Kaspersky Anti-Ransomware Tool for Business 3.0 and all the previous versions of the application are no longer supported by AO Kaspersky Lab.
Kaspersky Anti-Ransomware Tool for Business provides protection for companies against ransomware applications that block access to a computer system until a sum of money is paid.
Computer protection
Kaspersky Anti-Ransomware Tool for Business detects malicious applications and automatically blocks their activity. It also logs actions performed by such applications in the operating system and use these logs to roll back any unwanted changes. For example, if a malicious application has created or modified any files or has modified the system registry, Kaspersky Anti-Ransomware Tool for Business detects such changes and blocks the malicious application. Then Kaspersky Anti-Ransomware Tool for Business attempts to roll back the actions of the malicious application (for example, by restoring the modified files and the system registry). If the rollback is successful, Kaspersky Anti-Ransomware Tool for Business displays a notification.
You can view and manage blocked applications in the Blocked apps list.
Kaspersky Anti-Ransomware Tool for Business is equipped with a self-protection mechanism to prevent modification or deletion of its files from the hard drive, memory processes and system registry entries.
Detection methods
Kaspersky Anti-Ransomware Tool for Business detects malicious applications using anti-virus databases and Kaspersky Security Network.
Anti-virus databases provide protection from known threats. Kaspersky Anti-Ransomware Tool for Business compares behavior of applications on the computer with viruses and other malware registered in anti-virus databases. Note that a database update can change security settings that are not available to the user.
Kaspersky Security Network provides protection from the newest threats. If you participate in Kaspersky Security Network, you automatically send statistics retrieved by Kaspersky Anti-Ransomware Tool for Business from your computer to Kaspersky Lab. Participation in Kaspersky Security Network lets your computer access reputation statistics for applications and websites.
Application modes
Kaspersky Anti-Ransomware Tool for Business supports role-based user access to its features. You can choose one of the following application modes:
This mode is appropriate for performing general administration tasks such as installing Kaspersky Anti-Ransomware Tool for Business on computers across the company, monitoring computer protection, and preparing protection reports.
In this mode, Kaspersky Anti-Ransomware Tool for Business performs computer protection and sends reports to administrator. If you choose this application mode, you must configure email settings. You can send the reports manually or set up automatic sending of reports.
In this mode, Kaspersky Anti-Ransomware Tool for Business performs computer protection without sending reports to administrator.
A role is assigned to the user during installation of the application and can be changed after the installation.