Product guide

6. Configuring daily memory scans
On-demand scanning of processes and memory is the early warning system for your VirusScan
Enterprise protected computers. You must enable this feature, as part of your essential
protection, to scan running processes and memory for rootkits at least once per day. This
on-demand scan finishes in 30-90 seconds with virtually no impact to the end-users.
NOTE: Any system with a detection from this memory scan should have a full on-demand scan
performed immediately.
Rootkits and hidden processes function at the operating system level and are very hard to find
once they gain access. They allow the attacker to have hidden access to your system at the
Administrator level and they are your worst nightmare.
Malware rootkits can inadvertently be installed on a target computer when you:
• Open rich-content files, such as PDF documents.
• Open malicious links that appear legitimate.
• Install a legitimate application with a rootkit added as part of the installation.
To configure a client task to scan running processes and memory for rootkits, using ePolicy
Orchestrator, click Menu | System | System Tree and click Client tasks. Click the
Configuration and Scan Locations tabs. Confirm the following features are enabled in the
Locations to scan lists:
Configuring Essential Security
6. Configuring daily memory scans
McAfee VirusScan Enterprise 8.812