Kaspersky Internet Security 2012

A D V A N C E D A P P L I C A T I O N S E T T I N G S
system backup;
email databases;
removable storage media, hard and network drives.
Critical Areas Scan. By default, Kaspersky Internet Security scans objects loaded at the startup of the
operating system.
Custom Scan. Kaspersky Internet Security scans objects selected by the user. You can scan any object from
the list below:
system memory;
objects loaded on operating system startup;
system backup;
email databases;
removable storage media, hard and network drives;
any file or folder that you have selected.
The Full Scan and the Critical Areas Scan tasks have their peculiarities. For these tasks, it is not recommended that you
edit the lists of objects to scan.
Each scan task is performed in a specified area and can be started according to a previously created schedule. Each
scan task is also characterized by a security level (a combination of settings that impact the depth of the scan). By
default, the signature mode (the one using records from application databases to search for threats) is always enabled.
You can also apply various scan methods and technologies.
After the full scan task or the critical areas scan task is started, the scan run progress is displayed in the Scan window, in
the section with the name of the task running, and in the Task Manager (see section "Managing scan tasks. Task
Manager" on page 72).
If a threat is detected, Kaspersky Internet Security assigns one of the following statuses to the found object:
Malicious program (such as a virus or Trojan).
Potentially infected (suspicious) status if the scan cannot determine whether the object is infected or not. The
file may contain a sequence of code characteristic of viruses, or modified code from a known virus.
The application displays a notification (see page 172) about the detected threat and performs the prescribed action. You
can change the actions to be taken when a threat is detected.
If you are working in automatic mode (see section "Selecting a protection mode" on page 64), when dangerous objects
are detected, Kaspersky Internet Security automatically applies the actions recommended by Kaspersky Lab specialists.
For malicious objects, this action is Disinfect. Delete if disinfection fails, for suspicious objects – Move to Quarantine.
If dangerous objects are detected when working in interactive mode (see section "Selecting a protection mode" on
page 64), the application displays a notification on the screen that you can use to select the required action the list of
available ones.
Before attempting to disinfect or delete an infected object, Kaspersky Internet Security creates a backup copy for
subsequent restoration or disinfection. Suspicious (potentially infected) objects are quarantined. You can enable
automatic scanning of quarantined objects after each update.
Information on the scan results and events which have occurred during the execution of the task is logged in a
Kaspersky Internet Security report (see page 167).
65