Kaspersky Anti-Ransomware Tool for Business (ghacks.net)

Status
Not open for further replies.

Av Gurus

Level 29
Thread author
Verified
Honorary Member
Top Poster
Malware Hunter
Well-known
Sep 22, 2014
1,767
Kaspersky Anti-Ransomware Tool for Business is a free security product by Kaspersky to block ransomware on Windows machines.

Designed for businesses who don't run other Kaspersky software, it is available for anyone as a free download on the official site.

Please note that you need to fill out a form on the site that asks for a phone number, email address, name and company name, country, and number of workstations.

The program is compatible with other security software on the system -- provided that it is not Kaspersky's own.

The program homepage is scarce in terms of information; it lacks information about how the program works or which threats it protects against. The press release is not of much help either.

Kaspersky Anti-Ransomware Tool for Business
kaspersky-anti-ransomware-tool.jpg


The help file of the program, accessible after installation, is of more help. While it does not mention any ransomware types by name, it reveals what the program does to protect the system.

It runs in the background at all times, and monitors program activity. Upon detection of malware, it will automatically add it to the block list. The security program uses various methods to detect threats according to Kaspersky. It uses its own signature database, and Kaspersky's Security Network which is a cloud-based service that aggregates information from Kaspersky users.

Kaspersky's tool will perform rollback operations for actions of the malicious application. This includes restoring changed files or changes to the Windows Registry.

For that, Kaspersky Anti-Ransomware for Business keeps a history of program activity.

The Anti-Ransomware Tool provides little in terms of preferences or options. The start page lists information about detected threats and actions. There you find a link to the settings.

kaspersky-anti-ransomware-tool-settings.png


You may change the trace level there, disable the program's self-defense mechanism, and add proxy server information on top of that.

The only other menu provided by the program is the "manage applications screen. There you find listed applications that were blocked by the program in the past.

kaspersky-anti-ransomware-tool-manage.png


You may use the screen to unblock programs or add programs to the list of trusted applications which protects them from being identified as problematic by Kaspersky's tool.

Kaspersky's Anti-Ransomware Tool for Business is free, but by using it you agree to provide information to Kaspersky in return (to increase the protection level according to Kaspersky).

Among the many bits of information is the hardware and software of the computer, information about downloaded and started applications, unique application installation IDs and unique computer IDs, information about checked files, and information about digital certificates that are in use.

You find the full list under "about data provision" in the help file.

Closing Words
It is near-impossible to judge the program without running lengthy tests to see how effective it is in protecting Windows PCs against malware threats. It is probably a good idea to wait until this has been tested in the wild, or if you have the capabilities, tested by yourself before deciding on whether to install it as a protective program on Windows.
 

Exterminator

Community Manager
Verified
Staff Member
Well-known
Oct 23, 2012
12,527
I will also wait and see about this one.Seems to me there are probably better options for the home users but it definitely needs to be tested.
I am quite fond of W.A.R at the moment so I will be sticking with that.Not to mention I am a KIS 2017 user and a couple PC's anyway.
 

_CyberGhosT_

Level 53
Verified
Honorary Member
Top Poster
Content Creator
Well-known
Aug 2, 2015
4,286
This needs tested again.
Anyone up for it ?
I am downloading it now but we need to see its reliability, before
we commit to installing this.
 

cruelsister

Level 42
Verified
Honorary Member
Top Poster
Content Creator
Well-known
Apr 13, 2013
3,147
For any interested I'll be posting two KAR videos starting this weekend. Part 1 will be as close to a straight review as is possible for me to do; Part 2 the following week will delve a bit more into the mechanism of KAR's defenses.
 

Evjl's Rain

Level 47
Verified
Honorary Member
Top Poster
Content Creator
Malware Hunter
Apr 18, 2016
3,684
KIS user don't need this program?? or both program installed secure protection?

Well in such instance go to KIS for better tweaking the protection, that tool like others are only focus on ransomware attacks and has no backup when bypass.
Kaspersky antiransomware uses KSN and System watcher modules, which are included in KIS, KAV, KTS that's why you can't install KARW on top of KIS. If you have KIS, you are pretty much protected and should look for another antiransomwares or anti-exe programs :)
 
Status
Not open for further replies.

About us

  • MalwareTips is a community-driven platform providing the latest information and resources on malware and cyber threats. Our team of experienced professionals and passionate volunteers work to keep the internet safe and secure. We provide accurate, up-to-date information and strive to build a strong and supportive community dedicated to cybersecurity.

User Menu

Follow us

Follow us on Facebook or Twitter to know first about the latest cybersecurity incidents and malware threats.

Top