Applications activity - Kaspersky Lab

Internet Security 2012
Applications activity

Kaspersky Internet Security 2012
Table of Contents
Applications activity .......................................................................................................................... 2
What is applications activity .......................................................................................................... 2
Viewing applications activity ......................................................................................................... 2
Changing trusted group for an individual application .................................................................... 3
Editing rules for an individual application ...................................................................................... 5
1 | 6

Kaspersky Internet Security 2012
Applications activity
What is applications activity
KIS 2012 tracks actions in the system performed by applications installed on the computer, using
the Activity Monitoring tool. You can view a report about all installed or running applications,
created by Activity Monitoring, in the Applications Activity window.
Viewing applications activity
To view an activity report of the applications installed and running on your computer, perform the
following actions:
1. Open the main KIS 2012 window.
2. Select the Applications Activity section.
3. In the top part of the Applications Activity window from the drop-down menu select the
category of applications (All or Running).
4. If you select to display running applications, the Filter button becomes available in the
Applications Activity window. Using the button you can sort out the applications according
to the following criteria:
► Run on startup – processes, run on the startup of the operating system.
► System processes – processes, required for the operation of the operating system.
► Kaspersky Internet Security processes – processes, launched by Kaspersky
Internet Security.
2 | 6

Kaspersky Internet Security 2012
5. If you select to display all installed applications, applications filtering by status and by kind
becomes available in the Applications Activity window:
► A click upon green, yellow or red light sorts out applications according to the groups
they belong to: Trusted, Low/High Restricted, Untrusted.
► A click upon the View button groups the applications by time or by vendor (select
from the drop-down list).
Changing trusted group for an individual application
In the Application Activity window in the Status/Group column you can see the group to which
an application belongs:
► Trusted. Applications with a digital signature by trusted vendors, or applications which are
recorded in the base of trusted applications. These applications have no restrictions applied
on actions performed in the system.
► Low Restricted. Applications that do not have a digital signature from a trusted vendor,
and which are not listed in the base of trusted applications. However, these applications
have received low value of the threat rating (based on the data from the Kaspersky Security
3 | 6

Kaspersky Internet Security 2012
Network service). They are allowed to perform some operations, such as access to other
processes, system control, hidden network access. The user's permission is required for
most operations.
► High Restricted. Applications without a digital signature and which are not listed in the
base of trusted applications. These applications have a high value of the threat rating. The
applications of this group require the user's permission for most actions which affect the
system.
► Untrusted. Applications without a digital signature and which are not listed in the base of
trusted applications. These applications have received a very high value of the threat rating.
Kaspersky Internet Security blocks any actions performed by such applications.
You can manually move an application to a different group.
However, Kaspersky Lab specialists recommend that you avoid moving applications from default
groups.
To move an application to another group, perform the following actions:
1. In the Applications Activity window select the required applications category (Running or
All).
2. If necessary, set the filter: click either the Filter or View button and select the required
display category.
3. Left-click the status of the required application and in the context menu select the group to
which an application should be moved: Trusted, Low Restricted, High Restricted or
Untrusted. Wait till the status icon changes.
4. In the Applications Activity window click the Close button.
To restore an application to the default group, perform the following actions:
1. In the Applications Activity window select the required applications category (Running or
All).
2. Left-click the status of the required application and in the context menu, select the Restore
default group item.
4 | 6

Kaspersky Internet Security 2012
3. In the Applications Activity window click the Close button.
Editing rules for an individual application
The Application Control component registers actions performed by every application in the
system, regulates the application’s activity depending on the trust group of an application. Each
group has a specific set of rules. According to these rules the Application Control component
allows, prompts the user, or denies an action for an application. When an application accesses a
resource, the component verifies its rights and performs an action set by the rule.
In the Applications Activity window you can edit applications rules. For this perform the following
actions:
1. Open the main application window.
2. Select the Applications Activity section.
3. In the Applications Activity window right-click the required application and in the context
menu select Application rules.
5 | 6

Kaspersky Internet Security 2012
You can find more detailed information about application’s rules and how to edit them from the
Application Control chapter.
6 | 6