Creating a Portable Scanner

Before you create a Portable Scanner, make sure that the Database Update task is not running or has already completed.

To create a Portable Scanner:

1. In the notification area, in the context menu of the application icon, select the Open Compact Diagnostic Interface.
2. In the Compact Diagnostic Interface window that opens, click the Create Portable scanner link.

   The Parameters for the Portable scanner window appears and prompts you to select the license file.

3. Click the License key files (*.key) button to add the Kaspersky Industrial CyberSecurity for Nodes Portable Scanner license file in the displayed window.

   You can install the Portable scanner on the USB-drive only if you have a current Kaspersky Industrial CyberSecurity for Nodes license and a valid Kaspersky Industrial CyberSecurity for Nodes Portable Scanner license. You can scan the host if you have a valid Kaspersky Industrial CyberSecurity for Nodes Portable Scanner license and the anti-virus databases are not outdated.
   

   The Installation Wizard verifies that the Kaspersky Industrial CyberSecurity for Nodes license is available. If current license file is not valid, the application sends a respective notification and terminates the installation.

   After the license file is added, the licensing information is displayed.

4. Click the Next button.
5. In the Parameters for the Portable scanner window, specify the scan scope. By default, My computer is added as the scan area. If you want to add more areas to scan, click Add. In the Scan area window that appears, select the required items and click OK to save the changes.

   Select one of the following options:

   • Predefined area:
     • My computer
     • Fixed drives
     • Removable drives
     • Startup objects
     • Shared folders
     • System memory
     • Network
   • Drive or folder
   • File
6. In the Parameters for the Portable scanner window, click the Scan settings button.

   The Scan settings window opens.

   1. On the General tab, select the appropriate options:
      • Scan objects

        The following options are available:

        • All objects
        • Objects scanned by format
        • Objects scanned according to the list of extensions specified in the anti-virus database
        • Objects scanned according to the specified list of extensions
        • Scan disk boot sectors and MBR
        • Scan alternate NTFS streams
      • Scan of compound objects

        The following options are available:

        • Archives
        • SFX archives
        • Email databases
        • Packed objects
        • Plain mail
        • Embedded OLE objects
   2. On the Advanced tab, select the appropriate options:
      • General parameters.
        • Restore file attributes after scanning
          If a file is opened during the scan, the last accessed time for the file is updated. As a result, the archivers and cloud storages recalculate file data to transfer it to a cloud or to a backup. To avoid the recalculation process, you can restore the last accessed time after scanning is performed. By default, the option is disabled.
        • Limit CPU usage for scanning threads
          This setting is used to avoid making the computer hang during scanning. This option may be crucial for industrial systems, where the main software is not supposed to freeze. By default, the option is disabled.
      • Folder for temporary files created during scanning

        Click the Browse button to specify the Folder for temporary files that will be created during scanning. By default, temporary files are created on the USB drive.

      • Action to perform on detected objects
        • Disinfect. Remove, if disinfection fails.
          Quarantine is unavailable for the Portable Scanner, so leaving a probably infected object may be unsafe. Use this option to remove the detected file if disinfection fails. By default, the option is enabled.
        • Notify only
          Use this option for a quick scan. The security officers take the security measures when receiving a notification about the detected objects. Use this option for systems, where the workflow is not supposed to be interrupted by removing the industrial software modules. By default, the option is disabled.
      • Actions on unmodifiable compound files

        Select the following option if applicable.

        Entirely remove compound file that cannot be modified by the application in case of embedded object detection.

   3. On the Performance tab, select the appropriate options:
      • Exclusions.
        • Exclude files
          Use this option to exclude the files from scan scope and not remove them if detected. You can both specify a full path and use a mask. By default, the option is disabled.
        • Do not detect
          Use this option to avoid detection and subsequent removal of the objects. You can both specify a full path and use a mask. By default, the option is disabled.
      • Advanced settings
        • Stop scanning if it takes longer than (sec)
          Use this option for scanning large files and the network when scanning takes a long time to complete. If it takes too long to scan an object, the timeout terminates the frozen process and the scanner proceeds with the scan scope examination. By default, the option is disabled.
        • Do not scan compound objects larger than (MB)
          Use this option to accelerate scanning. For example, you may want to skip the 100 GB database archives and exclude them from the scan scope. By default, the option is disabled.
        • Use iChecker technology
          For more information about iChecker technology, please refer to this article. By default, the option is enabled.
7. Click the Next button.
8. To create a Portable Scanner, select a removable drive from the drop-down list. The system updates the list of available removable drives automatically and verifies if 2 GB of free space is available on the selected drive. The USB drive should be available for writing.
9. Select Verify scanner data after writing to the disk, if applicable.

   Use this option to verify scanner data. For example, if you plan to create several portable scanners with the same settings in a row, verifying data for the very first portable scanner and discovering the discrepancies on an early stage saves you time. By default, the option is disabled.

10. Click the Create button to finish the wizard.

The wizard verifies that 2 GB of free space are available on the selected drive and creates the Portable Scanner. If a Portable Scanner already exists on the drive and you want to install a new Portable Scanner with different settings, the Setup Wizard overwrites the files of the existing Portable Scanner, except for the reports and log files. If the 2 GB of free space verification is not passed, you may want to remove some files or the existing Portable Scanner on the drive to free up the required space and create a new Portable Scanner.

If you decide to interrupt writing, the installation wizard terminates writing without a roll back.

After you complete the installation, the installation wizard prompts you to create the next Portable Scanner. If you decide to create another portable scanner, the installation procedure is repeated from step 3. Otherwise, the Setup Wizard closes.

After the Portable Scanner is installed, the following files are available on the USB drive:

• Kavscan—a folder containing the scanning utility, application files, settings files, anti-virus databases, and reports.
• kavscan.exe—scanning utility.
• startscan.cmd—command file to start the scanning utility without opening the terminal window.
• Bases—a folder with Kaspersky Industrial CyberSecurity for Nodes anti-virus databases as of the date when the Portable Scanner is written on the USB drive.