containing newer malware as
suspicious and it will certainly indicate the malware type that the infection seems
to resemble.
•
The detected object contains code structures resembling malware.
It is likely to be a new malware type, so Kaspersky Anti-Virus views such objects
as suspicious.
Relocating objects to Quarantine can be useful if an object is infected and cannot
be cured at the moment. However, if this object contains valuable information,
we recommend isolating it in Quarantine database and later – scanning it again
using an updated anti-virus database.