How to enable and use System Watcher in Kaspersky Anti-Virus 20
Latest update: July 17, 2019
ID: 14687
System Watcher protects against file-encrypting malware and rolls back the changes made by malicious applications.
We do not recommend disabling System Watcher.
The System Watcher component includes:
- Automatic Exploit Prevention, the technology which prevents and blocks the actions of exploits.
- Application Activity Control, which performs an action specified in the component settings when it detects suspicious application behavior.
- Rollback of application actions, which rolls back the actions performed by a malicious application. Information about suspicious actions performed by applications is collected constantly.
- Protection against screen lockers, which detects and removes ad banners that demand ransom for closing them.
How to enable System Watcher
System Watcher is enabled by default.
To enable System Watcher if it has been disabled:
- In the main window of Kaspersky Anti-Virus, click
.
- To learn how to open the application, see this guide.
- Go to the Protection section.
- Move the switch to the “on” position.
System Watcher will be enabled.
How to set up System Watcher
By default, System Watcher uses the settings recommended by Kaspersky experts. If you want to change the settings:
- In the main window of Kaspersky Anti-Virus, click .
- To learn how to open the application, see this guide.
- Go to the Protection section and click System Watcher.
- Enable Automatic Exploit Prevention and select the action that will be performed when an exploit is detected:
- Select action automatically. Kaspersky Anti-Virus will automatically perform the action recommended by Kaspersky experts.
- Allow action.
- Block action.
- Select the action that will be performed when malicious activity is detected:
- Select action automatically. Kaspersky Anti-Virus will automatically perform the action recommended by Kaspersky experts.
- Delete the application.
- Terminate the application.
- Ignore.
- Select the action that will be performed when malicious activity can be rolled back:
- Select action automatically. Kaspersky Anti-Virus will automatically perform the action recommended by Kaspersky experts.
- Roll back.
- Do not roll back.
- Enable protection against screen lockers and set a key combination for removing banners manually. For more information, see this article.
The System Watcher settings will be changed.