SafenSoft: proactive protection against malware and insider threats

Scan

It is possible that your computer might have been infected with malware before SafenSoft SysWatch was installed. For this reason, a full scan to detect and neutralize any existing malware is be performed automatically during the automatic adjustment process, if an antimalware scanner is included with your version of the product. Otherwise, a third-party antimalware scanner should be used to run a complete scan before installing SafenSoft SysWatch.

The antimalware scanner uses the following components to detect and neutralize malicious code:

• Antivirus databases - signatures of known viruses, worms, Trojans and other malware.

• Antispyware databases - signatures of known spyware.

• The Rootkit Detector - searches for hidden malicious objects (rootkits). A rootkit is a program or set of programs used to hide malicious activities, or attacks on the operating system. A rootkit injects itself into the operating system and disguises its existence and the existence of processes, folders, and registry keys that relate to other malicious programs described in the rootkit's configuration file.

The antimalware scanner compares the object it scans against records in its databases; if a match is found, it marks the object as malicious. This is a often described as signature-based analysis. In order to detect hidden resources, all the running processes and system hooks are checked.

In order to perform a scan, it is necessary to:

Scans should be performed as follows:

Immediately after installing SafenSoft SysWatch no other antimalware was previously installed.

Any time the application activity control is disabled and external storage (USB, CD, DVD, etc) has been used or an Internet connection has been established.

NOTE

In order to be able to use the anti-virus and antispyware databases you must be using a licensed copy of a version of SafenSoft SysWatch that includes antimalware.

IMPORTANT

For effective malware scanning, the signature databases should be updated daily. The simplest way to ensure this happens is to set up a daily automatic update.

Actions

Run scan

Stop scan

View scan report

Manually select the action on detected threat

Scan all files/search for unknown threats

Search for rootkits

Set scanner startup parameters