Configuring Rootkit Scanning (Blacklight); Rootkit Scanning Settings; Launching A Rootkit Scan For The Whole Domain - F-SECURE CLIENT SECURITY 9.00 Administrator's Manual

72 | F-Secure Client Security | Configuring virus and spyware protection

Configuring rootkit scanning (Blacklight)

Rootkit scanning can be used to scan for files and drives hidden by rootkits.
Rootkits are typically used to hide malicious software, such as spyware, from users, system tools and traditional
antivirus scanners. The items hidden by rootkits are often infected with viruses, worms or trojans.

Rootkit scanning settings

The settings for rootkit scanning are displayed on the
Rootkit scanning can be run as a manual operation or as part of a full computer check.
Select Enable rootkit scanning
enables users to run local quick scans for rootkits and other hidden items.
Select Include rootkit scanning in full computer check
computer check is started from the local host, or when a manual scanning operation is launched from Policy
Manager Console.
Select Report suspicious items after full computer check
shown in the disinfection wizard and in the scanning report after a full computer check. When this option is
selected, you can see from the scanning reports whether any items hidden by rootkits have been detected
on the managed hosts.

Launching a rootkit scan for the whole domain

In this example, a rootkit scan is launched for the whole domain.
1. Select
2. Go to the
3. In the
4. Select the
5. Check that the other settings on this page are suitable, and modify them if necessary.
6. Go to the
Note: You have to distribute the policy for the operation to start.
7. Click
After the scanning operation on the local hosts has finished, you can see if any rootkits were detected from
Scan reports
to enable scanning for files and drives hidden by rootkits. This option also
Root on the Policy domains
Settings tab and select the
Rootkit scanning section, make sure that
Report suspicious items after full computer check
Operations tab, and click the
to save and distribute the policy.
on the Reports tab.
Manual scanning
to scan for items hidden by rootkits when a full
to specify that detected suspicious items are
tab.
Manual scanning page.
Enable rootkit scanning
Scan for viruses and spyware
page of the Settings
is selected.
check box.
button.
tab.