System Watcher in Kaspersky Security Cloud
Latest update: April 19, 2017
ID: 13361
The article refers to Kaspersky Security Cloud — Family and Kaspersky Security Cloud — Personal.
The System Watcher component of Kaspersky Security Cloud collects data about actions performed by applications on your computer and shares this information with other components for improved protection.
What is System Watcher
System Watcher is a component which includes:
- Automatic Exploit Prevention technology, which prevents and blocks actions of malware which uses vulnerablities of software and operating system.
- Application Privilege Control, which performs an action specified in the component settings when detects suspicious behaviour of an application.
- Protection against screen lockers, which detects and removes screen lockers when you press a set combination on the keyboard.
- Rollback of malware actions, The information about suspicious actions in the system is collected not only for the current session, but also for previous sessions. This allows to roll back all actions performed by the application if it is subsequently recognized as malicious.
- Protection against cryptoviruses. Cryptoviruses are a type of malware that encrypts your files and demands a ransom. When a cryptovirus attempts to encrypt a file, the Kaspersky product automatically creates a backup copy of the file before it is affected. If the file gets encrypted, the product restores it from a backup copy.
Please note:- Backup copies are stored in the system Temp folder (temporary files storage). The backup copy is not created if there is not enough space on the system disk, so please keep at least 10-15% of the disk C space empty.
- Backup copies are removed when Kaspersky Security Cloud is closed or System Watcher is disabled (backup copies are not removed if the application is stopped unexpectedly). If necessary, you can remove backup copies manually by deleting the contents of the Temp folder.
- Backup copies are stored in the system Temp folder (temporary files storage). The backup copy is not created if there is not enough space on the system disk, so please keep at least 10-15% of the disk C space empty.
How to turn System Watcher on or off
- In the main window of Kaspersky Security Cloud, click the gear icon .
- For the guide on opening the application window, please refer to this article.
- In the Settings view, go to the Protection section.
- In the right part of the Settings window, you can enable or disable the component by clicking the switch.
How to configure System Watcher
- In the main window of Kaspersky Security Cloud, click the gear icon .
- For the guide on opening the application window, please refer to this article.
- In the Settings view, go to Protection and select System Watcher.
- In the System Watcher settings view, you can:
- Select an action to be performed on exploit detection.
- Select an action on malware activity detection.
- Roll back unwanted changes when possible.
- Set the keyboard combination to remove screen lockers.