- Jan 26, 2020
- 1,628
Please provide comments and solutions that are helpful to the author of this topic.
Because I never get my system infected with malware. I mean I am always careful. So, what are the reasons not to disable system watcher? Thank you.I get the other two but why disable "System Watcher"?
It's the part of Kaspersky that protects against malware that doesn't have signatures available in it's database aka the Behavior Blocker (BB).what are the reasons not to disable system watcher? Thank you.
System Watcher protects against ransomware and file-encrypting malware and rolls back actions performed by malicious programs.
The System Watcher component includes:
- Automatic Exploit Prevention, the technology which prevents and blocks the actions of exploits.
- Protection against screen lockers, which detects and removes ad banners when you press the keyboard combination specified in the component settings.
- Application Activity Control, which performs an action specified in the component settings when it detects suspicious application behavior.
- Rollback of application actions, which rolls back the actions performed by a malicious application. Information about suspicious actions performed by applications is collected continuously unless you disable the component.
If you supposedly cant get infected, then why use Kaspersky? By disabling system watcher you greatly decrease the protection against zero day malware as System Watcher is Kaspersky's Behavior blocker and now Kaspersky has to rely completely on its cloud and signatures for detection, and you no longer receive protection against exploitation of vulnerabilities. I also wouldnt disable Stalkerware and other applications as RAT's generally fall under this category.Because I never get my system infected with malware. I mean I am always careful. So, what are the reasons not to disable system watcher? Thank you.
I agree with all. Thank you. But reading description for System Watcher, when it said Roll back, I thought it automatically creates system restore point. And I didn't want that happen, in order to boost performance of my 2016 made PC.
- Ask user. If System Watcher, File Anti-Virus, or the results of a scan task confirm that it is necessary to perform a rollback, System Watcher prompts the user for action. This option is available if the Perform recommended actions automatically check box is cleared under Settings → Performance settings → PC resource consumption.
Thank you very much. I did not know that.You may would feel better when you select the option "Ask user" related to rollback by System Watcher:
System Watcher settings
support.kaspersky.com
If you trust the FP you can restore the quarantine and add the object to the exclusions …I will choose what to delete/quarantine
True but what happens if they delete/quarantine an important Windows file and I cannot boot?If you trust the FP you can restore the quarantine and add the object to the exclusions …