The Anti-Virus Wizard


KMail does not have a built-in virus detection solution: the developers believe using external, but specialized, tools is the better approach. KMail uses these tools through its flexible filter architecture. The Anti-Virus Wizard helps you with the initial filter setup.

What can the wizard do to help you?

It will give you some choices about how you want virus filtering to be set up. Afterwards it will automatically create the appropriate filter rules.

What are the limitations of the wizard?

It can only initially set up the filters for you; and it will provide a standard setup. Modifying existing filters is not yet possible.

You can activate the wizard via ToolsAnti-Virus Wizard....


The Anti-Virus Wizard basically works exactly as the Anti-Spam Wizard does. Here are the details of how the wizard works: KMail can use several external tools to detect messages containing viruses; it will try to automatically find out which of these tools are installed on your system and will show you the result of the search. You can mark the tools which you want to be used by KMail to detect viruses. Of course, you can close the wizard, install a new tool, and restart the wizard again.

If you have chosen at least one tool you will be able to select actions to be done in KMail to messages containing viruses: to let KMail detect messages containing viruses you definitely should mark the Check messages using the anti-virus tools option; if you want messages detected as virus-infected to be moved into a certain folder, select the appropriate folder and mark the Move detected viral messages to the selected folder option; if messages detected as virus-infected should additionally be marked as read, then mark the Additionally, mark detected viral messages as read option.

Selecting at least one of these options will allow the wizard to finish the filter setup. The wizard will not take any existing filter rules into consideration but will append new rules. In any case you may want to inspect the result of this process in the Filter Dialog.


The wizard uses information stored in a special configuration file named kmail.antivirusrc (stored in the global or local KDE config directory). It will first check the global config file and then the local config file: if the local config file contains entries with higher (newer) version numbers per-tool the configuration data from the local file for that tool is used; that way, both administrators and users can update the wizard configuration.

The detection of messages containing viruses is achieved by creating pipe through actions per-tool within a special filter. Another filter contains rules to check for detected viral messages and actions to mark them and (optionally, depending on the choice in the wizard) to move them into a folder. Both filters are configured to be applied on incoming messages and on manual filtering.