We recommend scheduling on-demand scans at regular intervals, with the interval based on the system type.
Scanning active user workstations
Because some locations on active user workstations are often targets of malware attacks, Trellix recommends that you scan these workstations more frequently than other systems. Because the locations are limited, the scans are less likely to affect users.
To scan active user workstations, configure a Custom On-Demand Scan:
Specify these locations to scan:
User profile folder
Temp folder
Registry
Registered files
Windows folder
Schedule to run the scan at least weekly, or even daily.
Regular server systems
To scan regular server workstations, configure a Custom On-Demand Scan:
Select the Boot sectors option.
Specify these locations to scan:
Memory for rootkits
Running processes
All local drives
Registry
Schedule to run the scan at these intervals.
Daily
Only if you have had a major malware outbreak
Weekly
Recommended — Aggressive and provides good protection
Monthly
Acceptable — Provides decent protection with acceptable risk
Quarterly
Bare minimum scheduling interval
For more detailed information on the best practices for on-demand scans, see KB74059.
Note
To improve system performance during on-demand scans of All local drives, set System utilization to Below Normal or Low.