We recommend running a daily on-demand scan of memory and running processes.
The scan runs with virtually no impact to system users.
Note
Threat Prevention scans the process memory, the main module (.exe), and all loaded DLL files.
Rootkits and hidden processes function at the operating system level and allow an attacker hidden access to your system at the administrator level. Malware rootkits can inadvertently be installed on a target computer when users:
Open rich-content files, such as PDF documents.
Open malicious links that appear legitimate.
Install a legitimate application with a rootkit added as part of the installation.
Important
If the memory scan detects any malware on a system, run a Full Scan immediately.
To scan memory and running processes, configure a Custom On-Demand Scan:
Select these locations to scan:
Memory for rootkits
Running processes
Schedule to run the scan once a day at a convenient time.