Kaspersky PURE 3.0

File Anti-Virus is a component of the Computer Protection functional module that controls computer file system. It scans open, launched and saved files on your computer and on all attached discs. Each file the user deals with is intercepted by the Kaspersky Lab product and scanned for viruses. The user can work with the file if the file is not infected or was successfully disinfected by File Anti-Virus. If the file cannot be disinfected by some reasons, it is either deleted or quarantined.

Security level of Kaspersky PURE 3.0 components is a set of parameters which is used to protect your computer. In order to configure File Anti-Virus manually, perform the following actions:

1. Open the main application window.
2. In the top right corner of the window click Settings.

3. In the top part of the Settings window select Protection.
4. In the left part of the window select File Anti-Virus.
5. In the right part of the Settings window in the Security level section set the required security level:
   • High. Set this level if you suspect that your computer has a high chance of being infected.
   • Recommended. This level provides an optimum balance between the efficiency and security and is suitable for most cases.
   • Low. If you work in a protected environment (for example, in a corporate network with centralized security management), the low security level may be suitable. The low security level can also be set if you are working with resource-consuming applications. Before you enable the Low security level perform full computer scan.
6. Click the OK button in the Settings window.

7. Close the main application window.

Based on the scan results, File Anti-Virus assigns one of the following statuses to the objects detected:

• Malicious program (such as a virus or a Trojan).
• Potentially infected status when the scan cannot determine if the object is infected. This means that the application detected a sequence of code in the file from an unknown virus, or modified code from a known virus.

In order to configure the action to be performed on detected objects, perform the following actions:

1. Open the main application window.
2. In the right top corner of the window click Settings.

3. In the top part of the Settings window select Protection.
4. In the left part of the window select File Anti-Virus.
5. In the right part of the Settings window in the Action on threat detection section, perform the following actions (depends on the selected protection mode):
   • Select Select action automatically (if the automatic protection mode is enabled). In this case File Anti-Virus will select actions recommended by Kaspersky Lab specialists automatically.
   • Select Prompt for action (if the interactive protection mode is enabled). In this case File Anti-Virus will inform you about threats detection and prompt for actions to be performed: allow or block activity.
   • Select action:
     • Disinfect.
     • Delete (if Disinfect is not checked).
     • Delete if disinfection fails (if the Disinfection option is checked). Kaspersky Lab specialists recommend setting the Disinfect, if not possible - delete function. In this case the application will perform the following actions on malicious objects:
     • Disinfect if the object can be disinfected. After disinfection the user can continue working with the object.
     • Quarantine the object, if after scan process the application cannot determine if the object is infected. If you have selected the special option to scan the quarantined objects after databases update, then after the application receives a new disinfect signature the object will be disinfected and become available for the user.
     • Delete if the object will be determined as a virus, but it cannot be disinfected.

     Before deleting a malicious file Kaspersky PURE 3.0 creates a backup copy of the file. The file can be restored from the backup copy if you need the file or the application can disinfect the file.

6. Click on the OK button in the Settings window.

7. Close the main application window.

You can expand or narrow down the protection scope by adding / removing objects to be scanned, or by changing the type of files to be scanned by File Anti-Virus. In order to edit the objects scan list and configure the type of files to be scanned by File Anti-Virus, perform the following actions:

1. Open the main application window.
2. In the right top corner of the window click Settings.

3. In the top part of the Settings window select Protection.
4. In the left part of the window select File Anti-Virus.
5. In the right part of the window in the Security level section click the Settings button.

6. In the window that will open on the General tab in the File types section, select the required settings:
   • All files - File Anti-Virus analyses all files (opened, executed or saved) regardless of extensions and formats. Files with which no actions are performed can be scanned manually.
   • Files scanned by format - File Anti-Virus analyses file formats. File Anti-Virus analyse inner file header to detect file format (text file, executable file and etc.). If the component detects that the file cannot be infected, the file will not be scanned for viruses. If the file of the detected format can be infected, the file will be scanned for viruses.
   • Files scanned by extension - File Anti-Virus analyses files depending on their extensions (for example, files with extensions .com, .exe, .sys, .bat, .dll and etc.). File extensions are designed to identify file types. File header extensions are designed to detect file types. According to a file header a user or application can identify file types in a folder.

   • When selecting file types you should remember the following: the intruder can send a virus to your computer with the extension .txt, which could be an executable file renamed as .txt file. If you have selected the Files scanned by extension option, such a file will be skipped by the scan, because the risk of malicious codes intrusion to such files is very low.

7. In the Protection scope section add / edit / remove items from the list of scanned files.
8. Click on the OK button in the File Anti-Virus window.

9. Click on the OK button in the Settings window.
10. Close the main application window.

Once you configure File Anti-Virus settings manually, the security level will changed to the custom security level. You can return the recommended security level for File Anti-Virus. In order to do this, perform the following actions:

1. Open the main application window.
2. In the right top part of the window click Settings.

3. In the Settings window, go to the Protection tab and select File Anti-Virus in the left part of the window.
4. In the right part of the Settings window, click the Default level button. The recommended security level will be set.
5. Click OK in the Settings window.

6. Close the main application window.