If Linux Security 64 Action for malware is configured as RENAME, how is the name of the detected file modified?

Issue:

In Linux Security 64, if –malware=ACTION or Action on malware has been configured as RENAME, how is the file name or extension modified by Linux Security 64 if a scanned file is detected as malicious or harmful? 

Resolution:

If –malware=ACTION is configured as rename (–malware=rename) or the Action for malware setting has been set as Rename in the policy, and the file (e.g. eicar.txt) is detected as malware, it will be renamed as "eicar.txt.malware".

Also, for example, if –pua=rename is configured, and some file detected as PUA, then it will be renamed as "eicar.txt.pua". 

So, basically, how the file is renamed depends on the detection type of the file. The detection type will be added as an extension to the detected file.