Anti-Virus Check (Scanning) of the File System

Anti-Virus Check (Scanning) of the File System


If using Windows Vista, it is recommended for the Scanner to be run by a user with administrator rights because files and folders to which unprivileged users have no access (including system folders) are not scanned.


As soon as the program is started with default settings, RAM,Windows startup objects and files and modules of running applications are scanned for viruses.

Other objects of the file system are scanned on your demand. Select one of the following scanning modes:

Express scan

In this mode the following objects are scanned:

· Random access memory
· Boot sectors of all disks
· Startup objects
· Boot disk root folder
· Disk root storing the Windows installation folder
· Windows system folder
· User documents folder ("My documents")
· System temporary files
· User temporary files

Complete scan

In this mode all hard drives and removable media (including boot sectors of all disks) are scanned.

Custom scan

This mode allows you to select folders and files to be scanned.

When this mode is selected, the file system tree appears in the center of the Scan pane. If necessary, you can expand the tree objects down to the level of any folder or file included.

Select objects to be scanned in the file system tree. Boot sectors of all disks will be checked along with the selected objects.

The picture below illustrates a case when in the Custom mode the C partition and a folder on thtdee F partition are selected for scanning (their icons are marked with red buttons).

To scan the objects selected, click the button in the right part of the pane.

Click the button to suspend the scanning process. Click the button to continue.

Click the button to terminate scanning.

By default, the program performs anti-virus scanning of all files using both virus databases and the heuristic analyzer (an algorithm allowing to detect viruses unknown to the program with high probability on the basis of general principles of their creation). During the scanning, executable files packed with special compression utilities, are unpacked. And files contained in archives of all most commonly used types (ZIP, ARJ, LHA, RAR and many others), file containers (PowerPoint, RTF and other), as well as files attached to mail messages in mail boxes of mail programs (the format of mail should confirm to RFC822) are checked.

If a known virus is detected or there is a suspicion an object is infected with a virus, the Dr.Web for Windows version informs, by default, the user about it in a special report field at the bottom of the main window. Dr.Web for Windows Servers, by default, automatically attempts to avert a virus threat.

For more details on the settings and actions specified in this pane click the corresponding area of the window in the picture.

Different windows, settings and actions can also be accessed by the hot keys.

See also:

Actions When a Virus Is Detected.