User Guide - Kaspersky Lab

132 Kaspersky Internet Security 7.0
selection window, or click Applications to see a list of open
applications, and select one of them as necessary.
• Define the Proactive Defense response to the selected application
attempting to read, edit, or delete system registry files.
You can use any of these actions as a response: allow, prompt
for action, and block. Left-click on the link with the action until it
reaches the value that you need.
• Choose if you want to generate a report on the operation carried
out, by clicking on the log / do not log link.
Figure 42. Creating an registry key monitoring rule
You can create several rules, and order their priority using the Move Up and
Move Down buttons. The higher the rule is on the list, the higher the priority
assigned to it will be.
You can also create an allow rule (i.e. all actions are allowed) for a system
registry object from a notification window stating that a program is trying to
execute an operation with an object. To do so, click Create allow rule in the
notification and specify the system registry object that the rule will apply to in the
window that opens.