Does Symantec Endpoint Protection or Symantec Antivirus Scan USB flash drives?

Article:TECH102573  |  Created: 2007-01-04  |  Updated: 2012-08-15  |  Article URL http://www.symantec.com/docs/TECH102573
Article Type
Technical Solution

Product(s)

Issue



What is the nature of Symantec Endpoint Protection/Symantec Antivirus protection for USB flash drives?

 


Solution



Out of the below-mentioned types of scans in Symantec Endpoint Protection or Symantec Antivirus:
 

  1. File System Auto-Protect scan
  2. System Scans (Administrator-defined Scans OR Manual Local System Scans)
  3. TruScan Proactive Threat Scans


The File System Auto-Protect scan is the only type which would automatically scan a USB drive connected to the system. This type of scan, by default, would only run when a file is accessed or modified (scans the files when they are written, opened, moved, copied, or run).

This means that if any infections/threats present on the USB drive attempt to access or modify any of the content on the system, it would be detected. The detection mechanism within File System Auto-Protect ensures safety from threats present on the USB drives.

Symantec Antivirus does not currently run an automatic System Scan on the contents of flash drives when they are first plugged in. A manual scan on the contents of a flash drive can be initiated by right-clicking on the drive in My Computer and choosing Scan for Viruses.


References
Administration_Guide:

About Auto-Protect Scans
About Administrator-defined Scans
About TruScan Proactive Threat Scans


Technical Information
Types of Scans in Symantec Endpoint Protection or Symantec Antivirus:

  1. File System Auto-Protect scan
  2. System Scan (Administrator-defined Scans OR Manual Local System Scans)
  3. TruScan Proactive Threat Scans


Several other scans like Email Auto-Protect Scans and Port Scans (POP3/SMTP) are also present but they could be covered under the above mentioned types.

 




Legacy ID



2007100411255848


Article URL http://www.symantec.com/docs/TECH102573


Terms of use for this information are found in Legal Notices