Scanning compound files

A common technique of concealing viruses and other malware is to implant them in compound files, such as archives or databases. To detect viruses and other malware that are hidden in this way, the compound file must be unpacked, which may slow down scanning. You can limit the types of compound files to be scanned and thereby speed up scanning.

To configure scanning of compound files:

  1. In the main application window, click the Tasks button.
  2. In the opened window, select the scan task and click the icon_settings button.
  3. Click the Advanced settings button.
  4. In the Scan of compound files section, specify which compound files you want to scan: archives, installation packages, files in office formats, files in mail formats, and password-protected archives.
  5. If scanning only new and modified files is disabled, configure the settings for scanning each type of compound file: scan all files of this type or only new files.

    If scanning only new and modified files is enabled, Kaspersky Endpoint Security scans only new and modified files of all types of compound files.

  6. In the Size limit block, do one of the following:
    • If you do not want to unpack large compound files, select the Do not unpack large compound files check box and specify the required value in the Maximum file size field.
    • If you want to unpack large compound files regardless of their size, clear the Do not unpack large compound files check box.

    Kaspersky Endpoint Security scans large files that are extracted from archives, regardless of whether the Do not unpack large compound files check box is selected.

  7. Save your changes.
Page top