Kaspersky Internet Security 2012

A D V A N C E D A P P L I C A T I O N S E T T I N G S
3. In the right part of the window, in the Heuristic Analysis section, check the Use updatable patterns of
dangerous activity (BSS) box.
4. Click Select action and then specify the desired action on the dropdown list.
ROLLING BACK A MALICIOUS PROGRAM'S ACTIONS
You can use the option of rolling back the actions performed by malware in the system. To enable a rollback, System
Watcher logs the history of program activity. You can limit the volume of information that System Watcher stores for a
rollback.
By default, Kaspersky Internet Security rolls back relevant operations automatically when the protection components
detect malicious activity. When running in interactive mode, System Watcher prompts for action. You can specify an
action that should be taken if a rollback of actions performed by a malicious program is available.
The procedure of rolling back malware operations affects a strictly defined set of data. It causes no negative
consequences for the operating system or data integrity on your computer.
To select an action that should be taken if a rollback of actions performed by a malicious program is available:
1. Open the application settings window.
2. In the left part of the window, in the Protection Center section, select the System Watcher component.
3. In the right part of the window, in the Rollback of malware actions section, choose Select action, and then
select the required action from the dropdown list.
To limit the volume of information that System Watcher stores for a rollback:
1. Open the application settings window.
2. In the left part of the window, in the Protection Center section, select the System Watcher component.
3. In the right part of the window, in the Rollback of malware actions section, check the Limit data to be stored
for rollback box and specify the maximum data volume that System Watcher should store for a rollback.
APPLICATION CONTROL
Application Control prevents applications from performing actions that may be dangerous for the system and ensures
control of access to operating system resources and your identity data.
The component tracks actions performed in the system by applications installed on the computer and regulates them
based on the Application Control rules. These rules regulate potentially dangerous activity, including applications' access
to protected resources, such as files and folders, registry keys, and network addresses.
Applications' network activity is controlled by the Firewall component (on page 109).
At the first startup of an application on the computer, the Application Control component verifies its safety and includes it
in one of the groups. The group defines the rules that Kaspersky Internet Security should apply for controlling the activity
of this application. The Application Control rules are a set of access rights to computer resources and restrictions posed
on various actions being performed by applications on the computer.
You can configure the conditions for distribution of applications by groups (see page 102), move an application to
another group (see page 103), or edit the rules of Kaspersky Internet Security (see page 104).
101