SafenSoft: proactive protection against malware and insider threats

Tel.: + 7 (495) 967-14-51   |   Contacts   |   Site map
 
 
Products
eStore
Downloads
Support
Partners
Company

Unknown application launch

 Index |   << Previous |  Next >>

Unknown application – any application that is not present in the SafenSoft SysWatch system profile, other than installers with a digital signature from a trusted Certification Authority.

 

When the launch of an unknown application is attempted, SafenSoft SysWatch suspends the launch and pops up an Alert window.

The Alert window has 2 parts:

 

192

 

 

•Application description. Information about the unknown application is shown: name, vendor, antimalware scan result (if antimalware scanning is supported by your SafenSoft SysWatch license).
•Available actions. Available actions that can be performed on the application are shown:

Execute in limited mode – application will be launched in a sandbox.

Execute in install mode – application and all its modules will be added to the system profile as Trusted.

Block – block application from launching. This option is recommended for any applications you don’t trust  or for unauthorized launch attempts by those applications.

 

 

NOTE

If no decision is made within 5 minutes of the Alert window appearings, the application will be blocked automatically.

 

NOTE

The Alert window may not appear, if Automatic processing of incidents is enabled. It is necessary to set Delayed Decision in the Incident management window for the Alert window to appear     in the case of security incidents.
 

122_1

 

 

 

 

Actions

1.Launch new application.
2.SafenSoft SysWatch suspends the launch and pops up an Alert window.
3.If you are sure that the application is safe, set Execute in install mode and click the Execute button. The application and all its modules will be added to the system profile as Trusted.

 

193

 

 

NOTE

You can scan the application for malicious code from the Alert Window. Click the Scan link to check the application (if antimalware scanner and appropriate license are available).

 

IMPORTANT

If you are not sure that the application is safe, set Execute in a limited mode and click on the Execute button to launch the application in a sandbox. The application will be launch under Isolated user account, the malicious activity will be blocked.

 

 

 

In case of unknown application launch is attempted, SafenSoft SysWatch suspends the launch and pops up Alert window.

 

If you don’t know what application is launching or don’t trust it, click on the Block button, to block the launch.

 

194

 

 

 

 

© SafenSoft, 2004-2011. All rights are reserved. License Agreement | Press Center | Awards | Contacts | Search | Site map | RSS

Host-based Intrusion Prevention System (HIPS) | The best virus protection | Application whitelisting | Application Integrity Control | Comprehensive Malware Protection | Application protection | Windows Startup / Registry Protection