4.2 On-Demand Scans

On-demand scans include all the scans described below:

  • Full Scan: This scan is configured in the Antimalware Enforcement Policy. Full scans protect scan targets by checking for all types of malware threatening their security, such as viruses, spyware, adware, rootkits and others. The scan runs as follows:

    • According to the Antimalware Agent Schedule or override thereof on a device folder or device

    • When started from a quick task in ZENworks Control Center

    • When started from a zac command on the device

    • When started by an endpoint user from the Agent Status Console (if enabled in ZENworks Control Center)

  • Quick Scan: This scan is configured in the Antimalware Enforcement Policy. This is a reduced-scope on-demand scan that typically runs in less than a minute and uses a fraction of the resources needed to run a full scan. The scan runs as follows:

    • According to the Antimalware Agent Schedule or override thereof on a device folder or device

    • When started from a quick task in ZENworks Control Center

    • When started from a zac command on the device

    • When started by an endpoint user from the Agent Status Console (if enabled in ZENworks Control Center)

  • Custom Scan: This scan requires a Custom Scan Policy and gives you the capability to target specific threats that may not be covered in the regularly scheduled scans using the Antimalware Enforcement Policy.

    • According to the schedule set in the Custom Scan Policy

    • When started from a quick task in ZENworks Control Center

    • When started from a zac command on the device

  • Network Scan: This scan requires a Network Scan Policy and gives you the capability to scan network drives, which you cannot do with the Enforcement or Custom Scan policies.

    • According to the schedule set in the Network Scan Policy

    • When started from a quick task in ZENworks Control Center

    • When started from a zac command on the device

  • External Device Scan: When enabled, this scan automatically detects and scans removable storage devices and media when they are connected to the system, unless the Display Security Alerts option is enabled in the Antimalware Agent Notifications settings, in which case users are prompted to scan the external drive.

  • Contextual Scan: When the Show icon in notification area setting is enabled Antimalware Agent Notifications, endpoint users can run scans on folders in File Explorer via the right-click menu and also using the Custom Scan option in the Agent Status Console.

Scan Type

Scheduled Scans

Quick Task Scans

zac Command Scans

User Initiated Scans

Full Scan

Yes

Yes

Yes

Yes (conditional)

Quick Scan

Yes

Yes

Yes

Yes (conditional)

Custom Scan

Yes

Yes

Yes

No

Network Scan

Yes

Yes

Yes

No

External Device Scan

No

No

No

Yes (conditional)

Contextual Scan

No

No

No

Yes (conditional)

NOTE:You cannot initiate another scan of the same type, Full or Quick, or of the same policy for a Custom Scan or Network Scan, until that scan completes or is stopped on the device in the Agent Status Console.

For information about running scans from a quick task or zac command, see the following:

For information about configuring scheduled scans or controlling end user scan options on devices with the Antimalware Agent installed, see the following sections: