User guide

U S E R G U I D E
142
USING A SHARED FOLDER
When working in safe mode, all changes required due to the application's operation, are only made in safe mode, so they
do not affect the standard mode. Thus, files saved in safe mode cannot be transferred to the standard mode.
For the files saved or modified in safe mode to be available in standard mode, Safe Run Shared Folder can be used,
provided by Kaspersky Small Office Security. All files saved in this folder when working in safe mode, will be available in
standard mode.
The shared folder is a folder on a hard disk created at the Kaspersky Small Office Security installation.
The shared folder is created in the %AllUsersProfile%\Application Data\Kaspersky Lab\SandboxShared folder during
application installation, and its location cannot be changed.
The shared folder is indicated with the icon in the Microsoft Windows Explorer. You can also go to the folder from the
Kaspersky Small Office Security main window.
To open the shared folder from the Kaspersky Small Office Security's main window:
1. Open the main application window.
2. In the left part of the window, select the Security Zone section.
3. In the bottom part of the window, in the Safe Run section, click the Shared Folder link. The folder will open in a
standard Microsoft Windows Explorer window.
QUARANTINE AND BACKUP
Quarantine is a special repository that stores the objects possibly infected with viruses. Potentially infected objects are
objects suspected of being infected with viruses or their modifications.
A potentially infected object can be detected and quarantined by File Anti-Virus, Mail Anti-Virus, Proactive Defense or in
the course of a virus scan.
Objects are quarantined in the following cases:
Object code resembles a known but partially modified threat, or has malware-like structure but is not registered
in the database. In this case objects are moved to Quarantine after heuristic analysis performed by the File Anti-
Virus, Mail Anti-Virus or during anti-virus scan. Heuristic analysis rarely causes false alarms.
The sequence of operations performed by an object looks suspicious. In this case objects are moved to
Quarantine after the analysis of their behavior by Proactive Defense component.
When you place an object in Quarantine, it is moved, not copied: the object is deleted from the disk or email, and saved
in the Quarantine folder. Files in Quarantine are saved in a special format and are not dangerous.
Backup storage is designed for storing backup copies of infected objects that could not been disinfected immediately
after detection.
It is possible that after the next databases update, Kaspersky Small Office Security will be able to identify the threat
unambiguously and neutralize it. Due to this fact, the application scans quarantine objects after each update (see
page 76).