The disclosure relates to a method and system for processing objects stored as blocks on a storage system. The blocks are in deduplicated form. The blocks are scanned for a pattern, and if a pattern is found in a block, objects associated with the block are identified. The pattern may be a malware signature. The block is remediated, and the associated objects may be remediated as well, in the storage system and on host systems where copies of the objects reside. Partial matching may be used to identify the pattern. If a first block contains a partial match to the pattern, logically adjacent blocks are scanned to determine whether the partial match of the first block is completed in logically adjacent blocks. Logically adjacent blocks can be associated with different objects.