l2q129

多次测试，其实自定义扫描的设置 是正常的 但右键“智能查杀”确实不受自定义扫描的控制。（即自动处理发现的病毒）

系统 win10 ltsc 2019 KES 10.3.3.275 设置是自定义扫描时，发现病毒只要通知，不需要处理。而且我点了“保存”；然而还是自动处理病毒了，见日志

Hello, Try to reload or restart KIS if this behavior still exist. And then, Please tell me this issue has gone or not. Regards the problem is still exist. forget it . I have disabled File Antivirus. Actually, I dont like static scan at all. Fileless attack is more and more popular, right? I think the behaviour based detection is more important. it’s not true. Signature-based and cloud-assisted protections are still ones of the most important components of kaspersky behavioral blocker alone is insufficient. I have seen many malwares which are able to bypass Kaspersky's behavioral blocker but they are stopped by signatures although Kaspersky has one of the best BBs by the way, physical malwares are still very popular Kaspersky is also susceptible to adwares and PUPs so users should be aware of this kind of threat even though PUP protection is enabled in “Threads and exclusions”. ESET seems to be the most aggressive against PUPs and adwares fileless malwares can somehow be stopped by blocking of Windows Script host, Powershell, java and some common script-delivering vectors => try to use Novirusthank Syshardener em...maybe you’re right. thank you for sharing and advice

Hello, Try to reload or restart KIS if this behavior still exist. And then, Please tell me this issue has gone or not. Regards the problem is still exist. forget it . I have disabled File Antivirus. Actually, I dont like static scan at all. Fileless attack is more and more popular, right? I think the behaviour based detection is more important.

ok, thank you for your help

hello,@FLOOD . thank you for reply Yes, I think if I choose the scan mode “on execution”, the File AntiVirus should scan the file when I execute the virus. My Operating System version is windows 10 LTSC 2019, build 1809. And KIS version is 20.0.14.1085 , patch e choose the “on execution”. and has not changed other option. then , I download a virus contained in a folder. Input the password and unpack it , enter the folder, wait a minute, it will be moved to quarantine.

well, I have a question about the “on execute”. First, I download a virus and put it in the folder.Second, I open the folder, Kaspersky file antivirus scan it and kill it . why? I just open the folder and not even have double clicked it.