What is iSwift?



Kaspersky Administration Kit 8.0


What is iSwift?

Back to "Host Management"
2012 Oct 16 ID: 3481

The technology iSwift allows accelerating antivirus software running in the resident protection mode or performing a scan on demand.

  • Algorithm used by the technology iSwift

iSwift is designed for NTFS file system where each object is assigned a NTFS identifier. This identifier is compared with values from a special iSwift database. If they mismatch, the object undergoes a scan. Modified objects are rescanned as well. The algorithm ignores any intermediate scans and their quantity, considering only the time between the first and the last scan of the object. The object will also be scanned after setting stricter object scan settings.

  • How to configure iSwift
    • If there is Kaspersky Administration Kit 8.0 implemented in the network, the usage of the technology iSwift is configured in a centralized way via settings of the policy for workstations. Open the tab Protection, select File Anti-Virus in the drop-down menu, and click Customize. Open the tab Additional and check iSwift technology box in the section Scan technologies.

    • Local configuration of iSwift is done separately for Full and Quick scan tasks. Click the button Settings in the main screen of Kaspersky Anti-Virus 6.0 for Windows Workstations/Server MP4. Go to the node Full scan or Quick scan. Click Settings in the right pannel. Click Advanced in the screen Settings: Full (quick) scan and check the box "use iSwift".

  • Managing iSwift database

In order to limit the size of the iSwift database, please do the following

    • If there is Kaspersky Administration Kit 8.0 implemented in the network, the iSwift database size is configured in a centralized way via settings of the policy for workstations. Open the tab Settings, and check the box Clear iSwift database when in the section Resources. Set a value in MB.
    • Local configuration of iSwift is done in the application configuration screen. Open the tab Resources, and check the box Clear iSwift database when in the section Resources. Set a value in MB.
  • Physical location of iSwift files

Kaspersky Anti-Virus 6.0 for Windows Workstation creates a file named fidbox.dat in the system folder %SYSTEMDRIVE%\System Volume Information. This file contains the information about noninfected objects already scanned by the technology iSwift. The size of the file fidbox.dat grows depending on the number of files scanned by Kaspersky Anti-Virus 6.0 for Windows Workstations/Servers MP4. This file contains only actual data on files really existing in the system. Data on deleted files is removed from the file fidbox.dat as well. When the maximum size is reached or there is not enough free hard disk space, the least used registries will be removed from the database.

This file can be purged manually if necessary:

  • Reboot the PC in Safe Mode.
  • Get access to the folder System Volume Information using Microsoft knowledge base KB309531.
  • Delete the file fidbox.dat. As you can see, this is a "hidden" file.
  • Reboot the PC in normal mode.

Information PC load by Kaspersky Anti-Virus 6.0 for Windows Workstations/Servers MP4 may increase after purging the file fidbox.dat. It happens because Anti-Virus scans all files accessed for the first time after purging the file fidbox.dat. Information about scanned objects will be written to the file fidbox.dat. So they will not be rescanned unless changed.

  • Advantages of iSwift
    • iSwift is faster than iChecker because it does not require a scanned object control sum calculation.
    • It can process any formats, sizes and types of objects.
  • Limitations of iSwift
    • This technology is bound to particular locations of files in the file system. A copied/moved file will be rescanned.
    • This technology is compatible with NTFS system only and is therefore inactive under Microsoft Windows 98SE/ME.
Was this information helpful?
Yes No


Have you found what you were looking for?

Please let us know how we can make this website more comfortable for you

Send feedback Send feedback

Thank you!

Thank you for submitting your feedback.
We will review your feedback shortly.