Scanning compound files

A common technique of concealing viruses and other malware is to implant them in compound files, such as archives or databases. To detect viruses and other malware that are hidden in this way, the compound file must be unpacked, which may slow down scanning. You can limit the types of compound files to be scanned and thereby speed up scanning.

To configure scanning of compound files:

1. Open the application settings window.
2. In the left part of the window, in the Scheduled tasks section, select the subsection containing the name of the required scan task (Full Scan, Critical Areas Scan or Custom Scan).

   In the right part of the window, the settings of the selected scan task are displayed.

3. In the Security level section, click the Settings button.

   A window with the name of the selected scan task opens.

4. In the window that opens, select the Scope tab.
5. In the Scan of compound files section, specify which compound files you want to scan: archives, installation packages, files in office formats, files in mail formats, and password-protected archives.
6. If the Scan only new and changed files check box is cleared in the Scan optimization section, click the all / new link next to the name of the compound file type if you want to specify for each type of compound file whether to scan all files of this type or only new files of this type.

   This link changes its value when it is clicked.

   If the Scan only new and changed files check box is selected, only new files are scanned.

7. Click the Additional button.

   The Compound files window opens.

8. In the Size limit section, do one of the following:
   • If you do not want to unpack large compound files, select the Do not unpack large compound files check box and specify the required value in the Maximum file size field.
   • If you want to unpack large compound files regardless of their size, clear the Do not unpack large compound files check box.

   Kaspersky Endpoint Security scans large files that are extracted from archives, regardless of whether the Do not unpack large compound files check box is selected.

9. Click OK.
10. In the window with the name of the scan task, click OK.
11. To save changes, click the Save button.