How to enable and use System Watcher in Kaspersky Small Office Security 7
Latest update: July 3, 2019
ID: 14685
System Watcher protects against file-encrypting malware and rolls back the changes made by malicious applications.
We do not recommend disabling System Watcher.
The System Watcher component includes:
- Automatic Exploit Prevention, the technology which prevents and blocks the actions of exploits.
- Application Activity Control, which performs an action specified in the component settings when it detects suspicious application behavior.
- Rollback of application actions, which rolls back the actions performed by a malicious application. Information about suspicious actions performed by applications is collected constantly.
- Protection against screen lockers, Which detects and removes ad banners that demand ransom for closing them.
How to enable System Watcher
System Watcher is enabled by default.
To enable System Watcher if it was disabled:
- Click the settings icon in the lower-left corner of the Kaspersky Small Office Security main window. To learn how to open the main application window, see this article.
- Go to the Protection section.
- Click the switch to the “on” position.
System Watcher will be enabled.
How to set up System Watcher
By default, System Watcher uses the settings recommended by Kaspersky experts. If you want to change the settings:
- Click the settings icon in the lower-left corner of the Kaspersky Small Office Security main window. To learn how to open the main application window, see this article.
- Go to the Protection section and click System Watcher.
- Select the checkbox Monitor attempts to perform unauthorized operations and select an action to be performed upon detection from the drop-down list:
- Select action automatically. The application automatically performs an action recommended by the Kaspersky experts.
- Allow action.
- Block action.
- In the Application Activity Control block, select the action that will be performed when malicious activity is detected:
- Select action automatically. The application automatically performs an action recommended by the Kaspersky experts.
- Delete the application.
- Terminate the application.
- Ignore.
- In the Rollback of application actions block, select the action that will be performed when malicious activity is detected:
- Select action automatically. The application automatically performs an action recommended by the Kaspersky experts.
- Roll back.
- Do not roll back.
- Select the checkbox Detect and block screen lockers and select the key combination for manually closing a screen locker. See this article for more information.
The System Watcher settings will be changed.
