Applies to Kaspersky Anti-Virus 2011
From Kaspersky Lab products version 11.0.0.232 you can select actions performed by the System Watcher component on malware detection.
Before the System Watcher component detects and quarantines suspicious programs, they can create files or folders etc. on your computer. Now you can delete files created by malicious programs using rollback.
You can configure the application to perform rollback automatically. However, if the detected process is not malicious, then files created by this process will be deleted by Kaspersky Anti-Virus automatically.
In order to exclude such actions, you can configure the application so that the application will prompt for action to be performed on suspicious process detection.
If the Automatic protection mode is enabled, then actions rollback will be performed automatically.
Interactive and automatic protection modes in Kaspersky Anti-Virus 2011
In order to configure the System Watcher actions on suspicious detection, perform the following actions:
- open the main application window
- in the left part of the main application window, click Protection Center
- in the right upper corner, click the Settings link
- in the left part of the Settings window, select System Watcher
- in the right part of the Settings window, check the box Save activity log
- if the automatic protection mode is enabled, you can select the following options:
- Select action automatically
- Select action:
- roll back
- do not roll back
- if the interactive protection mode is enabled, you can select the following options:
- Prompt for action
- Select action:
- roll back
- do not roll back
- in the right lower corner click the OK button
- close the main application window.
v13-129803.gif)
