Protection

The policy includes settings for the component Protection. Protection is launched when the operating system of the mobile device starts. The component remains continuously in the operational memory of the device and scans the file system. The policy contains settings which allow you to set the scope of the scan and select an action to be performed when a malicious object is found.

Objects to be scanned

Scanned file types

0. All files
   

   Registry Hive	HKEY_LOCAL_MACHINE
   Registry Path	SOFTWARE\Policies\Microsoft\Windows Mobile Settings\Registry\HKLM\Software\Kaspersky Lab\Endpoint8\Policies
   Value Name	OAS_ExecutablesOnly
   Value Type	REG_DWORD
   Value	0

1. Only executable files
   

   Registry Hive	HKEY_LOCAL_MACHINE
   Registry Path	SOFTWARE\Policies\Microsoft\Windows Mobile Settings\Registry\HKLM\Software\Kaspersky Lab\Endpoint8\Policies
   Value Name	OAS_ExecutablesOnly
   Value Type	REG_DWORD
   Value	1

Reaction to threat

Action on threat detection:

0. Quarantine
   

   Registry Hive	HKEY_LOCAL_MACHINE
   Registry Path	SOFTWARE\Policies\Microsoft\Windows Mobile Settings\Registry\HKLM\Software\Kaspersky Lab\Endpoint8\Policies
   Value Name	OAS_Action
   Value Type	REG_DWORD
   Value	0

1. Delete
   

   Registry Hive	HKEY_LOCAL_MACHINE
   Registry Path	SOFTWARE\Policies\Microsoft\Windows Mobile Settings\Registry\HKLM\Software\Kaspersky Lab\Endpoint8\Policies
   Value Name	OAS_Action
   Value Type	REG_DWORD
   Value	1

2. Log event
   

   Registry Hive	HKEY_LOCAL_MACHINE
   Registry Path	SOFTWARE\Policies\Microsoft\Windows Mobile Settings\Registry\HKLM\Software\Kaspersky Lab\Endpoint8\Policies
   Value Name	OAS_Action
   Value Type	REG_DWORD
   Value	2