With this module you can scan your computer or selected data medium for malware infections in a targeted manner. This is recommended if, for example, you are given USB sticks from friends, relatives or work colleagues, or you use CDs they have burned. A virus check is also recommended when installing new software or downloading from the Internet.
Select which area of your computer or which data medium you want to specifically check:
If you want to check your computer independently of the automatic idle scan (e.g. because you currently have a suspected virus), just click on this entry. Your computer will now be checked for viruses. You can also read about this in the following section: Run virus checkCheck computer (all local drives):
This function enables you to plan automatic virus checks. You can also read about this in the following section: Automatic virus checks.Scheduled virus checks:
Here the program files and DLLs (program libraries) for all running processes will be checked. In this way malware can be directly removed from the memory and autostart area. Active viruses can be directly removed without searching through the entire hard drive. However, this function is not a replacement for regular virus checks of saved data, but rather an extension to it.Check memory and Startup:
This enables you to scan selected drives, directories or files for viruses. If you click on this action, a directory and file selection dialog will open. You can scan specific individual files or entire directories for viruses here. In the directory tree, you can open and select directories by clicking the "plus" symbols. Their contents will then be shown in the file view. Each directory or file that you mark with a check will be scanned by the software.
If not all files in a directory are checked, this directory is marked with a gray checkmark.
Check removable media: Use this function to check CD-ROMs or DVD-ROMs, memory cards or USB sticks for viruses. If you click on this option, all removable media connected to your computer will be checked (including CDs in the tray, inserted memory cards, hard drives connected via USB or USB sticks). Please note that the software cannot of course remove viruses from media that do not have write access (e.g. burned CD-ROMs). In this case, virus discoveries are logged.
Rootkits attempt to evade conventional virus detection methods. You can use this function to specifically search for rootkit viruses, without checking all the hard drives and saved data.Check for rootkits:
During the virus check, you have different options for dealing with any viruses found. One option is to move the infected file to quarantine. Quarantine is a secure area in the software where infected files are encrypted and stored so they cannot transfer the virus to any other files.
If you click on this button, the quarantine area opens.Show quarantine:
The files in quarantine remain in the condition they were in when the G DATA software found them, and you can decide how to proceed.
- Refresh: If you have kept the quarantine dialogue window open for a long time, and have since discovered a virus and moved it into quarantine (e.g. automatically via the virus monitor), you can use this button to update the view.
- Allow from now on: If the behavior monitor has quarantined a file by accident, you can add it to the whitelist to prevent the behavior monitor from moving it to the quarantine in the future.
- Disinfect: In many cases, infected files can still be recovered. The software removes the virus components from the infected file and reconstructs the uninfected original file. If the disinfection is successful, the file is moved back to where it was saved before the virus check and is available to you again without any restrictions.
- Move back: Sometimes it is necessary to move an infected file that cannot be cleaned back out of quarantine to its original storage location. This may be for data recovery purposes for example. You should only select this function in exceptional cases and observe strict security measures (e.g. disconnect the computer from the network/Internet, back up uninfected data first etc).
- Delete: If you no longer require the infected file, you can simply delete it from quarantine.
The boot medium is a useful tool for ridding your computer of viruses that have already contaminated it. Use of a boot medium is particularly recommended for computers that had no virus protection prior to installing the G DATA software. You can read up on how to use a boot medium in the section entitled boot scan.
Create boot medium button and follow the installation wizard's instructions. Here you have the option of downloading current virus signatures to bring your boot medium fully up to date. You also have the option of burning a CD/DVD as a boot medium or using a USB stick as a boot medium.
If you are using the G DATA Total Security software version, you can also use a boot medium to restore a drive backup to the volume on which the system is currently located. It is also possible to restore a drive or file backup to another target here. To do so, insert the boot medium and select Start Restore.