The file system monitor SpIDer Guard scans all the files that users open or change in real time. SpIDer Guard also monitors programs and processes launched on Mac.
SpIDer Guard settings for computers running macOS are available in the SpIDer Guard for workstations section, for macOS Server—in the SpIDer Guard for servers section.
General
•Enable the Use heuristic analysis option to use heuristic analysis for detecting unknown threats.
•Use the Enable SpIDer Guard for macOS (for servers—Enable SpIDer Guard for macOS Server) option to enable the constant antivirus protection of the file system.
•In the Scanning time of one element field, specify the maximum time for scanning a file. Value 0 means that time to scan one file is unlimited.
|
Increasing the time for scanning a single file may slow down the computer and increase the overall scanning time. |
Actions
In this section, you can configure actions that Dr.Web will apply to threats detected by SpIDer Guard The actions are set separately for each type of malicious and suspicious objects. These actions vary for different object types.
•Cure, move to quarantine if not cured. Restores the original state of the object before infection. If the object is incurable or the attempt of curing fails, the object is moved to quarantine. The action is available only for the objects infected with a known virus that can be cured except for the Trojan programs and files within complex objects, such as email files and file containers. •Cure, delete if not cured. Restores the original state of the object before infection. If the object is incurable or the attempt of curing fails, the object is deleted. The action is available only for the objects infected with a known virus that can be cured except for the Trojan programs and files within complex objects, such as email files and file containers. •Move to quarantine. Moves a detected threat to a special folder isolated from the rest of the system. •Delete. Deletes the object that poses a threat. It is the most effective way to remove all types of threats. •Ignore. Skips the object without any actions. Notifications are not displayed.
|
Containers
In this section, you can specify the maximum nesting level for containers. If the nesting level is higher than the specified value, the container will be ignored during the scan. Value 0 means that nested objects will not be scanned.
In the Maximum compression ratio field, specify the maximum compression ratio for compressed objects (a ratio of source object size to compressed size). If compression ratio of an object is greater than the specified value, the object will be ignored when scanning.
Excluded paths
In this section, specify paths to files and folders which will be excluded from scanning by SpIDer Guard.