Enabling and disabling AMSI Protection

By default, AMSI Protection is enabled and runs in the mode that Kaspersky experts recommend. You can disable AMSI Protection, if necessary.

To enable or disable AMSI Protection in Kaspersky Security Center:

1. Open Kaspersky Security Center Administration Console.
2. In the Managed devices folder of the console tree, open the folder with the name of the administration group to which the relevant protected virtual machines belong.
3. In the workspace, select the Policies tab.
4. Select a Light Agent for Windows policy in the list of policies and open the Properties: <Policy name> by double-clicking.
5. In the policy properties window, select the AMSI Protection section in the list on the left.
6. In the right part of the window, do one of the following:
   • If you want to enable the AMSI Protection component, select the AMSI Protection check box.
   • If you want to disable the AMSI Protection component, clear the AMSI Protection check box.
7. Click the Apply button.

To enable or disable AMSI Protection in the Light Agent for Windows local interface:

1. On the protected virtual machine, open the main application window.
2. Select the Protection and Control tab and expand the Manage protection section.
3. Open the context menu of the AMSI Protection item and perform one of the following actions:
   • To enable the AMSI Protection component, select Enable.

     The component status icon, which is displayed on the left in the AMSI Protection line, changes to the icon.

   • To disable the AMSI Protection component, select Disable.

     The component status icon, which is displayed on the left in the AMSI Protection line, changes to the icon.

   If this menu item is unavailable, this means that you cannot enable or disable this component because the policy-defined setting is applied to protected virtual machines within the administration group.