Data Loss Prevention |
To protect content of important folders from being changed by malicious software, use the Data Loss Prevention feature. With this feature enabled, you can view and add files to a protected folder, however, any modification or removal of files from this folder is blocked. To allow access to a folder for applications, add necessary applications to exclusions. You can also restore previously saved copies. To open the Data Loss Prevention window 1.Open Dr.Web menu , then select . 2.In the open window, click tile. 3.Make sure Dr.Web operates in administrator mode (the lock at the bottom of the program window is open ). Otherwise, click the lock . 4.Click the tile. Figure 83. Access to the Data Loss Prevention window In this section: •Dr.Web operation with previously saved file copies •Restore and delete saved copies Dr.Web operation with previously saved file copies
For each folder, you can configure application access parameters. You can view and copy the protected folder. You can also create new elements in this folder. The processes that create the new elements can modify them until these processes are completed. When an application attempts to access the folder, a notification on access blocking will be displayed.
If you add a folder to the list of protected folders, a default rule is applied to it. Thus, any modification and removal of the folder content is restricted for all applications, except those from the list of trusted applications. To view this list, visit the website https://products.drweb.com/services/data_protection/. The list contains the most popular applications, for example, some Microsoft and Adobe applications. System processes, such as explorer.exe, are not included into the list of trusted applications as they can be used by malicious objects to attack the system.
Figure 87. Protected folders In the table, you can see information on: •protected object, •number of exclusions from a general rule, and •protection status. To activate protection, select the check box for the necessary object. If this check box is cleared, the folder is not protected any more. It is displayed with the icon. The following management elements are available to work with objects in the table: •The button—adding an object to the list of protected objects. •The button—editing elements in the table. •The button—removing an object from the list of protected objects. To add a folder to the list of protected folders 1.Click the button. In the open window, select the necessary object by clicking the button. 2.If necessary, enable or disable access to the folder for trusted applications. This option is enabled by default. 3.You can also specify applications that will have full access to an object regardless the general settings. Figure 88. Adding a protected folder The number of applications that have full access to the protected folder is displayed on the main window of Data Loss Prevention in the column. To add an application to the exclusions 1.In the Data Loss Prevention window, click to add a new folder to the list of protected. 2.In the open window, click . Select an application that will have full access to the objects in the protected folder. 3.Click . To edit the list of exclusions for protected folders 1.Select a folder from the list and click . 2.At the bottom of the open window in the table, you can see all applications that have full access to the selected folder. •To add a new application, click . •To delete an application from the list of exclusions, click . 3.Click . The tab is available only if you have copies of files saved in the previous versions of the program. This function allows you to restore and remove saved copies. However, you cannot save new copies. Figure 89. List of saved copies Removal of created copies You may also delete existing copies to free up some disk space (deleting the copies will not affect the original files). To do that, select the necessary copy and click the button. If any threat has caused corruption of your files, you can restore copies of these files created on a specific date. To do that: 1.Select the necessary copy (the date when the copy was created is displayed in the left column) and click the button. 2.In the open window, specify the path to the folder to which the files will be restored. |