Anti-ransomware

Anti-ransomware components protect computers against ransomware applications that can, for example, block access to a computer system until a sum of money is paid. The anti-ransomware components are:

• KSN (Kaspersky Security Network). The cloud-based knowledge base containing information about the reputation of applications and websites. Use of data from Kaspersky Security Network ensures faster responses to threats, improves the performance of some protection components, and reduces the likelihood of false positives. To detect malicious objects based on KSN data, Kaspersky Anti-Ransomware Tool for Home analyzes both objects stored on the computer and HTTP traffic in order to evaluate the reputation of URLs associated with uploaded files.
• Behavior Detection. This component collects data on the actions of applications on your computer and provides this information to other protection components to improve their performance.
• Exploit Prevention. The component tracks executable files that are run by vulnerable applications. When there is an attempt to run an executable file from a vulnerable application that was not performed by the user, Kaspersky Anti-Ransomware Tool for Home blocks this file from running.
• Remediation Engine. The component rolls back actions that have been performed by malware in the operating system.