Kaspersky PURE 2.0

Setting Critical Areas Scan:

security levels

Kaspersky PURE 2.0

1 | 1 3

Content

Setting Critical Areas Scan. Security levels ................................................................................ 2

Security levels ........................................................................................................................ 2

Configuring security level ........................................................................................................ 3 Modifying type of scanned objects ...................................................................................... 3 Scan optimization ................................................................................................................ 6 Scan of compound files ....................................................................................................... 7 Selecting scan method ........................................................................................................ 9 Selecting scan technology ................................................................................................ 10 Creating scan schedule ..................................................................................................... 11 Starting Critical Areas Scan under a different account ...................................................... 12

Kaspersky PURE 2.0

2 | 1 3

Setting Critical Areas Scan. Security levels

Security levels

A security level is a set of predefined scan settings.

Kaspersky Lab specialists distinguish three security levels. You can set one of the following

security levels:

► High. Use this level is the probability of computer infection is very high;

► Recommended. This is the optimal level for most cases and is recommended by

Kaspersky Lab;

► Low. If you are using applications requiring considerable RAM resources, select the

Low security level because the list of files under scan is reduced on this level.

To select a security level, perform the following actions:

1. In the left part of the Settings window select the Scan section.

2. In the menu select the required task - Critical Areas Scan.

3. For the selected task in the Security level section select the required security level.

4. In the Settings window click the Apply button.

Kaspersky PURE 2.0

3 | 1 3

If none of the predefined security levels satisfies your needs, configure scan settings on your

own. As a result of your actions the security level changes to Custom.

When configuring scan task settings, you can always restore the recommended ones. They are

considered optimal, recommended by Kaspersky Lab, and grouped in the Recommended

security level.

To restore the default scan settings, perform the following actions:

1. For the selected scan task in the Settings window in the Security level section click the

Default level button.

2. In the Settings window click the Apply button.

Configuring security level

Modifying type of scanned objects

You can define files of what format and size should be scanned by the selected scan task.

To change the type of scanned objects, perform the following actions:

1. For the selected task in the Security level section click the Settings button.

Kaspersky PURE 2.0

4 | 1 3

2. On the Scope tab in the File types section select the required variant.

Kaspersky PURE 2.0

5 | 1 3

► All files. Kaspersky PURE scans files of all formats and extensions.

► Files scanned by format. If you select this option, Kaspersky PURE only scans

potentially infectious files – i.e. files into which a virus may penetrate. Before

searching for viruses an inner header of an object is analyzed for the file format (txt,

doc, exe and etc). the file extension is also considered during scan.

► Files scanned by extension. In this case, Kaspersky PURE only scans potentially

infectious files – i.e. files into which a virus may penetrate. At this, the file format is

defined by its extension.

Files without extensions are always scanned!

When selecting file types please remember the following:

► Probability of penetration of malicious code into several file formats (such as .txt)

and its further activation is quite low. At the same time, there are formats that contain

or may contain an executable code (such as .exe, .dll, .doc). The risk of penetrating

and activating malicious code in such files is quite high.

► The intruder can send a virus to your computer in an executable file renamed as txt

file. If you have selected the scan of files by extension, such a file is skipped by the

scan. If the scan of files by format is selected, then, regardless of the extension, File

Anti-Virus will analyze the file header, and reveal that the file is an .exe file. Such a

file would be thoroughly scanned for viruses.

3. Click the OK button.

Kaspersky PURE 2.0

6 | 1 3

4. In the Settings window click the Apply button.

Scan optimization

You can shorten the scan time and speed up Kaspersky PURE. This can be achieved by

scanning only new files and those files that have altered since the last time they were scanned.

This mode applies both to simple and compound files.

You can also set a restriction on scan duration for an object. When the specified time interval

expires, the object will be excluded from the current scan (except for archives and files

comprised of several objects).

To optimize scan, perform the following actions:

1. For the selected task in the Security level section click the Settings button.

2. On the Scope tab in the Scan optimization section set the required settings:

► To scan only new and changed files, check the Scan only new and changed files

box;

► To set restriction on scan duration for one object, check the Skip objects scanned

longer than box and specify scan duration for one object.

3. Click the OK button.

4. In the Settings window click the Apply button.

Kaspersky PURE 2.0

7 | 1 3

Scan of compound files

A common method of concealing viruses is to embed them into compound files: archives,

databases, etc. To detect viruses that are hidden this way a compound file should be

unpacked, which can significantly lower the scan speed.

To modify the list of scanned compound files, perform the following actions:

1. For the selected task in the Security level section click the Settings button.

2. On the Scope tab in the Scan of compound files section select types of the scanned

compound files.

For each type of compound file, you can select to scan either all files or only new ones.

To make your selection, click the link next to the name of the object. It changes its value

when you left-click it. If you select the scan new and changed files only scan mode,

you will not be able to select the links allowing you to scan all or new only files.

Kaspersky PURE 2.0

8 | 1 3

You can restrict the maximum size of the compound file being scanned. Compound files

larger than the specified value will not be scanned. For this in the Scan of compound

files section, click the Additional button. In the Compound files window check the Do

not unpack large compound files box and specify the maximum size of scanned files.

3. Click the OK button.

4. In the Settings window click the Apply button.

When large files are extracted from archives, they will be scanned even if the Do not unpack

large compound files box is checked.

Kaspersky PURE 2.0

9 | 1 3

Selecting scan method

Kaspersky PURE uses various scan methods:

► Signature analysis. When performing signature analysis, Kaspersky PURE uses

databases that contain descriptions of known threats and ways of neutralizing them.

Protection using signature analysis provides a minimal level of security.

► Heuristic Analysis. Scan is based on the analysis of the typical behavior of a file

whose operations allow to draw a conclusion about the nature of a file with a certain

probability. The advantage of the method is that new threats are detected even

before they are known to virus analysts.

Additionally you can set the detail level for scans: light scan, medium scan, or deep

scan.

► Rootkit Scan. Rootkit is a set of tools which conceal malicious programs in the

operating system. These tools penetrate the system and mask their presence and

the presence of processes, folders, registry keys of other malicious programs,

described in the rootkit configuration.

► If you are scanning for viruses, you can enable the deep scan for rootkits by

checking the Detailed scan box, which will scan carefully for these programs by

analyzing a large number of various objects. These checkboxes are deselected by

default, since this mode requires significant operating system resources.

The Signature analysis method is always enabled. To enhance the scan efficiency you can

enable other scan methods. For this, perform the following actions:

1. For the selected task in the Security level section click the Settings button.

2. On the Additional tab in the Scan methods select the necessary scan methods.

3. Click the OK button.

Kaspersky PURE 2.0

10 | 1 3

4. In the Settings window click the Apply button.

Selecting scan technology

In addition to the scan methods you can use special technologies:

► iChecker is a technology that increases scan speed by excluding certain objects

from the scan. An object is excluded from the scan with a special algorithm that uses

the release date of Kaspersky PURE databases, the date of the object's last scan,

and any changes in the scan settings.

There are limitations to iChecker: it does not work with large files and applies only to

the objects with a structure that the application recognizes (for example, .exe, .dll, .lnk,

.ttf, .inf, .sys, .com, .chm, .zip, .rar).

► iSwift is a technology that builds on iChecker technology for computers using NTFS.

There are limitations to iSwift: it is bound to a specific file's location in the file system

and can apply only to objects in NTFS.

The technologies iSwift and iChecker allow to increase the virus scan speed by excluding the

files that have not been modified since they were last scanned. By default, both technologies

are used.

To change the set of scan technologies, perform the following actions:

1. For the selected task in the Security level section click the Settings button.

2. On the Additional tab in the Scan technologies section select the required values.

Kaspersky PURE 2.0

11 | 1 3

3. Click the OK button.

4. In the Settings window click the Apply button.

Creating scan schedule

In Kaspersky PURE you can choose whether to start the vulnerability scan task manually or

by schedule (automatically).

If you select the Manually variant, then you can start the task at any time convenient for you.

The scan process takes some time to be completed and you cannot use some applications

installed on your computer during the scan process.

Selecting the By schedule variant allows to configure the automatic start of the vulnerability

scan task. If you select this variant, you can set the vulnerability scan task frequency. In the

schedule settings you can select one of the following frequencies: minutes, hours, days, every

week, at a specified time, every month, after application startup, after every update.

For every frequency you can specify the interval. For example, if you select Every month you

can select a particular day to start the scan task (1, 2, 3...) and set particular time (05:00 p.m.).

To protect your computer, it would be optimal to perform full computer scan not less than one

time a week.

In order to schedule a scan task, perform the following actions:

1. For the selected task in the Security level section click the Settings button.

2. On the Run mode tab in the Schedule section select the necessary values.

Kaspersky PURE 2.0

12 | 1 3

3. If you select By schedule, create a task launch schedule with the frequency and a

definite time interval to start a scan task

You can configure the program to automatically start a skipped scan task as soon as it

becomes possible. For example, the computer was not on at that time when a full scan

task was scheduled. In this case the scan will start as soon as computer is enabled. To

do so, in the Schedule section check the Run skipped tasks box.

Scheduled tasks feature additional functionality, for example, you can pause scheduled

scan when screensaver is inactive or computer is unlocked. This functionality postpones

the task launch until the user has finished working on the computer. So, the scan task

will not take up system resources during the work.

4. Click the OK button.

5. In the Settings window click the Apply button.

Starting Critical Areas Scan under a different account

By default critical areas scan tasks are started under an account you registered in the system.

If your account does not have enough rights, you can specify a different account under whose

rights each scan task will be started. To specify an account, perform the following steps:

1. In the top part of the Settings window select the Scan section.

2. In the left menu select Critical Areas Scan.

3. В правой части окна нажмите на кнопку Режим запуска.

Kaspersky PURE 2.0

13 | 1 3

4. In the Run mode and scan scope section click the Run mode button.

5. Click the OK button.

6. In the Settings window click the Apply button.