User Guide - Kaspersky Lab

ADVANCED OPTIONS 235
The program also provides detailed reports (see 19.3 on pg. 240) on the
operation of all protection components, virus scan tasks, and updates.
Monitored ports can regulate which Kaspersky Internet Security modules control
data transferred on select ports (see 19.5 on pg. 262). Configuration of proxy
server settings (see 19.7 on pg. 266) provides the application access to the
Internet which is critical for certain real-time protection components and updates.
The Rescue Disk can help restore your computer’s functionality after an infection
(see 19.4 on pg. 259). This is particularly helpful when you cannot boot your
computer’s operating system after malicious code has damaged system files.
You can also change the appearance of Kaspersky Internet Security and can
customize the program interface (see 19.7 on pg. 266).
The following sections discuss these features in more detail.
19.1. Quarantine for potentially
infected objects
Quarantine is a special storage area that holds potentially infected objects.
Potentially infected objects are objects that are suspected of being infected
with viruses or modifications of them.
Why potentially infected? This are several reasons why it is not always possible
to determine whether an object is infected:
• The code of the object scanned resembles a known threat but is partially
modified.
Application databases contain threats that have already been studied by
Kaspersky Lab. If a malicious program is modified by a hacker but these
changes have not yet been entered into the databases, Kaspersky
Internet Security classifies the object infected with this changed malicious
program as being potentially infected, and indicates what threat this
infection resembles.
• The code of the object detected is reminiscent in structure of a malicious
program, although nothing similar is recorded in the application
databases.
It is quite possible that this is a new type of threat, so Kaspersky Internet
Security classifies the object as a potentially infected object.
The heuristic code analyzer detects potential viruses. This mechanism is fairly
effective and very rarely produces false positives.