Advice Request Disabling these in Kaspersky Standard.

Please provide comments and solutions that are helpful to the author of this topic.

amirr

Level 27
Thread author
Verified
Top Poster
Well-known
Jan 26, 2020
1,614
1
5,545
2,569
42
I know what I am doing and I what files I download. So is this okay to disable these three settings?

1:
1656331032427.png

2:

1656331079874.png


3. System Watcher.
 
what are the reasons not to disable system watcher? Thank you.
It's the part of Kaspersky that protects against malware that doesn't have signatures available in it's database aka the Behavior Blocker (BB).

From Kaspersky Support:
System Watcher protects against ransomware and file-encrypting malware and rolls back actions performed by malicious programs.

The System Watcher component includes:

  • Automatic Exploit Prevention, the technology which prevents and blocks the actions of exploits.
  • Protection against screen lockers, which detects and removes ad banners when you press the keyboard combination specified in the component settings.
  • Application Activity Control, which performs an action specified in the component settings when it detects suspicious application behavior.
  • Rollback of application actions, which rolls back the actions performed by a malicious application. Information about suspicious actions performed by applications is collected continuously unless you disable the component.
 
Because I never get my system infected with malware. I mean I am always careful. So, what are the reasons not to disable system watcher? Thank you.
If you supposedly cant get infected, then why use Kaspersky? By disabling system watcher you greatly decrease the protection against zero day malware as System Watcher is Kaspersky's Behavior blocker and now Kaspersky has to rely completely on its cloud and signatures for detection, and you no longer receive protection against exploitation of vulnerabilities. I also wouldnt disable Stalkerware and other applications as RAT's generally fall under this category.
 
System Watcher is a critical component of Kaspersky. It must remain activated.
It's like driving a car without insurance.... Highly risky. Keep activate this shield

The other 2 rules must also be enabled. This allows the detection of adware, keyloggers, PUPs, riskware etc.
 
In my opinion option 1 could be disabled. I don't want Kaspersky to perform automatically a task but i want to be asked first. I hate full automatism in security. We must use our brain sometimes. 😊 They might have FP and i don't want things deleted automatically as it could bring more pain than gain but this is only my opinion. Where Kaspersky fails it's my brain intervening (wishful thinking). I will choose what to delete/quarantine, etc. The options 2 and 3 i keep them enabled but amirr is asking us an opinion on disabling them. For 2 and 3 my advice is to leave them enabled.
 
I agree with all. Thank you. But reading description for System Watcher, when it said Roll back, I thought it automatically creates system restore point. And I didn't want that happen, in order to boost performance of my 2016 made PC.
 
I agree with all. Thank you. But reading description for System Watcher, when it said Roll back, I thought it automatically creates system restore point. And I didn't want that happen, in order to boost performance of my 2016 made PC.

You may would feel better when you select the option "Ask user" related to rollback by System Watcher:
  • Ask user. If System Watcher, File Anti-Virus, or the results of a scan task confirm that it is necessary to perform a rollback, System Watcher prompts the user for action. This option is available if the Perform recommended actions automatically check box is cleared under Settings → Performance settings → PC resource consumption.
 
You may would feel better when you select the option "Ask user" related to rollback by System Watcher:

Thank you very much. I did not know that.
But when you uncheck the first checkbox, the second done also gets disabled? (Because it becomes gray.)
1656345462748.png