Actions Tab

On this tab, you can configure reaction of the Dr.Web Scanner on detection of infected or suspicious files and archives or other malicious object.

For different types of compromised objects, actions are assigned separately from respective drop-down lists:

Objects infected with known and (supposedly) curable viruses
Objects infected with incurable viruses
Supposedly infected (suspicious) objects

Reaction on detection of malicious software and infected packages (archives,email, installation packages) is also set separately.

 

For details on a certain option, click a corresponding item in the picture.  To get information on options available in other pages, click the corresponding link in the picture.

For details on a certain option, click a corresponding item in the picture.
To get information on options available in other pages, click the corresponding link in the picture.

 

To configure reaction to infected objects

1.Select the Actions tab in the Scanner settings window.
2.In the Infected objects drop-down list, select an action to take upon detection of an infected object.

 

The Cure action is the best in most cases.

 

3.In the Incurable objects drop-down list, select an action to take upon detection of an incurable object. The range of actions is the same as for infected objects, but the Cure action is not available.

 

The Move to quarantine action is the best in most cases.

 

4.In the Suspicious objects drop-down list select an action to take upon detection of a suspicious object (fully similar to the previous paragraph).
5.Similar actions should be specified for detection of objects containing Adware, Dialers, Jokes, Riskware and Hacktools.
6.The same way the automatic actions of the program upon detection of viruses or suspicious codes in file archives, installation packages and mailboxes, applied to these objects as a whole, are set up.
7.To cure some infected files it is necessary to reboot Windows. You can choose one of the following:
Restart computer automatically. It can lead to loss of unsaved data.
Prompt restart

The best action for curable threats (e.g. files infected with known viruses) is curing, since it allows to restore the infected file completely. It is recommended to move other threats to quarantine for further analysis in order to prevent loss of potentially valuable data. You can select one of the following actions:

Action

Description

Cure

(Available for known viruses only except Trojan programs that are deleted on detection.)

Instructs Dr.Web to try to restore the original state of an object before infection. If the object is incurable, or the attempt of curing fails, the action set for incurable viruses is applied.

This is the only action available for boot sectors. At the same time, this is action is not applicable to files within complex objects (archives, e-mail attachments, file containers).

Move to quarantine

Instructs Dr.Web to move the object to a specific quarantine folder.

This action is impossible for boot sectors. No action is performed on malicious objects for which you selected this action, if they are detected in a boot sector.

Delete

Instructs Dr.Web to delete the object.

This action is impossible for boot sectors. No action is performed on malicious objects for which you selected this action, if they are detected in a boot sector.

Ignore

(Available for potentially dangerous files only which includes adware, dialers, jokes, hacktools and riskware.)

Instructs Dr.Web to skip the object without performing any action or displaying a notification.

 

Примечание

Threats within complex objects (archives, e-mail attachments, file containers) cannot be processed individually. For such threats, Dr.Web Scanner applies an action selected for this type of a complex object and by default implies informing the user on the threat .