Configuring AMSI Scanner task settings via the Administration Plug-in

To configure an AMSI Scanner task:

1. Expand the Managed devices node in the Kaspersky Security Center Administration Console tree.
2. Select the administration group for which you want to configure application settings.
3. Perform one of the following actions in the details pane of the selected administration group:
   • To configure application settings for a group of protected devices, select the Policies tab and open the Properties: <Policy name> window.
   • To configure the application for a single protected device, select the Devices tab and open the Application settings window.

     If an active Kaspersky Security Center policy is applied to a device and blocks changes to application settings, then these settings cannot be edited in the Application settings window.

4. In the Real-time server protection section of the Properties: <Policy name> window, click Settings for AMSI Scanner.
5. In the Action to perform on dangerous scripts section in the General tab, do one of the following:
   • To allow execution of probably dangerous scripts, select Allow.
   • To block execution of probably dangerous scripts, select Block.
6. In the Heuristic analyzer section, do one of the following:
   • Clear or select the Use Heuristic Analyzer check box.
   • If necessary, adjust the level of analysis using the slider.
     

     The heuristic analysis level sets the balance between the thoroughness of searches for threats, the load on the operating system's resources and the time required for scanning.

     The following scanning sensitivity levels are available:

     • Light. Heuristic Analyzer performs fewer instructions within executable files. The probability of threat detection in this mode is somewhat lower. Scanning is faster and less resource-intensive.
     • Medium. Heuristic Analyzer performs the number of executable file instructions recommended by Kaspersky experts.

     This level is selected by default.

     • Deep. Heuristic Analyzer performs more instructions within executable files. The probability of threat detection in this mode is higher. Scanning uses more system resources, takes more time, and can produce a higher number of false alarms.

     The setting is available if the Use heuristic analyzer check box is selected.

7. In the Trusted Zone section, select or clear the Apply Trusted Zone check box.
8. Click OK.

The newly configured settings are applied.

Page top