Antivirus > Configuration > Profiles > New or Edit > Protection > File Antivirus
If enabled, File Antivirus remains active in memory and monitors all files that are opened, saved, or started on the computer and on all connected drives.
Enable Antivirus - If checked, scans all files that are opened, saved, or executed.
Security Level
Security Level
High - Set this level if you suspect a computer has a high chance of being infected.
Recommended - This level provides an optimum balance between the efficiency and security and is suitable for most cases.
Low - If machine operates in a protected environment low security level may be suitable. A low security level can also be set if the machine operates with resource-consuming applications.
Custom- When any other setting on this tab is changed, the Security Level is set to Custom. Reset the Security Level to High, Recommended or Low to reset options to their default settings.
Action on Threat Detection
Select action automatically - If checked, automatically performs actions recommended by Kaspersky Lab. Once a threat is detected, the application attempts to disinfect the object. If disinfect fails, the application attempts to delete it. Suspicious objects are skipped without processing. If blank, protection uses the customized settings below.
Select Action
Disinfect - If checked, an attempt is made to disinfect a quarantined file.
Delete if disinfection fails - If a quarantine file fails to be disinfected, it is deleted.
If both of the above are unchecked, the file is skipped, and the threat is added to the Detections page.
File Types
File Types
All files
Files Scanned by Format
Files Scanned by Extension
Protection Scope
Protect Network Drives - If checked, includes mapped network drives.
Protect Hard Drives -
Protect Removable Drives - If checked, includes removable drives.
Scan Methods
Heuristics Analysis - If checked, uses heuristics analysis to identify the behavior of objects as malicious or suspicious, even if they are not yet identified an known threats in the signature database. This allows new threats to be detected even before they have been researched by virus analysts.
Depth - Depth of heuristic analysis to use: Light, Medium, Deep.
Scan Optimization
Scan New and Changed Files Only - If checked, scans only new files and files modified since the last scan.
Scan of Compound Files
Scan Archives - If checked, scans archived files.
Scan Installation Packages - If checked, scans installation packages.
Scan Embedded OLE Objects - If checked, scans OLE objects embedded within files.
Extract Compound Files in the Background - If checked, compound files larger than the size specified by Minimum Files Size (MB) are extracted and scanned in the background while the user starts to work with the compound file. This eliminates the delay required to scan large compound files. Compound files include archives, installation files and embedded OLE objects.
Minimum File Size (MB) - Specifies the minimum file size for background scanning of compound files.
Do Not Unpack Large Compound Files - If checked, compound files larger than the size specified by Maximum File Size (MB) are not scanned. Files extracted from an archive are always scanned, regardless of this setting.
Maximum File Size (MB) - Specifies the maximum file size for suppressing the scanning of files.
Scan Mode
Smart Mode - Scan files after analyzing operations that are performed with the file by the user, by an application or by the operating system.
On Access and Modification
On Access
On Execution
Scan Technologies
iSwift technology - If checked, iSwift technology is used to speed up scans. Rescanning is ignored for previously scanned NTFS objects unless the object, scan settings, or antivirus database have changed.
iChecker technology - If checked, iChecker technology is used to speed up scans. Rescanning is ignored for previously scanned objects unless the file, scan settings, or antivirus database have changed.