Step 6. Run Ransomware Scan

At the Ransomware scan step of the wizard, choose whether you want to check restore points created for machines included in the plan for possible ransomware.

By design, Orchestrator checks only the most recently created restore point for each machine and stops plan testing if the restore point is infected. For more information on ransomware scan, see How Orchestrator Performs Ransomware Scan.


  • Ransomware scan is supported only for Windows-based machines.
  • Ransomware scan is supported for restore points stored in on-premises repositories only.

Configuring Test Scheduling


Orchestrator does not scan machines added to lab groups. If you want to perform ransomware scan for machines included in a lab group, add these machines to a restore plan.