Why do I need the heuristic analysis technology in System Watcher of Kaspersky Anti-Virus 2012?

Back to "System Watcher" section

The System Watcher component from Kaspersky Anti-Virus 2012 collects data concerning actions performed by applications on your computer and then collected data are used by other components to provide strong protection of your computer.

In Kaspersky Anti-Virus 2012 you can configure the System Watcher actions on suspicious application actions detection.

System Watcher uses heuristic analysis to detect actions which partially match to patterns of dangerous activity. If such actions are detected the application will ask a user to select an action to be performed with a suspicious program.

The technology use allows adding new patterns to the existing heuristic databases and, therefore, do not update the whole module. new signatues are added during anti-virus databases update. Heuristic analysis use allows blocking malicious actions of an application according to signatures of heuristic database.

In order to configure the System Watcher actions on suspicious detection, perform the following actions:

1. open the main application window
2. on the right upper corner, click Settings
3. on the upper part of the Settings window, select Protection Center
4. on the left hand part of the Settings window, select System Watcher
5. on the right hand part of the Settings window, check the box Enable System Watcher
6. on the right part of the Settings window in the Heuristic analysis section, check the box Use updatable patterns of dangerous activity (BSS)
7. select the required action for the On detecting dangerous activity option:
   • Select action automatically (if automatic protection mode is enabled). In this case System Watcher will select automatically select actions specified by Kaspersky Lab specialists
   • Prompt for action (if interactive protection mode is enabled). In this case System Watcher will prompt for action: allow or block.
   • Select action:
     • Move file to Quarantine
     • Terminate the malicious application
     • Ignore
8. on the bottom right hand corner, click on the OK button
9. close the main application window.

Useful references

Kaspersky Password Manager 5.0 incorrectly fills in authorization form on the web-site/in the application. How to manually edit form completion?
What is Quarantine in Kaspersky Anti-Virus 2012?
How to open the main application window of Kaspersky Anti-Virus 2012?

Applies To:

• Kaspersky Anti-Virus 2012