Scan Types

During a scan, the Trend Micro scan engine works together with the virus pattern file to perform the first level of detection using a process called pattern matching. Since each virus contains a unique signature or string of tell-tale characters that distinguish it from any other code, the virus experts at TrendLabs capture inert snippets of this code in the pattern file. The engine then compares certain parts of each scanned file to the pattern in the virus pattern file, looking for a match.

When the scan engine detects file containing a virus or other malware, it executes an action such as clean, quarantine, delete, or replace with text/file. You can customize these actions when you set up your scanning tasks.

Worry-Free Services provides the following scan types to protect endpoints from Internet threats.


Do not confuse the scan types with scan methods. Scan methods refer to Smart Scan and Conventional Scan.

See Scan Methods for more information.

Table 1. Scan Types

Scan Type


Real-Time Scan

A persistent and ongoing scan available on Windows, Mac, and Android

On Windows and Mac, each time a file is received, opened, downloaded, copied, or modified, Real-Time Scan scans the file for threats. On Android mobile devices, Real-Time Scan scans apps as they are installed.

Manual Scan

  • Normal Scan: An on-demand scan available on Windows and Mac

    This scan also eradicates old infections that may be lying dormant in files to minimize reinfection. During a Normal Scan, Security Agents take actions against threats according to the actions set by the administrator or user.

  • Aggressive Scan: An advanced scan available on Windows that analyzes and cleans threats that Normal Scan cannot remove

  • The time taken for the scan depends on the endpoint's hardware resources and the number of files to be scanned.

  • Running Aggressive Scan may consume more hardware resources than Normal Scan. To reduce performance impact, configure the CPU Usage section in Manual Scan settings.

Scheduled Scan

Similar to Manual Scan but scans specified files at the configured time and frequency on Windows and Mac. Use Scheduled Scans to automate routine scans on your endpoints and improve the efficiency of threat management.