Anti malware tools search a device for many kinds of harmful programs, including worms and spyware, not only viruses that ride a host.
The wider net matters because a clinic workstation can be harmed by a program that never attaches itself to another file.
How it works
The tool scans disks, watches new downloads, and may isolate a program that records keystrokes or that spreads by copying itself across the clinic network.
It is broader than a scan that looks only for code glued to a host program.
A missed spyware program can expose patient searches and passwords, while a scan that cries wolf can stop a medical viewer the clinic needs on a Monday morning.
Staff need a way to tell a real detection from a tool the vendor itself installed.
Concrete examples
- A clinic workstation quarantines a program that was copying itself to every shared folder overnight.
- A laptop flags a browser add on that was sending every visited address to an unknown server.
- A lab computer alerts on a remote control tool that no one in the lab remembers installing.
Protective measures
- Run the scan on a schedule and also when a file arrives from outside the clinic.
- Keep the detection data current, because a tool that only knows last year's programs will miss what arrived this week.
- Test that your medical viewer and your lab instruments still run after an update of the protection tool.
- Give the clinic a path to restore a file that was quarantined by mistake, with a named person approving the restore.
Related articles
Readers who want more on a clinic workstation should open What is an exploit kit? next.
For day to day work on a clinic workstation, add What is an advanced persistent threat? to the same reading list.
People who look after a clinic workstation compare this explanation with What is advanced threat protection?.