Kaspersky Lab Anti-Virus 2010, 3u, 3Y User's Guide download pdf (Page 134)

K A S P E R S K Y A N T I - V I R U S 2 0 1 0

134

Possible responses:

Quarantine – shuts down the process and places the executable file to the quarantine. When you place an

object in Quarantine, it is moved, not copied. Files in Quarantine are saved in a special format and are not

dangerous.

When you scan Quarantine later with updated threat signatures, the status of the object could change. For

example, the object may be identified as infected and can be processed using an updated database.

Otherwise, the object could be assigned the not infected status, and then restored.

If a file is quarantined manually and after a subsequent scan turns out to be uninfected, its status will not

change to OK immediately after the scan. This will only occur if the scan took place after a certain amount

of time (at least three days) after quarantining the file.

Terminate – shuts down the process.

Allow – allows the process to execute.

To apply the selected action to all objects of the same status detected in the current session of protection component or a

task operation, check the Apply to all box. The current session is the time from when the component is started until it

is disabled or the application is restarted or the time from beginning a virus scan until it is complete.

If you are sure that the program detected is not dangerous, we recommend adding it to the trusted zone to avoid

Kaspersky Anti-Virus making repeat false positives when detecting it.

HIDDEN PROCESS DETECTED

When Proactive Defense detects a hidden process on your system, a special notification pops up containing:

The name of the threat as it is listed in the Kaspersky Lab Virus Encyclopedia. The name of the threat is given

as a link to www.viruslist.com, where you can find detailed information on the type of threat detected.

Full name of the hidden process file and a path to it.