Contents
Backup
If Kaspersky Security detects malicious code in a file while scanning a protected virtual machine, the application blocks the file, assigns the Infected status to it, places a copy of it in Backup, and attempts to disinfect the file.
Backup storage is a list of backup copies of files that have been deleted or modified by the application during the disinfection process. Backup copy is a file copy created by the application before disinfection or deletion of this file. Backup copies of files are stored in a special format and do not pose a threat.
On detecting malicious code in a file that is part of the Windows Store application, Kaspersky Security immediately deletes the file without copying it to Backup. You can restore the integrity of the Windows Store application using tools of the Microsoft Windows operating system.
If file disinfection succeeds, the status of the backup copy of the file changes to Disinfected. You can restore the file from its disinfected backup copy to its original folder.
In Kaspersky Security Center, in Backup there is a consolidated list of files that were placed in Backup by Kaspersky applications on devices. You can view the properties of files in Backups on protected virtual machines, run virus scan for the files in Backup, and delete files from Backup using the Administration Console or the Web Console. Kaspersky Security Center does not copy files from Backups to the Administration Server. Instead, all the files reside in Backups on protected virtual machines. Files are restored on the protected virtual machine.
You can work with the Backup on the protected virtual machine in the local interface of Light Agent for Windows or from the command line of Light Agent for Linux.
When the application is removed, Backup files are removed from the protected virtual machine.
When the defined amount of time expires and the maximum size of Backup is reached, the application automatically deletes backup copies of files with any status from Backup.
You can also manually delete the backup copy of either a restored or unrestored file.
Configuring Backup settings
You can configure the following Backup settings:
- Maximum Backup storage term for backup copies of files.
The default maximum storage period for backup copies of files in Backup is 30 days. When the maximum storage term expires, the application automatically deletes the oldest files from Backup. You can cancel the time-based restriction or change the maximum file storage term.
- Maximum size of Backup.
By default, the maximum Backup size is 100 MB. When the maximum size is reached, Kaspersky Security will automatically delete the oldest files from Backup so that the maximum size is not exceeded.
You can configure Backup settings in the Light Agent policy properties in the Administration Console, in the Light Agent for Windows local interface, and in the Web Console when creating or editing the Light Agent for Windows policy settings (Application settings → Other settings → Reports and Storages) and Light Agent for Linux policy settings (Application settings → Other settings).
To configure Backup settings on the virtual machines in the Administration Console:
- Open Kaspersky Security Center Administration Console.
- In the Managed devices folder of the console tree, open the folder with the name of the administration group to which the relevant protected virtual machines belong.
- In the workspace, select the Policies tab.
- In the list of policies, select Light Agent for Windows policy to configure Light Agent for Windows settings, or Light Agent for Linux policy to configure Light Agent for Linux settings, and open the Settings: <Policy name> window by double-clicking it.
- In the policy properties window, select the Reports and Storages section in the list on the left.
- If you want to configure the term for storing backup copies of files in the Backup, in the right part of the window, in the Backup settings section, do one of the following:
- If you want to restrict the storage period for backup copies of files in Backup, select the Store files no longer than check box and specify the maximum storage period for backup copies of files in the field to the right of the check box.
The default maximum storage period for backup copies of files in Backup is 30 days.
- If you want to cancel the limit for storing backup copies of files in Backup, clear the Store files no longer than check box.
- If you want to restrict the storage period for backup copies of files in Backup, select the Store files no longer than check box and specify the maximum storage period for backup copies of files in the field to the right of the check box.
- If you want to configure the size of Backup, in the right part of the window, in the Backup settings section, perform one of the following actions:
- If you want to restrict the size of Backup, select the Maximum storage size check box and specify the maximum size of Backup in the field to the right of the check box.
By default, the maximum size is 100 MB.
- If you want to remove the limit on the size of Backup, clear the Maximum storage size check box.
- If you want to restrict the size of Backup, select the Maximum storage size check box and specify the maximum size of Backup in the field to the right of the check box.
- Click the Apply button.
To configure Backup settings for a virtual machine with Light Agent for Windows in the local interface:
- On the protected virtual machine, open the application settings window.
- In the left part of the window, in the Other settings section, select Reports and Storages.
- Complete steps 7–8 of the previous instructions.
If the settings in the local interface are not available, this means that the values of settings defined by the policy are used for all protected virtual machines of the administration group.
- To save changes, click the Save button.
Working with Backup in a local interface
In the local interface of Light Agent for Windows, backup copies of files in Backup are presented in the form of a table.
You can perform the following actions with backup copies of files:
- View the list of backup copies of files.
- Restore files from backup copies to their original folders.
- Delete backup copies of files from Backup.
You can also perform the following actions while managing data in the table:
- Filter the list of backup copies of files by column values or by custom filter conditions.
- Use the file backup copy search function.
- Sort backup copies of files.
- Change the order and set of columns that are displayed in the list of backup copies of files.
- Copy selected backup copies of files to clipboard.
Restoring files from Backup in a local interface
In the local interface of Light Agent for Windows, you can restore the file from its backup copy to its original folder.
We recommend that you restore files from backup copies only when they have Disinfected status.
To restore files from the Backup in the local interface:
- On the protected virtual machine, open the main application window.
- In the upper part of the main application window, click the Reports link to open the Reports and Storages window.
- Select the Backup tab.
- To restore all files from the Backup, open the context menu anywhere in the table and select the Restore all item.
The application restores all files from their backup copies to their original folders.
- To restore one or more files from Backup:
- In the table, on the Backup tab, select one or more backup copies that you want to restore. To select multiple backup copies, use the CTRL key.
- Click the Restore button or open the context menu and select the Restore item.
The application restores files from the selected backup copies to their original folders.
Deleting backup copies of files from Backup in a local interface
In the local interface of Light Agent for Windows, you can delete backup copies of recovered files and non-recovered files.
To delete backup copies of files from the Backup in the local interface:
- On the protected virtual machine, open the main application window.
- In the upper part of the main application window, click the Reports link to open the Reports and Storages window.
- Select the Backup tab.
- To delete all backup copies of files from Backup, do one of the following:
- Click the Clear storage button.
- Open the context menu anywhere in the table and select Clear storage.
- To delete one or more backup copies of files from the Backup:
- In the table on the Backup tab, select one or more backup copies that you want to delete. To select multiple backup copies, use the CTRL key.
- Click the Delete button or open the context menu and select the Delete item.