|
Dr.Web for MIMEsweeper checks new messages only. The messages stored on the server before plug-in was installed are not scanned. |
Dr.Web for MIMEsweeper detects and neutralizes the following malicious objects:
| • | Viruses embedded in the mail message (Rich-Text or HTML format) |
| • | Infected attachments including: |
| • | Infected archives |
| • | Infected mail messages |
| • | Bomb viruses in files or archives |
| • | Adware |
| • | Hacktools |
| • | Dialer programs |
| • | Joke programs |
| • | Riskware |
Dr.Web for MIMEsweeper uses several detection methods to perform anti-virus checks on all e-mail messages transmitted via ClearSwift MIMEsweeper for SMTP. The infected messages are processed according to the Dr.Web Content Scanner scenario:
Setting |
Description |
|---|---|
Clean the detected item |
If you select this option on the Cleaning page of the New Content Scanner wizard, Dr.Web for MIMEsweeper attempts to cure infected objects. Cured messages are marked according to the On detected items cleaned option which you select on the Classifications page of the New Content Scanner wizard. |
Strip the detected item |
If you select this option on the Stripping page of the New Content Scanner wizard, Dr.Web for MIMEsweeper deletes infected objects. If this option is selected together with the Clean the detected item option, the plug-in first attempts to cure infected objects. If an object cannot be cured, the plug-in deletes it. Only incurable objects are deleted. Messages with deleted objects are marked according to the On detected items stripped option which you select on the Classifications page of the New Content Scanner wizard. |
Annotate the associated message |
If you select this option on the Cleaning or Stripping pages of the New Content Scanner wizard, Dr.Web for MIMEsweeper adds a text notification to the message about the performed operations. The text depends on the message category and scenario settings. |
On threat cannot be removed |
If you select this option on the Classifications page of the New Content Scanner wizard, the messages with the threat which cannot be neutralized are marked according to the selected option. (The default is Virus.) |
On detection, Dr.Web for MIMEsweeper attempts to cure infected objects, or deletes them if the cure option is not selected or the object cannot be cured. If the message has several attachments, only infected files are deleted. If the malicious code is embedded in the message body, the e-mail is moved to the quarantine. Clean messages, files and archives are transmitted without changes. Infected messages which the plug-in cannot neutralize are marked as viruses and moved to the quarantine. The content filter can also add to e-mails notifications or message headers to indicate actions performed by Dr.Web for MIMEsweeper.
See also: