User Guide - Kaspersky Lab

Protection management system 75
pg. 304). In most cases, this field is filled in automatically when
you add an exclusion rule from a Proactive Defense notification.
You can add advanced settings for the following verdicts,
among others:
o Invader (injects into program processes). For this verdict,
you can give a name, mask, or complete path to the object
being injected into (for example, a .dll file) as an additional
exclusion condition.
o Launching Internet Browser. For this verdict, you can list
browser open settings as additional exclusion settings.
For example, you blocked browsers from opening with
certain settings in the Proactive Defense application
activity analysis. However, you want to allow the browser
to open for the domain www.kasperky.com with a link from
Microsoft Office Outlook as an exclusion rule. To do so,
select Microsoft Office Outlook as Object and Launching
Internet Browser as the Threat Type, and enter an
allowed domain mask in the Advanced settings field.
4. Define which Kaspersky Internet Security components will use this rule.
If any is selected as the value, this rule will apply to all components. If
you want to restrict the rule to one or several components, click on any,
which will change to selected. In the window that opens, check the
boxes for the components that you want this exclusion rule to apply to.
To create an exclusion rule from a program notice stating that it has detected a
dangerous object:
1. Use the Add to trusted zone link in the notification window (see Figure
13).
2. In the window that opens, be sure that all the exclusion rule settings
match your needs. The program will fill in the object name and threat
type automatically, based on information from the notification. To create
the rule, click OK.
To create an exclusion rule from the report window:
1. Select the object in the report that you want to add to the exclusions.
2. Open the context menu and select Add to trusted zone (see Figure
14).
3. The exclusion settings window will then open. Be sure that all the
exclusion rule settings match your needs. The program will fill in the
object name and threat type automatically based on the information
from the report. To create the rule, click OK.