Quarantine Scan
By default, after each database update, Kaspersky Embedded Systems Security for Windows performs the Quarantine Scan local system task. The task settings are described in the table below. The Quarantine Scan task settings cannot be modified.
You can configure the task start schedule, start the task manually, and modify the permissions of the account used to start the task.
After scanning quarantined objects following a database update, Kaspersky Embedded Systems Security for Windows may reclassify some of them as not infected: the status of such objects is changed to False alarm. Other objects may be reclassified as infected, in which case Kaspersky Embedded Systems Security for Windows handles such objects as specified by the Quarantine Scan task settings: disinfect, or delete if disinfection failed.
Quarantine Scan task settings
Quarantine Scan task setting | Value |
|---|---|
Scan scope. | Quarantine folder |
Security settings. | The same for the entire scan scope; their values are provided in the next table |
Scan settings in the Quarantine Scan task
Security setting | Value |
|---|---|
Scan objects | All objects included in the scan scope |
Performance | Disabled |
Action to perform on infected and other objects | Disinfect, delete if disinfection is impossible |
Action to perform on probably infected objects | Skip |
Exclude files | No |
Do not detect | No |
Stop scanning if it takes longer than (sec.) | Not defined |
Do not scan objects larger than (MB) | Not defined |
Scan alternate NTFS streams | Enabled |
Scan disk boot sectors and MBR | Disabled |
Use iChecker technology | Disabled |
Use iSwift technology | Disabled |
Scan compound objects |
* Scan only new and modified files is disabled. |
Check Microsoft signature in files | Not performed |
Use heuristic analyzer | Enabled with Deep analysis level |
Trusted Zone | Not applied |
