Manage Blocked Autoruns
- The 'Unblock Autoruns' area shows applications that were blocked by the boot protection feature of CCS.
- The feature monitors attempted changes to the registry records of Windows services, auto-start entries and scheduled tasks. The feature can be managed in the following locations:
- Realtime Scans - Click 'Settings' > 'Advanced Protection' > 'Miscellaneous' > ' Apply the selected action to unrecognized autorun entries to new/modified registry items'
- On-Demand Scans - Click 'Settings' > 'Antivirus Settings' > 'Scans' > 'select the scan profile' > 'Options' > 'Apply this action to suspicious auto-run processes'.
- CCS will disable apps that attempt to modify protected registry items if 'Terminate and Disable' is chosen for 'Apply this action to suspicious auto-run processes'.
- You can also unblock applications that you think are safe.
- Click 'Tasks' at the top-left of the home screen
- Click the 'Unblock Autoruns' tile
- The interface shows all auto-run items blocked by CCS:
Unblock Autoruns - Column Descriptions |
|
---|---|
Column Header |
Description |
Name |
The label of the blocked item. |
Type |
The category of item. For example, 'Autorun File', 'Scheduled Task' or 'Windows Service'. |
Detected By |
The security module which identified the threat. |
Date/Time |
When the item was detected. |
Action |
The response to the threat. The possible actions are:
|
Location |
Path of the identified application. |
- Click 'Tasks' > 'General Tasks' > 'Unblock Autoruns'
- Select the items you want to release
- Click the 'Unblock' button:
You will be asked if you want to add the file to the Scan Exclusions list.
- Click 'Yes' to add the item to exclusions. It will be restored to its original location and won’t be flagged as dangerous by future scans.
- Click 'No' to ignore the item once. It will be restored to its original location, but will still be flagged as a threat by the next scan.
Delete blocked autoruns entries
- Click 'Tasks' > 'General Tasks' > 'Unblock Autoruns'
- Select the items you want to remove
- Click the 'Delete' button
The item will be removed from your computer.