Forefront Security for Exchange Server Best Practices - Action
Applies to: Forefront Security for Exchange Server
Topic Last Modified: 2007-12-25
It is recommended that you set the Action to Delete; remove infection for all scan jobs.
Attempting to clean and repair an attachment was more useful years ago when cleanable viruses were more common and valid documents were often infected. The virus world has changed over the years, and the vast majority of viruses today are not cleanable. Also, a valid infected file is much less common. Most of the time, the entire attachment is a virus and has no valid content. Because the attempt to clean the virus requires additional processing resources, the Delete option is a better choice.