I don't understand the "Perform actions automatically" part

[Trident]

It's part of the heuristic scans and is a detection category indicating a "very harmful object".

Very harmful object in terms of having high probability to be harmful (very high confidence)? Because online users are reporting that they’ve compiled simple programs and this has triggered VHO detections.

 

[Practical Response]

Very harmful object in terms of having high probability to be harmful (very high confidence)? Because online users are reporting that they’ve compiled simple programs and this has triggered VHO detections.

Since heuristic scanning is literally based off behavioral pattern analysis it would be my assumption.

 

[Trident]

Since heuristic scanning is literally based off behavioral pattern analysis it would be my assumption.

Yeah, behavioural patterns as well as features such as executable structure, imports, entry point, suspicious modifications and many others.
Dynamic analysis looks at behaviours, static analysis looks at the features.

 

[Studynxx]

What I don't understand is that let's say Kaspersky wasn't good enough and malware has gotten on my PC. Just fictive example. So as it begins to do more and more strange things on my computer, won't Kaspersky's heuristics after "step 1" or 2 or whatever (of / by the given malware) step in, be like "yo wth are you doing? Stop!" and just stop it in its tracks?