Kaspersky Internet Security 2012

A D V A N C E D A P P L I C A T I O N S E T T I N G S
OPTIMIZING FILE SCAN
You can shorten the scan time and speed up Kaspersky Internet Security. This can be achieved by scanning only new
files and those files that have altered since the last time they were scanned. This mode applies both to simple and
compound files.
To scan only new and changed files:
1. Open the application settings window.
2. In the left part of the window, in the Protection Center section, select the File Anti-Virus component.
3. Click the Settings button in the right part of the window.
4. In the window that opens, on the Performance tab in the Scan optimization section, check the Scan only new
and changed files box.
MAIL ANTI-VIRUS
Mail Anti-Virus scans incoming and outgoing messages for malicious objects. It starts when the operating system
launches and runs continually, scanning all email messages sent or received via the POP3, SMTP, IMAP, MAPI and
NNTP protocols, as well as over secure connections (SSL) via POP3 and IMAP (see section "Encrypted connections
scan" on page 116).
The indicator of the component's operation is the application icon in the taskbar notification area, which looks like
whenever an email message is being scanned.
Mail Anti-Virus intercepts and scans each email message received or sent by the user. If no threats are detected in an
email message, it becomes available for the user.
You can specify the types of messages which should be scanned and select the security level (see page 85)
(configuration settings affecting the scan intensity).
By default, the signature analysis – a mode that uses records from application databases to search for threats – is
always enabled. In addition, you can enable heuristic analysis. Furthermore, you can enable filtering of attachments (see
page 86), which allows automatic renaming or deletion of specified file types.
If a threat is detected in a file, Kaspersky Internet Security assigns one of the following statuses to the file:
Status designating the type of the malicious program detected (for example, virus, Trojan).
Potentially infected (suspicious) status if the scan cannot determine whether the file is infected or not. The file
may contain a code sequence typical of viruses and other malware, or the modified code of a known virus.
After that, the application blocks the email message, displays a notification (see page 172) of the detected threat on the
screen, and performs the action specified in the settings of Mail Anti-Virus. You can change the actions to be taken when
a threat is detected (see section "Changing the action to take on infected email messages" on page 86).
If you are working in automatic mode (see section "Selecting a protection mode" on page 64), when dangerous objects
are detected, Kaspersky Internet Security automatically applies the actions recommended by Kaspersky Lab specialists.
For malicious objects, this action is Disinfect. Delete if disinfection fails, for suspicious objects – Move to Quarantine.
If dangerous objects are detected when working in interactive mode (see section "Selecting a protection mode" on
page 64), the application displays a notification on the screen that you can use to select the required action the list of
available ones.
Before attempting to disinfect or delete an infected object, Kaspersky Internet Security creates a backup copy for
subsequent restoration or disinfection. Suspicious (potentially infected) objects are quarantined. You can enable
automatic scanning of quarantined objects after each update.
83