What does file restored mean ?

[Thaqif]

Hi everyone,

This is my first time asking a question. We have 1 customer using Kaspersky Endpoint Security and for the past few days, our application showing some strange behaviour.
When we checked the Kaspersky report, it seems that some of our services are marked as trojan and being deleted. Luckily, we are able to restore the services back and perform the exclusion.

However, we did notice another record that is showing file restored as per screenshot below. What does this mean? Is that this particular file is deleted and then restored back ?
If that is the case, why we can't see any record of this particular object MetaData.fdb is being deleted. It is just showing file restored.

We just not sure what is the impact of this event towards our application file - MetaData.fdb as this consist of important structure. Lately, our customer reported that some of the record are missing from our application and we just afraid that this file restored means that Kaspersky rolling back to the previous version before they created the record in application.

 

[ElvinE5]

Good day

s this the working mechanism Behavior Detected and component Remidiation Engine

When you launch any application, the Behavior Analysis component monitors that this application is executed, records all the actions of the program, makes backup copies of important files that the program accesses (opens, changes, etc.), while observing and analyzing the actions.

 

if an anomaly is detected in the application’s actions (for example, encryption attempts), the application stops and all actions are opened according to the logs, and files are restored from copies by the Remidiation Engine component.

 

create an exception for your application so that these components do not react to it (if it is indeed a legitimate application)