The "Scan" tab

List of malware scan tasks

Contains preset malware scan tasks:

• Full Scan. A malware scan of the computer's memory, startup objects, and all internal disks.
• Quick Scan. A malware scan of only critical areas of the computer: memory, startup objects, and system folders.
• Custom Scan. A malware scan of a specified object (file, folder, internal disk, or removable disk).

In the Scan scope section, you can view and edit the scan scope for the Quick Scan task.

Edit

Clicking this button opens a window where you can view and edit the scan scope.

This button appears only when the Quick Scan task is selected in the list.

In the Action section, you can select the action that Kaspersky Endpoint Security performs when an infected file is detected, and schedule a task.

Disinfect or delete malicious objects automatically

Kaspersky Endpoint Security blocks access to the infected file and attempts to disinfect it without requesting confirmation. Prior to performing disinfection, Kaspersky Endpoint Security saves a backup copy of the file in Backup. If the file has been disinfected, Kaspersky Endpoint Security saves it in its original location under the original file name. If disinfection fails, Kaspersky Endpoint Security keeps the infected file in a blocked state in its original location. Information about the detection of the infected object is logged in the Processed objects report.

Prompt for action when the scan is complete

Kaspersky Endpoint Security postpones the processing of infected files that have been detected until the end of the scan. When the scan is complete, Kaspersky Endpoint Security displays notification windows that inform you of each detected infected object, and offers a choice of further actions. The actions may vary depending on the status of the object.

This action is selected by default.

In the Optimization section, you can configure whether Kaspersky Endpoint Security scans the read-only system volume when performing a Quick Scan or Full Scan task.

Skip scanning of read-only system volume

This checkbox disables/enables scanning of the read-only system volume by Kaspersky Endpoint Security.

This checkbox is selected by default for a Quick Scan task and unselected by default for a Full Scan task.

Important: Optimization might be disabled for security reasons.

CPU Usage

Clicking this button opens a dialog where you can enable or disable limiting the application's use of the protected device's CPU for scan tasks. If the Limit CPU utilization by scans to option is selected, you can specify the maximum allowed CPU utilization in the corresponding field.

Note: This is a cumulative limit across all CPU cores. The CPU utilization shown in Activity Monitor is the sum of the utilization of each CPU core and therefore may exceed 100 percent.

Enabling this option can negatively affect the performance of Kaspersky Endpoint Security.

By default, this option is disabled.

Schedule

Clicking this button opens a dialog where you can schedule Full Scan or Quick Scan tasks.

Clicking this button prevents users without administrator privileges from changing the settings of the Kaspersky Endpoint Security application.

Clicking this button opens a prompt for administrator credentials. After you enter administrator credentials, application settings become editable.