When ScanMail cannot successfully
clean a file, it labels the file "uncleanable" and performs the
user-configured action for uncleanable files. The default action
is "Replace with text/file". ScanMail records
all viruses/malware events and associated courses of action in the
log file.
Some common reasons why ScanMail cannot
perform the clean action are as follows:
-
The file contains a Trojan, worm, or other executable program. To stop an executable from executing, ScanMail must completely remove it.
-
ScanMail does not support the compression format used to compress the file. The scan engine only cleans files compressed using
pkzip
and only when the infection is in the first layer of compression. -
An unexpected problem prevents ScanMail from cleaning.