Kaspersky blocks files with reason "could not be scanned by AV"


This article applies to:

  • SWG 10.x, 11.x

Question:

  • Kaspersky blocks files with error "could not be scanned by AV" but file seems valid and can be opened with archive software.

Reply:

Check the Response node in the weblog transaction.

Possible reasons:

Scan timeout - try increasing scan timeout in Administration->System Settings->Scanning->Scanning Engines->Anti-Virus (Kaspersky)->Scanning Time Limit

Encrypted file - A file in the archive may be encrypted and Kaspersky fails to open it. This triggers a block of the whole archive with reason password protected.

Corrupt file - A file in the archive is corrupted and that's why the whole archive is marked as corrupted. 



Last Modified 2/4/2013.
https://support.trustwave.com/kb/KnowledgebaseArticle15189.aspx