About Kaspersky Embedded Systems Security for Windows working in the operating system safe mode

Kaspersky Embedded Systems Security for Windows components can be started when the operating system loads in safe mode. In addition to the Kaspersky Security Service (kavfs.exe), the klam.sys driver is loaded. It is used to register the Kaspersky Security Service as a protected service during the start of the operating system. For more details, see section Registering the Kaspersky Security Service as a protected service.

Kaspersky Embedded Systems Security for Windows can be started in the following safe modes of the operating system:

• Safe Mode Minimal – This mode is started when the standard option of the operating system safe mode is selected. At that, Kaspersky Embedded Systems Security for Windows can start the following components:
  • Real-Time File Protection.
  • On-Demand Scan.
  • Applications Launch Control and Rule Generator for Applications Launch Control.
  • Log Inspection.
  • File Integrity Monitor.
  • Baseline File Integrity Monitor.
  • Application Integrity Control.

Safe Mode with Networking – In this mode, the operating system is loaded in safe mode with network drivers. In addition to the components started in Safe Mode Minimal, Kaspersky Embedded Systems Security for Windows can start the following components in this mode:

• Database Update.
• Software Modules Update.