Kaspersky Endpoint Security scans all files that you run or copy, even if the file is located on a removable drive (File Threat Protection component). To prevent the spread of viruses and other malware, you can configure automatic scans of removable drives when they are connected to the computer. Kaspersky Endpoint Security automatically attempts to disinfect all infected files that are detected. If disinfection fails, Kaspersky Endpoint Security deletes the files. The component keeps a computer secure by running scans that implement machine learning, heuristic analysis (high level), signature analysis, and iSwift and iChecker technologies. It is not possible to optimize removable drive scans. In other words, you cannot enable scanning of only new and modified files or limit the scan time. Kaspersky Endpoint Security scans all files from the scan scope every time a removable drive is connected.
To configure scanning of removable drives when they are connected:
In this mode, Kaspersky Endpoint Security scans all files located on the removable drive, including files embedded within compound objects, archives, distribution packages, and files in office formats.
In this mode, Kaspersky Endpoint Security scans only potentially infectable files, and does not unpack compound objects.
In the removable drive scan window, the user can stop the scan. To make removable drive scans mandatory and prevent the user from stopping a scan, select the Block the stopping of the scan task check box.