Being part of Kaspersky System Watcher, this technology analyses the most relevant system event data, including information on the modification of files. When it registers a suspicious application attempting to open a user’s personal files it immediately makes a local protected backup copy of them. If the application is then judged to be malicious, Kaspersky System Watcher automatically rollbacks unsolicited changes.
