{"id":8091,"date":"2026-10-18T18:23:48","date_gmt":"2026-10-18T15:23:48","guid":{"rendered":"https:\/\/support.withsecure.com\/?post_type=support_article&#038;p=8091"},"modified":"2026-10-18T18:23:48","modified_gmt":"2026-10-18T15:23:48","slug":"if-linux-security-64-action-for-malware-is-configured-as-rename-how-is-the-name-of-the-detected-file-modified","status":"publish","type":"support_article","link":"https:\/\/support.withsecure.com\/en\/support-articles\/if-linux-security-64-action-for-malware-is-configured-as-rename-how-is-the-name-of-the-detected-file-modified\/","title":{"rendered":"If Linux Security 64 Action for malware is configured as RENAME, how is the name of the detected file modified?"},"content":{"rendered":"<h3>Issue:<\/h3>\n<p>In Linux Security 64, if &#8211;malware=ACTION or Action on malware has been configured as RENAME, how is the file name or extension modified by Linux Security 64 if a scanned file is detected as malicious or harmful?\u00a0<\/p>\n<h3>Resolution:<\/h3>\n<p>If &#8211;malware=ACTION is configured as rename (&#8211;malware=rename) or the <strong>Action for malware <\/strong>setting has been set as <strong>Rename <\/strong>in the policy, and the file (e.g. eicar.txt) is detected as malware, it will be renamed as &quot;eicar.txt.malware&quot;.<\/p>\n<p>Also, for example, if &#8211;pua=rename is configured, and some file detected as PUA, then it will be renamed as &quot;eicar.txt.pua&quot;.\u00a0<\/p>\n<p>So, basically, how the file is renamed depends on the detection type of the file. The detection type will be added as an extension to the detected file.\u00a0\u00a0<\/p>\n","protected":false},"excerpt":{"rendered":"<p>In Linux Security 64, if &#8211;malware=ACTION or Action on malware has been configured as RENAME, how is the file name or extension modified by Linux Security 64 if a scanned file is detected as malicious or harmful?\u00a0<\/p>\n","protected":false},"template":"","support_article_product":[106],"class_list":["post-8091","support_article","type-support_article","status-publish","hentry"],"acf":{"source_foreign_id":"000006378","source_version":1,"source_system":"salesforce","source_date_updated":"2026-10-18 15:23:48","import_hash":"74b3d4af9e103f49cfb61c22805e269686b1947c","vanilla_article_id":"","vanilla_url":"","vanilla_kb_id":"","vanilla_category_id":"","machine_translated":false,"reactions_helpful_yes":"","reactions_helpful_no":""},"_links":{"self":[{"href":"https:\/\/support.withsecure.com\/en\/wp-json\/wp\/v2\/support_article\/8091","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/support.withsecure.com\/en\/wp-json\/wp\/v2\/support_article"}],"about":[{"href":"https:\/\/support.withsecure.com\/en\/wp-json\/wp\/v2\/types\/support_article"}],"wp:attachment":[{"href":"https:\/\/support.withsecure.com\/en\/wp-json\/wp\/v2\/media?parent=8091"}],"wp:term":[{"taxonomy":"support_article_product","embeddable":true,"href":"https:\/\/support.withsecure.com\/en\/wp-json\/wp\/v2\/support_article_product?post=8091"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}