--- schema_version: "1" id: c75e64d0fd33549ed7fb827ff252ba12fd09958c003f1e673204034b6416fc7c title: Malware Scanning for Salesforce Files collection: admin version: current locale: en-us portal_url: https://docs.salesforce.com/admin/current/en-us/experience/264-0-0/collab_files_malware_scan.md canonical_url: https://help.salesforce.com/s/articleView?id=experience.collab_files_malware_scan.htm&release=264.0.0&type=5 source_site: help.salesforce.com content_type: documentation content_hash: 5ccbdceca0568617fe04b5b0b0a10cb622a77bb4ec8877199747a8ec992d4201 description: Files are scanned for viruses or other malware when they’re uploaded or downloaded. New files are scanned when users upload them, and uploads are blocked when a file is malicious. Any existing malicious files in your org are listed in the Malicious Files list in Files home. products: - Experiences release: "264" --- # Malware Scanning for Salesforce Files Files are scanned for viruses or other malware when they’re uploaded or downloaded. New files are scanned when users upload them, and uploads are blocked when a file is malicious. Any existing malicious files in your org are listed in the Malicious Files list in Files home. ### Required Editions
Available in: Lightning Experience and Salesforce Classic
Available in: Group, Essentials, Professional, Enterprise, Performance, Unlimited, Developer, and Contact Manager Editions hosted on Hyperforce
The setting **Scan files for viruses or malware** is on by default in **Setup** | **Salesforce Files** | **Malware Scanning**. To turn on notifications for users with the Manage Malicious Files permission, select **Notify users when a malicious file is detected**. When a user attempts to upload a new file to Salesforce Files, Salesforce scans the file and blocks the upload process if the scanned file is malicious. When a user uploads a file via the API, Salesforce allows the upload and scans the file asynchronously. If the scanned file is malicious, it appears in the Malicious Files list. Any file that was uploaded to Salesforce Files before this feature was enabled doesn't get scanned until a user tries to download it. When a user first tries to download the file, Salesforce allows the download to proceed and scans the file asynchronously. If the file is malicious, it appears in the Malicious Files list, and Salesforce blocks any future download attempts. Malicious files can appear in any list view in Files home, but not all list views indicate when a file is malicious. To know if a scanned file contains malware, look for it in the Malicious Files list. Users can't preview malicious files. Files are scanned only when they're 100 MB or smaller. If a file is larger than 100 MB, Salesforce doesn’t scan it or block users from uploading, previewing, or downloading it. Malware scanning flags files only if they have a high probability of being malicious. If you require more stringent scanning, consider using one of Salesforce’s malware scanning partners. ## Mark a Malicious File as Safe When a scanned file is incorrectly identified as malicious, designate it as safe. After you mark a file as safe, it's removed from the Malicious Files list, and users can preview or download it. ### Required Editions
Available in: Lightning Experience
Available in: Group, Essentials, Professional, Enterprise, Performance, Unlimited, Developer, and Contact Manager Editions hosted on Hyperforce
User Permissions Needed
To access the Malicious Files list, get notified when a malicious file is detected, mark a file as safe, and download a malicious file: Manage Malicious Files
To download a malicious file: Download Malicious Files
1. In Lightning Experience, from the App Launcher, open Files. 2. To see malicious files, open the **Malicious Files** list (1). 3. Find the file that was incorrectly identified as malicious and open its row-level actions dropdown. 4. Click **Mark File as Safe** (2). ![The Malicious Files list with a malicious file and the selection to mark it as safe](https://sf-zdocs-cdn-prod.zoominsoftware.com/tdta-experience-collaboration-264-0-0-production-enus/1aab5b5e-c990-4b8c-840a-6fb18af49709/collaboration/images/collab_files_malware_scan_malicious_files_list.png)