Using of Heuristic Analyzer with File Anti-Virus
July 22, 2024
ID 65403
File Anti-Virus uses a technique called signature analysis. During signature analysis, File Anti-Virus matches the detected object with records in application databases. Following the recommendations of Kaspersky experts, signature analysis is always enabled.
For increasing the effectiveness of protection you can use heuristic analysis. During heuristic analysis, File Anti-Virus analyzes the activity of objects in the operating system. Heuristic analysis can detect new malicious objects for which there are currently no records in the application database.
To configure the use of Heuristic Analyzer in the operation of File Anti-Virus using Kaspersky Security Center:
- Open Kaspersky Security Center Administration Console.
- In the Managed devices folder of the console tree, open the folder with the name of the administration group to which the relevant protected virtual machines belong.
- In the workspace, select the Policies tab.
- Select a Light Agent for Windows policy in the list of policies and open the Properties: <Policy name> by double-clicking.
- In the policy properties window, select the File Anti-Virus section in the list on the left.
- In the right part of the window, in the Security level section, click the Settings button.
- In the File Anti-Virus window that opens, on the Performance tab, in the Scan methods section, do one of the following:
- If you want File Anti-Virus to use heuristic analysis, select the Heuristic Analysis check box and use the slider to set the heuristic analysis level: Light, Medium, or Deep.
- If you do not want File Anti-Virus to use heuristic analysis, clear the Heuristic Analysis check box.
- Click OK in the File Anti-Virus window.
- Click the Apply button.
To configure the use of Heuristic Analyzer in the operation of File Anti-Virus in the local interface:
- On the protected virtual machine, open the application settings window.
- In the left part of the window, in the Anti-Virus protection section, select File Anti-Virus.
In the right part of the window, the File Anti-Virus component's settings are displayed.
If the settings in the local interface are not available, this means that the values of settings defined by the policy are used for all protected virtual machines of the administration group.
- Complete steps 6–8 of the previous instructions.
- To save changes, click the Save button.