McAfee GSSCDE-AA-DA User Guide - Page 116

been cleaned, Do not perform custom malware check if the object has already

Page 116 highlights

McAfee® GroupShield™ 7.0 User Guide Policy Manager 10 Scanners and filters „ Default file types - to specify that only the default file types should be scanned. „ Defined file types - to specify which file types should be scanned. 6 Under Scanner options, select the scanner options you require. You can select: „ Scan archive files (ZIP, ARJ, RAR...) - to scan inside archive files, such as ZIP files. „ Find unknown file viruses - to use heuristic analysis techniques to search for unknown viruses. „ Find unknown macro viruses - to find unknown viruses in macros. „ Scan all files for macros - to scan all files for macros. „ Find all macros and treat as infected - to find macros in files and treat them as infected items. „ Remove all macros from document files - to remove all macros from the document files. 7 In Advanced tab, under Custom malware categories, specify which items should be treated as malware. There are two ways to select malware types: „ Select the malware types from the list of checkboxes below Custom malware categories. „ Select Specific detection names and click Add. When typing in a name, you can use wildcards for pattern matching. Note 8 Select or deselect the option Do not perform custom malware check if the object has already been cleaned to specify, if items that have already been cleaned successfully should be subject to the custom malware check or not. 9 Under Clean options, specify what happens to files that are reduced to zero bytes after being cleaned. Select any one of these options: „ Keep zero byte file - to keep files that have been cleaned and is of zero bytes. „ Remove zero byte file - to remove any file that has zero bytes after being cleaned. „ Treat as a failure to clean - to treat zero byte files as if they cannot be cleaned, and apply the failure to clean action. 10 In Packers, use: „ Enable detection - to enable or disable the detection of packers. 116

  • 1
  • 2
  • 3
  • 4
  • 5
  • 6
  • 7
  • 8
  • 9
  • 10
  • 11
  • 12
  • 13
  • 14
  • 15
  • 16
  • 17
  • 18
  • 19
  • 20
  • 21
  • 22
  • 23
  • 24
  • 25
  • 26
  • 27
  • 28
  • 29
  • 30
  • 31
  • 32
  • 33
  • 34
  • 35
  • 36
  • 37
  • 38
  • 39
  • 40
  • 41
  • 42
  • 43
  • 44
  • 45
  • 46
  • 47
  • 48
  • 49
  • 50
  • 51
  • 52
  • 53
  • 54
  • 55
  • 56
  • 57
  • 58
  • 59
  • 60
  • 61
  • 62
  • 63
  • 64
  • 65
  • 66
  • 67
  • 68
  • 69
  • 70
  • 71
  • 72
  • 73
  • 74
  • 75
  • 76
  • 77
  • 78
  • 79
  • 80
  • 81
  • 82
  • 83
  • 84
  • 85
  • 86
  • 87
  • 88
  • 89
  • 90
  • 91
  • 92
  • 93
  • 94
  • 95
  • 96
  • 97
  • 98
  • 99
  • 100
  • 101
  • 102
  • 103
  • 104
  • 105
  • 106
  • 107
  • 108
  • 109
  • 110
  • 111
  • 112
  • 113
  • 114
  • 115
  • 116
  • 117
  • 118
  • 119
  • 120
  • 121
  • 122
  • 123
  • 124
  • 125
  • 126
  • 127
  • 128
  • 129
  • 130
  • 131
  • 132
  • 133
  • 134
  • 135
  • 136
  • 137
  • 138
  • 139
  • 140
  • 141
  • 142
  • 143
  • 144
  • 145
  • 146
  • 147
  • 148
  • 149
  • 150
  • 151
  • 152
  • 153
  • 154
  • 155
  • 156
  • 157
  • 158
  • 159
  • 160
  • 161
  • 162
  • 163
  • 164
  • 165
  • 166
  • 167
  • 168
  • 169
  • 170
  • 171
  • 172
  • 173
  • 174
  • 175
  • 176
  • 177
  • 178
  • 179
  • 180

116
McAfee
®
GroupShield
7.0 User Guide
Policy Manager
Scanners and filters
10
Default file types
— to specify that only the default file types should be scanned.
Defined file types
— to specify which file types should be scanned.
6
Under
Scanner options
, select the scanner options you require. You can select:
Scan archive files (ZIP, ARJ, RAR...)
— to scan inside archive files, such as ZIP files.
Find unknown file viruses
— to use heuristic analysis techniques to search for
unknown viruses.
Find unknown macro viruses
— to find unknown viruses in macros.
Scan all files for macros
— to scan all files for macros.
Find all macros and treat as infected
— to find macros in files and treat them as
infected items.
Remove all macros from document files
— to remove all macros from the document
files.
7
In
Advanced
tab, under
Custom malware categories
, specify which items should be
treated as malware. There are two ways to select malware types:
Select the malware types from the list of checkboxes below
Custom malware
categories
.
Select
Specific detection names
and click
Add
.
8
Select or deselect the option
Do not perform custom malware check if the object has already
been cleaned
to specify, if items that have already been cleaned successfully should
be subject to the custom malware check or not.
9
Under
Clean options
, specify what happens to files that are reduced to zero bytes
after being cleaned. Select any one of these options:
Keep zero byte file
— to keep files that have been cleaned and is of zero bytes.
Remove zero byte file
— to remove any file that has zero bytes after being cleaned.
Treat as a failure to clean
— to treat zero byte files as if they cannot be cleaned, and
apply the failure to clean action.
10
In
Packers
, use:
Enable detection
— to enable or disable the detection of packers.
Note
When typing in a name, you can use wildcards for pattern matching.