1. In the main window of Kaspersky Total Security 2018, click the gear button .

1. If you have problems opening the application window, see this guide.

2. In the Settings window, go to the Protection section and select Application Control in the right frame.

3. In the Application Control settings window, click Manage resources.

4. In the Manage resources window, the Resources tab, select the folder where the new category will be created.
5. Click Add and select Category.

6. Create the category named Protected file types and click Add.

7. Select the Protected file types category and create several subcategories in it (Documents, Photos, etc.).

8. Select the category corresponding to the protected files type (for example, Documents for files with the *.doc extension), click Add and select a file or folder.
9. Specify the mask for the file type *.<extension>
10. Click Add.

11. Add the rest of file types the same way.
12. In the Manage resources window, click Save.

Configure the rules for the Protected file types category on access of applications with high and low restrictions:

1. In the main window of Kaspersky Total Security 2018, click the gear button .

1. If you have problems opening the application window, see this guide.

2. In the Settings window, go to the General section and clear the check box Perform recommended actions automatically.

3. In the Settings window, go to the Protection section and select Application Control in the right frame.

4. In the Application Control settings window, click Manage resources.

5. In the Application management window, select Restrictions.
6. Right-click the Trusted group and select Details and rules.

7. In the Application rules window, go to the Files and system registry tab. Make sure the rule that allows to read, write, create, and delete is set for the Protected file types resource.
8. Close the Group rules window.

9. Right-click the Low Restricted or High Restricted group and select Details and rules.
10. In the Application rules window, go to the Files and system registry tab. Make sure the Prompt for action rule is set on sections Read, Write, Create, and Delete for the Protected file types resource.
11. Close the Group rules window.

Enable System Watcher and adjust its settings so that Kaspersky Total Security 2018 can detect the launch of file-encrypting malware. The System Watcher component of Kaspersky Internet Security 2018 collects data about actions performed by applications on your computer and shares this information with other components for improved protection. When System Watcher is enabled, Kaspersky Total Security 2018 can detect and finish the malicious process. The file from which the process was run is sent to Quarantine.

File-encrypting malware gets encryption keys from the Internet. Block Internet access for Low Restricted, High Restricted, and Untrusted groups of applications to avoid such cases.