If Kaspersky Security detects malicious code in a file while scanning a protected virtual machine, the application blocks the file, removes it from its original folder, then places its copy in Backup and attempts to disinfect the file.
Backup storage is a list of backup copies of files that have been deleted or modified by the program during the disinfection process. Backup copy is a file copy that is created by the application at the first attempt to disinfect or delete the file. Backup copies of files are stored in a special format and do not pose a threat.
Backup is stored on a protected virtual machine. You can work with Backup in the local interface of Light Agent for Windows or from the command line of Light Agent for Linux.
When the application is removed, Backup files are removed from the protected virtual machine.
If file disinfection succeeds, the status of the backup copy of the file changes to Disinfected. You can restore the file from its disinfected backup copy to its original folder.
On detecting malicious code in a file that is part of the Windows Store application, Kaspersky Security immediately deletes the file without moving it to Backup. You can restore the integrity of the Windows Store application using tools of the Microsoft Windows operating system.
The program automatically deletes backup copies of files with any status from Backup after the storage term configured in the application settings has elapsed. In addition, you can set a limit on the maximum size of Backup. When this limit is reached, the application will automatically delete backup copies of files.
You can also manually delete the backup copy of either a restored or unrestored file.