Scan Locations

You can specify the locations, such as the registry or specific folders, for Full Scan, Quick Scan, and custom on-demand scans.

Trellix ENS scanners treat all files and folders as case insensitive — all case variations of the specified locations are scanned. For example, if you specify the scan location C:\Temp\ABC, the on-demand scanner also scans C:\temp\abc and C:\TEMP\Abc.

Option definitions
Section	Option	Definition
Scan Locations	Scan subfolders	Examines all subfolders in the specified volumes when any of these options are selected: Home folder User profile folder Program files folder Temp folder File or folder Deselect this option to scan only the root level of the volumes.
	Specify locations	Specifies the locations to scan. + — Adds a location to the scan. Click +, then select the location from the drop-down. - — Removes a location from the scan. Click - to the right of the location to delete.
	Memory for rootkits (Windows only)	Scans system memory for installed rootkits, hidden processes, and other behavior that suggests malware is trying to hide itself. This scan occurs before all other scans. Caution Failure to enable this option leaves your system unprotected from malware attacks.
	Running processes (Windows only)	Scans the memory of all running processes. Actions other than Clean files are treated as Continue scanning. Threat Prevention scans the process memory, the main module (.exe), and all loaded DLL files. Caution Failure to enable this option leaves your system unprotected from malware attacks.
	Registered files (Windows only)	Scans files that the Windows Registry references. The scanner searches the registry for file names, determines whether the files exist, creates a list of files to scan, then scans the files.
	My computer (Windows only)	Scans all drives physically attached to your computer or logically mapped to a drive letter on your computer.
	All local drives	Windows — Scans all drives and their subfolders on the computer. Linux — Scans any mounted file system that is not a special file system or a network file system.
	All fixed drives (Windows & macOS only)	Scans all drives physically connected to the computer.
	All removable drives (Windows & macOS only)	Scans all removable drives or other storage devices connected to the computer, except those drives with Windows To Go installed.
	All mapped drives	Windows — Scans network drives logically mapped to a network drive on the computer. Linux — Scans any mounted file system of type NFS or CIFS/SMBFS.
	Home folder (Windows & macOS only)	Scans the home folder of the user who starts the scan.
	User profile folder (Windows & macOS only)	Scans the profile of the user who starts the scan, including the user's My Documents folder.
	Windows folder (Windows only)	Scans the contents of the Windows folder.
	Program Files folder (Windows only)	Scans the contents of the Program Files folder.
	Temp folder	Windows — Scans the contents of the Temp folder. Linux — Scans directories with the name /var/tmp and /tmp.
	Recycle bin (Windows only)	Scans the contents of the Recycle Bin.
	File or folder	Windows — Scans the specified file or folder. Linux — Scans only Linux-specific paths. For example, the Windows path C:\Program Files is ignored. Trellix ENS scanners treat all files and folders as case insensitive — all case variations of the specified locations are scanned.
	Registry (Windows only)	Scans registry keys and values.