Treatment of an object is not possible, a special treatment procedure is required, a dangerous object on traffic was detected - the instruction manual for the Kaspersky Lab Kav2010- Kaspersky Anti-Virus. Changing the action on detected objects Actions on the detection

If a Kaspersky Virus Removal Tool.detected malicious objects, then in the notification window "" Select actions for all objects in the drop-down list on the right and click on the button Proceed.

If you want to assign a single action for all objects, refer to the second item.

Note: If objects remained in the list for which the action is not selected, a window message appears with an error message. Select an action for all objects detected.". Click on the button OK. and for objects highlighted by red, select action, and then click on the button Proceed.

2. Select a common action for all objects

At the top of the list of detected objects there are buttons of group selection of actions.

Copy everything in quarantine Copy in quarantineOriginal files will be untouched.

Process all - Objects will be appointed active action:

If the object is curable - Treat.
If treatment is impossible, but there is a backup copy of the object - Restore.
In all other cases, the object will be appointed Delete.

Skip everything - All objects from the list will be appointed Skip.

Default - Window " Select an action for detected objects."Located in the original state.

3. Treatment of active infection

When detecting active infection Displays a notification " Malicious was found software "In the bottom of the window there is a countdown time for making a solution. Treatment of a computer with a reboot will be run automatically after the end of the countdown, if the user will not be selected. If the type of treatment is selected. If for data storage and completion running programs Lacks allocated 120 seconds, click on the counter The window will be closed through ... seconds, the counter will be stopped.

Treatment with reboot

To treat with a reboot, click on the button. Treat computer reboot.

Note: During treatment with a reboot, the ability to create new files will be blocked, records on the disk / in the registry and so on. It is recommended to pre-save all changes and close all active programs. After blocking the computer, treatment and reboot is performed. Next automatically starts Kaspersky Virus. Removal Tool. And re-scanning.

Treatment without reloading

If you cannot perform a reboot, click on the link Try to cure without rebooting.

The choice of this item does not guarantee the success of treatment.

U to about in about d with t in about p o l b about in a t e l i

either restarting the program, as well as the time to perform the task of searching for viruses from the moment of starting to
completion.

The object's entry is impossible

In some cases, the treatment of a malicious object is impossible. For example, if the file is damaged so much
what to remove from it malicious code And it is not possible to restore the integrity. In addition, the treatment procedure is not
applicable to some species of malicious objects, for example, Trojan programs.

In these cases on the screen output special notificationwhich contains:

Type of threat (for example, virus, trojan program) and the name of the malicious object, as it is presented
in the viral encyclopedia of the Kaspersky Lab. The name of the malicious object is designed as
links to the resource www.viruslist.ru, where you can get detailed information about the threat of what
the genus is detected on your computer.

The full name of the malicious object and the path to it.

You are invited to choose one of the following objects:

Delete - Delete a malicious object. Before removal, a backup copy of the object is formed.
the case, if it is necessary to restore it or a picture of its infection.

Skip - block access to the object, but do not perform any actions above it, only
secure information about it in the report.

Later you can return to the processing of missed malicious objects from the report window
(The possibility of deferred processing is not available only for objects found in electronic
messages).

To apply the selected action to all objects with the same status detected in the current session.
protection or task component work, check box

Apply in all such cases.

The current work session is the time of operation of the component from the moment of its launch until it turns on
either restarting the program, as well as the time to perform the task of testing viruses from the moment of starting to
completion.

Special treatment procedure is required

When a threat is detected, which this moment active in the system (for example, malicious process in
random access memory or autorun objects), the screen is displayed a request for a special
extended treatment procedure.

The Kaspersky Lab specialists strongly recommend agreeing with the extended
treatment procedures. To do this, click on the button. OK. However, note that at the end it will be
the computer is rebooted, so before performing the procedure it is recommended to save
the results of the current work and close all programs.

In the process of performing treatment procedures, it is not allowed to run postal clients and edit registry
operating system. After restarting the computer, it is recommended to start a complete check of viruses.

Bthressed dangerous object on traffic

If a dangerous object is detected by a dangerous object on the traffic on the screen, special
notification.

Change action on detected objects

File antivirus as a result of the check assigns one of the following status found objects:

status of one of the malware (for example, virus, trojan program).
perhaps infectedWhen the inspection is uniquely impossible to determine if an object is infected or not. This means that a sequence of an unknown virus code or a modified code of a known virus is detected in the file.

If, as a result of checking a file for viruses, Kaspersky Anti-Virus finds infected or contaminated objects, further files of the file antivirus depend on the status of the object and the selected action.

By default, all infected files are treated, and everything is possible - placed on quarantine.

All possible actions are shown in the table below.

If you chose as actions	When a dangerous object is detected
Request action	File antivirus gives a warning message to the screen, containing information about how the malicious object is infected / the file is infected, and offers one of the following actions. Depending on the status of the object, the action may be different.
Block access	File Antivirus blocks access to the object. Information about this is fixed in report . Later you can try to cure This object.
Block access Treat	File antivirus blocks access to the object and tries to treat it. If the object managed to cure, it is provided for work. If the object has failed to cure, it is either blocked (if the object is impossible), or it is assigned the status perhaps infected (if the object is considered suspicious), and it is placed on quarantine . Information about this is fixed in report . Later you can try to cure this object.
Block access Treat Remove if treatment is impossible	File antivirus blocks access to the object and tries to treat it. If the object managed to cure, it is provided for work. If the object has failed to cure, it is removed. In this case, a copy of the object is saved in backup storage .
Block access Treat Delete	File antivirus blocks access to the object and removes it.

Before treating or removing the object Kaspersky Anti-Virus forms it backup and puts it in backup storage In case, if you subsequently need to restore the object or the ability to cure it.

To change the set action on detected objects, follow these steps:

Open the main program window.
In the left side of the window, select Protection.
In the context menu of the component File Antivirus. Select Setup.
In the window that opens, select the desired action.