Skip to main content
Malicious File Scan
Updated over a week ago

License editions: To understand the applicable license editions, see Plans & Pricing.

Block malicious files from being restored to an endpoint or a server.


Due to the recent increase in the number of ransomware and malware attacks, organizations have been forced to deploy additional tools and resources to detect a security breach. After you find out about infected resources, you can use Druva’s Ransomware Recovery feature to isolate those endpoints and servers. This will restrict those resources from interacting with other resources and help contain the spread of malware.

But there is always a risk that existing securely backed data might already be infected and when you restore such data, you run the risk of infecting the destination resource. This is where Malicious File Scan comes in. Using this feature you can scan the data for viruses and malware during a data restore activity. Moreover, you can enable this feature for end users too so that they too can scan the data before restoring. Druva scans the entire data for potential viruses and blocks the malicious and only restores the clean files.

❗ Important

Malicious file scan is not supported for files beyond 1 GB in size.

Druva uses an industry-leading antivirus engine to search the data for potential viruses and malware. You also have the option to add pre-identified hash values of malicious files to the scan engine. Druva will also scan the data for these file hashes so that malicious files can be blocked from restore.

Did this answer your question?