System Watcher - Kaspersky Lab
System Watcher - Kaspersky Lab
System Watcher - Kaspersky Lab
You also want an ePaper? Increase the reach of your titles
YUMPU automatically turns print PDFs into web optimized ePapers that Google loves.
<strong>Kaspersky</strong> Anti-Virus 2012<br />
Rolling back actions performed by malware<br />
You can use the product feature for rolling back the actions performed by malware in the system.<br />
To enable a roll-back, <strong>System</strong> <strong>Watcher</strong> should log the history of program activity.<br />
By default, KAV 2012 rolls back relevant operations automatically when the protection<br />
components detect malicious activity (rolling back actions after malicious activity is detected in the<br />
system can be initiated either by the <strong>System</strong> <strong>Watcher</strong> component based on patterns of<br />
dangerous activity, or by Proactive Defense, and during virus scan task run or File Anti-Virus<br />
operation).<br />
When running in interactive mode, <strong>System</strong> <strong>Watcher</strong> prompts the user for action. You can specify<br />
the operation which should be performed whenever malicious activity is detected. The procedure<br />
of rolling back malware operations affects a strictly defined set of data. It causes no negative<br />
consequences for the operating system or data integrity on your computer.<br />
To configure rollback of malware operations, perform the following actions:<br />
1. Open the application settings window.<br />
2. In the left part of the window under Protection Center select <strong>System</strong> <strong>Watcher</strong>.<br />
3. In the right part of the component settings in the Rollback of malware action s section<br />
specify actions that <strong>System</strong> <strong>Watcher</strong> should perform if it has a possibility to roll back<br />
changes made by a malicious program:<br />
► Select the Select action automatically variant (if the automatic protection mode is<br />
enabled). In this case <strong>System</strong> <strong>Watcher</strong> will automatically apply an action recommended<br />
by <strong>Kaspersky</strong> <strong>Lab</strong> specialists.<br />
► Select the Prompt for action variant (if the interactive protection mode is enabled). In<br />
this case <strong>System</strong> <strong>Watcher</strong> will notify you that rollback is necessary and will prompt for<br />
action: perform or cancel rollback.<br />
► Select action<br />
If you choose the Select action variant, select an action from the drop-down list:<br />
► Roll back<br />
► Do not roll back<br />
4 | 5