Every time my PC starts up, proactive defence detects
"Suspicious driver installation"
of "\??\C:\Program Files\Lenovo\Rescue and Recovery\WAM.sys"
by "C:\Program Files\Lenovo\Rescue and Recovery\br_funcs.exe",
and prompts for action.

I always select "refuse" to it, and system works good in the meantime.

This executable seems to be a part of lenovo's backup software.
Is this dangerous?
Does functionality problem occur when refusing the activity?

---
PC: lenovo ThinkPad X61
OS: Windows XP professional SP3
AntiVirus: Kaspersky Anti-Virus for Windows Workstation 6.0.3.837
---

Thanks in advance,

Hello,

normally it's safe, the software is for backup purpose based on MS volume shadow copy.

Try following, add the application to the trusted zone:
Settings, Protection, Trusted zone, Trusted application, Add 'C:\Program Files\Lenovo\Rescue and Recovery\br_funcs.exe'
and tick only 'Do not restrict application activity'

Kind regards,
sec4me