Selecting the protection mode

In the Real-Time File Protection task, the protection mode can be selected. The Objects protection mode section lets you specify the type of access attempts for which Kaspersky Embedded Systems Security for Windows scans objects.

The value of the Objects protection mode setting applies to the entire protection scope specified in the task. You cannot specify different values for the setting for individual nodes within the protection scope.

To select the protection mode:

1. Open the Real-time file protection window.
2. In the window that opens, open the General tab and select the protection mode that you want to set:
   • Smart mode
     

     Kaspersky Embedded Systems Security for Windows selects objects to be scanned on its own. An object is scanned on being opened and then again after being saved if the object has been modified. If the object is accessed multiple times and modified by the process, Kaspersky Embedded Systems Security for Windows rescans the object only after the object is saved by the process for the last time.

   • On access and modification
     

     Kaspersky Embedded Systems Security for Windows scans an object when it is opened and rescans after it is saved, if the object was modified.

     This option is selected by default.

   • On access
     

     Kaspersky Embedded Systems Security for Windows scans all objects when they are opened for reading, execution, or modification.

   • When run
     

     Kaspersky Embedded Systems Security for Windows scans a file only when it is accessed to be executed.

   • Deeper analysis of launching processes (process launch is blocked until the analysis ends)
     

     Kaspersky Embedded Systems Security for Windows performs longer analysis of launching processes with higher probability to detect a threat. The process launch is blocked until the end of analysis.

3. Click the OK button.

The selected protection mode will take effect.