Kaspersky Security 11.x for Windows Server

Cleaning iSwift base: KAVSHELL FBRESET

June 10, 2022

ID 146720

Kaspersky Security for Windows Server uses iSwift technology, which lets the application avoid rescanning files that have not been modified since the last scan (Use iSwift technology).

Kaspersky Security for Windows Server creates klamfb.dat and klamfb2.dat files in the "%SYSTEMDRIVE%\System Volume Information" folder. These files contain information about clean objects that have already been scanned. The klamfb.dat (klamfb2.dat) file grows with the number of files scanned by Kaspersky Security for Windows Server. It only contains current information about files in the system: if a file is removed, Kaspersky Security for Windows Server purges the corresponding information from klamfb.dat.

To clear a file, use the KAVSHELL FBRESET command.

Please keep in mind the following specifics when using the KAVSHELL FBRESET command:

  • When using the KAVSHELL FBRESET command to clear the klamfb.dat file, Kaspersky Security for Windows Server does not pause the protection (unlike what happens if klamfb.dat is deleted manually).
  • Kaspersky Security for Windows Server may increase the protected device workload after the data in klamfb.dat is cleared. In this case, Kaspersky Security for Windows Server scans all files accessed for the first time after klamfb.dat is cleared. After the scan, Kaspersky Security for Windows Server puts information about each scanned object back into klamfb.dat. If there are new attempts to access an object, iSwift technology prevents rescanning of the file if it has not been changed.

The KAVSHELL FBRESET command is available only if the command-line interpreter is started under the SYSTEM account.

Did you find this article helpful?
What can we do better?
Thank you for your feedback! You're helping us improve.
Thank you for your feedback! You're helping us improve.