Kaspersky Internet Security 2012

U S E R G U I D E
You can select one of the following actions:
Allow – allow the application to run.
Quarantine – close the application, move the application file to Quarantine where it poses no threat to your
computer's security.
With further scans of Quarantine, the status of the object may change. For example, the object may be identified
as infected and can be processed using an updated database. Otherwise, the object could be assigned the not
infected status and then restored.
The status of a file moved to Quarantine can be changed to not infected at a next scan, but not earlier than
three days after it is moved to Quarantine.
Terminate application – interrupt the execution of the application.
Add to exclusions – always allow the application to perform such actions in the future.
AN APPLICATION THAT MAY BE EXPLOITED BY INTRUDERS, IS DETECTED
If File Anti-Virus, Mail Anti-Virus, or the virus scan task detects an application that may be exploited by intruders, a
notification is displayed on the screen.
The notification provides the following information:
Description of the threat.
Type of the threat and name of the object as listed in the Kaspersky Lab Virus Encyclopedia.
The icon is displayed next to the name of the object. Clicking the icon opens a window with information about
the object. Clicking the www.securelist.com link in the window allows you to go to the Virus Encyclopedia
website and obtain more details.
Name of the object file, including the path to it.
You can select one of the following responses to the object:
Quarantine – move the object to Quarantine where it will pose no threat to your computer. This option is
suggested if neither a threat nor any ways of disinfecting the object are known.
With further scans of Quarantine, the status of the object may change. For example, the object may be identified
as infected and can be processed using an updated database. Otherwise, the object could be assigned the not
infected status and then restored.
The status of a file moved to Quarantine can be changed to not infected at a next scan, but not earlier than
three days after it is moved to Quarantine.
Delete – delete the object. Before deleting the object, a backup copy of it is created.
Delete archive - delete password-protected archive.
Ignore / Block – block access to the object, but perform no actions with regard to it; simply record information
about it in a report.
You can return to the processing of skipped objects in the report window. However, you cannot postpone the
processing of objects detected in email messages.
Add to exclusions – create an exclusion rule for this threat type.
206