Starting On-Demand Plan Scan

Scanning for malware may be started on-demand for a recovery plan in the ENABLED or DISABLED state. To start scanning for a plan, perform the following steps:

  1. Navigate to Recovery Plans.
  2. Select the necessary plan and click Scan.
  3. In the Malware Scan window, do the following:
  1. In the Restore Point section, choose a restore point that you want to scan.
  2. In the Malware detection section, you can also configure the following settings:
  1. [Applies only to restore and cloud plans] Decide whether you want to scan these restore points with antivirus software, YARA rules or both.

By default, Orchestrator checks the most recent restore point on each machine. If all of the restore points are infected, the plan will acquire the NOT VERIFIED state after the scan process completes.

For more information on the way Orchestrator chooses restore points for malware scan, see How Orchestrator Selects Restore Points During On-Demand Malware Scan.

  1. [Applies only to restore and cloud plans] Select Full image scan check box if you want to continue scanning the VM even after an infected restore point has been detected.
  1. Review configuration information and click Run.

Scanning Plans for Malware

Page updated 1/9/2026

Page content applies to build 13.0.0.1167