Malware Scan

Malware Scan is a one-time full or custom file scan on the device performed on demand. Kaspersky Endpoint Security can carry out multiple Malware Scan tasks at the same time.

A Malware Scan (Scan_My_Computer) predefined task is created in the application. You can use this task to perform a full scan of the device. During a full scan, the application scans all objects located on the device's local drives, as well as all mounted and shared objects that are accessed via Samba or NFS protocols with the recommended security settings.

In Kaspersky Security Center, the Kaspersky Security Center Initial Configuration Wizard automatically creates a Malware Scan group task after installing the MMC administration plug-in or the Kaspersky Endpoint Security web administration plug-in.

During a full disk scan, the processor is busy. It is recommended to run the full scan task when the business is idle.

You can configure the settings of automatically created tasks in Kaspersky Security Center and in the command line, and also create Malware Scan user tasks.

Upon detecting malware, Kaspersky Endpoint Security may remove the infected file and terminate the malware process started from this file.

If during execution of the malware scan task the application was restarted by a control service or manually by the user, the task will be stopped. The application logs the OnDemandTaskInterrupted event.

You can run Malware Scan tasks and configure scan settings:

• Select operating system objects to scan: files, archives, boot sectors, process memory and kernel memory, startup objects.
• Limit the size of an object to be scanned and the duration of the object scan.
• Select the actions to be performed by the application on the infected objects.
• Configure exclusions of objects from scans:
  • by name or mask
  • by the name of the threats detected in the objects
• Enable or disable global exclusions and File Threat Protection exclusions when scanning.
• Enable the logging of information about scanned non-infected objects, about scanning objects in archives, and about unprocessed objects.
• Configure the use of the heuristic analyzer and iChecker technology during a scan.
• Limit the set of devices whose boot sectors need to be scanned.
• Configure scan scopes and scan exclusion scopes.