File Anti-Virus

File Anti-Virus prevents infection of the computer’s file system. The components starts at startup of the operating system, continuously remains in the computer’s RAM, and scans all files being opened, saved, or launched on your computer and all connected drives.

You can create the protection scope and set the security level (collection of settings that determine the scan thoroughness).

When the user or a program attempts to access a protected file, File Anti-Virus checks if the iChecker and iSwift databases contain information about this file, and makes a decision on whether the file should be scanned or not.

By default, the mode of using records from application databases to scan for threats is always enabled. Additionally, you can enable heuristic analysis and various scan technologies.

Databases created by Kaspersky Lab’s experts and containing a detailed description of all current threats to computer security as well as methods used for their detection and disinfection. These databases are constantly updated by Kaspersky Lab as new threats appear. In order to achieve a higher quality of threat detection we recommend that you copy databases from Kaspersky Lab’s update servers on a regular basis.

If a threat is detected, Kaspersky Anti-Virus assigns one of the following statuses to the found object:

  • malicious program (such as a virus or Trojan);
  • potentially infected (suspicious) status if the scan cannot determine whether the object is infected or not. The file may contain a sequence of code appropriate for viruses, or modified code from a known virus.

The application displays a notification about detected threat and performs the assigned action. You can change actions to be taken on detected threats.

If you work in automatic mode, Kaspersky Anti-Virus will automatically apply the action recommended by Kaspersky Lab’s specialists when dangerous objects are detected. For malicious objects this action is Disinfect. Delete if disinfection fails, for suspicious objects – Move to Quarantine.

Before attempting to disinfect or delete an infected object, Kaspersky Anti-Virus creates a backup copy for subsequent restoration or disinfection. Suspicious (potentially infected) objects are quarantined. You can enable the automatic scan of quarantined objects after each update.

In this section:

Enabling and disabling File Anti-Virus

Automatically pausing File Anti-Virus

Creating a protection scope

Changing and restoring security level

Selecting scan mode

Using heuristic analysis

Selecting the scan technology

Changing actions to be performed on detected objects

Scan of compound files

Scan optimization

File Anti-Virus