The new docs.trellix.com offers a modernized UI and AI-powered features like conversational searches. Content is currently available only in English. Other languages will be available in mid-October 2026. We hope you enjoy the new experience.

Scan Locations

Prev Next

You can specify the locations, such as the registry or specific folders, for Full Scan, Quick Scan, and custom on-demand scans.

Trellix ENS scanners treat all files and folders as case insensitive — all case variations of the specified locations are scanned. For example, if you specify the scan location C:\Temp\ABC, the on-demand scanner also scans C:\temp\abc and C:\TEMP\Abc.

Options
Section Option Definition
Scan Locations Scan subfolders Examines all subfolders in the specified volumes when any of these options are selected:
  • Home folder
  • User profile folder
  • Program files folder
  • Temp folder
  • File or folder

Deselect this option to scan only the root level of the volumes.

Specify locations Specifies the locations to scan.
  • Add — Adds a location to the scan.

    Click Add, then select the location from the drop-down.

  • Double-click an itemChanges the selected item.
  • Delete — Removes a location from the scan.

    Select the location and click Delete.

Memory for rootkits Scans system memory for installed rootkits, hidden processes, and other behavior that suggests malware is trying to hide itself. This scan occurs before all other scans.

Caution

Failure to enable this option leaves your system unprotected from malware attacks.

Running processes Scans the memory of all running processes.

Actions other than Clean files are treated as Continue scanning.

Threat Prevention scans the process memory, the main module (.exe), and all loaded DLL files.

Caution

Failure to enable this option leaves your system unprotected from malware attacks.

Registered files Scans files that the Windows Registry references.

The scanner searches the registry for file names, determines whether the files exist, creates a list of files to scan, then scans the files.

My computer Scans all drives physically attached to your computer or logically mapped to a drive letter on your computer.
All local drives Scans all drives and their subfolders on the computer.
All fixed drives Scans all drives physically connected to the computer.
All removable drives Scans all removable drives or other storage devices connected to the computer, except those drives with Windows To Go installed.
All mapped drives Scans network drives logically mapped to a network drive on the computer.
Home folder Scans the home folder of the user who starts the scan.
User profile folder Scans the profile of the user who starts the scan, including the user's My Documents folder.
Windows folder Scans the contents of the Windows folder.
Program Files folder Scans the contents of the Program Files folder.
Temp folder Scans the contents of the Temp folder.
Recycle bin Scans the contents of the Recycle Bin.
File or folder Scans the specified file or folder.

Trellix ENS scanners treat all files and folders as case insensitive — all case variations of the specified locations are scanned.

Registry Scans registry keys and values.