Hi, VSES will write detail on the file it has been sent for scanning in %deflogdir%\icapscan.log
As the whole file has been copied from the filer to the temporary scan location on the scanner you will only see an entry such as this.
20/05/2019 13:41:43 Scan Started VSES_hostname Scan Request Received From :filer_IPV4 File to scan : C:\Windows\Temp\VSEIcapTempFiles\2019_20_5_acad.fas
This is a limitation not seen with the use of a NetApp filer, which either uses RPC or local ONTAP service, and will write the source UNC path\filename. KB = The VirusScan Enterprise for Storage log file contains \\?\UNC prefix for remote file names . KB60129
Detection`s will be in the VSES.log (VSES program folder) and the Windows application log on the VSES scanner will write an event also (example)
ERROR 20/05/2019 13:41:43 McLogEvent None 259 SYSTEM VSES_hostname The file C:\Windows\Temp\VSEIcapTempFiles\2019_20_5_acad.fas contains ALS/Cadken Virus. Detected with Scan Engine xxxx DAT version yyyy
Can I check which ICAP filer vendor and version you are using please?
Do you see anything written filer end to the local message log regarding the malicious file?