Xcitium Enterprise

• Introduction To Xcitium Client Security
  • Special Features
  • System Requirements
  • Install Xcitium Client Security
  • Start Xcitium Client Security
  • The Main Interface
    • The Home Screen
    • The Tasks Interface
    • The Widget
    • The System Tray Icon
  • Understand Security Alerts
  • Password Protection
• General Tasks - Introduction
  • Scan And Clean Your Computer
    • Run A Quick Scan
    • Run A Full Computer Scan
    • Run A Rating Scan
    • Run A Custom Scan
      • Create, Schedule And Run A Custom Scan Profile
    • Automatically Scan Unrecognized And Quarantined Files
  • Instantly Scan Files And Folders
  • Process Infected Files
  • Manage Virus Database Updates
  • Manage Blocked Autoruns
  • Manage Quarantined Items
• Firewall Tasks - Introduction
  • Configure Internet Access Rights For Applications
  • Stealth Your Computer Ports
  • Manage Network Connections
  • Stop All Network Activities
  • View Active Internet Connections
• Containment Tasks - Introduction
  • Run An Application In The Container
  • Reset The Container
  • Identify And Kill Unsafe Running Processes
  • Open Shared Space
  • The Virtual Desktop
    • Start The Virtual Desktop
    • The Main Interface
    • Run Browsers Inside The Virtual Desktop
    • Open Files And Run Applications Inside The Virtual Desktop
    • Pause And Resume The Virtual Desktop
    • Close The Virtual Desktop
• DLP Tasks - Introduction
  • Run Data Loss Prevention Scans
  • Manage DLP Quarantined Files
• Advanced Tasks - Introduction
  • Create A Rescue Disk
    • Download And Burn Comodo Rescue Disk
  • Remove Deeply Hidden Malware
  • Manage XCS Tasks
  • View XCS Logs
    • Antivirus Logs
    • VirusScope Logs
    • Firewall Logs
    • HIPS Logs
    • Containment Logs
    • Website Filtering Logs
    • Device Control Logs
    • Autorun Event Logs
    • Alerts Logs
    • XCS Tasks Logs
    • File List Changes Logs
    • Vendor List Changes Logs
    • Configuration Changes Logs
    • Virtual Desktop Event Logs
    • Data Loss Prevention Event Logs
    • Search And Filter Logs
  • Submit Files For Analysis To Xcitium
  • View Active Process List
• XCS Advanced Settings
  • General Settings
    • Customize User Interface
    • Configure Virus Database Updates
    • Log Settings
    • Manage XCS Configurations
      • Xcitium Preset Configurations
      • Personal Configurations
    • Manage Performance
  • Antivirus Configuration
    • Real-time Scanner Settings
    • Scan Profiles
  • Firewall Configuration
    • General Firewall Settings
    • Application Rules
    • Global Rules
    • Firewall Rule Sets
    • Network Zones
      • Network Zones
      • Blocked Zones
    • Port Sets
  • HIPS Configuration
    • HIPS Settings
    • Active HIPS Rules
    • HIPS Rule Sets
    • HIPS Groups
      • Registry Groups
      • COM Groups
  • Protected Objects
    • Protected Objects - HIPS
      • Protected Files
      • Blocked Files
      • Protected Registry Keys
      • Protected COM Interfaces
    • Protected Objects - Containment
      • Protected Files And Folders
      • Protected Keys
  • Data Loss Prevention
    • DLP Monitoring Rules
    • DLP Discovery Rules
    • DLP Keyword Groups
  • Containment Settings
    • Containment Settings
    • Auto-Containment Rules
    • Virtual Desktop Settings
    • Containment - An Overview
    • Unknown Files - The Scanning Processes
  • File Rating Configuration
    • File Rating Settings
    • File Groups
    • Submitted Files
  • Advanced Protection
    • VirusScope Settings
    • Scan Exclusions
    • Device Control Settings
    • Script Analysis Settings
    • Miscellaneous Settings
  • Web Filter Settings
    • Website Filtering Rules
    • Website Categories
• Appendix 1 - XCS How To... Tutorials
  • Enable / Disable AV, Firewall, Auto-Containment And VirusScope Easily
  • Set Up The Firewall For Maximum Security And Usability
  • Block Internet Access While Allowing Local Area Network (LAN) Access
  • Block / Allow Specific Websites To Specific Users
  • Set Up HIPS For Maximum Security And Usability
  • Create Rules To Auto-Contain Applications
  • Run An Instant Antivirus Scan On Selected Items
  • Create An Antivirus Scan Schedule
  • Run Untrusted Programs Inside The Container
  • Run Browsers Inside The Container
  • Restore Incorrectly Quarantined Items
  • Submit Quarantined Items To Xcitium Verdict Cloud For Analysis
  • Enable File Sharing Applications Like BitTorrent And Emule
  • Block Any Downloads Of A Specific File Type
  • Disable Auto-Containment On A Per-application Basis
  • Switch Off Automatic Antivirus Updates
  • Suppress XCS Alerts Temporarily
  • Control External Device Accessibility
• Appendix 2 - Xcitium Secure DNS Service
  • Router - Manually Enable Or Disable Xcitium Secure DNS
  • Windows - Enable Xcitium Secure DNS
• About Xcitium

Manage Blocked Autoruns

Click 'Tasks' > 'General Tasks' > 'Unblock Autoruns'

• The 'Unblock Autoruns' area shows applications that were blocked by the boot protection feature of XCS.

• The feature monitors attempted changes to the registry records of Windows services, auto-start entries and scheduled tasks. The feature can be managed in the following locations:

• Realtime Scans - Click 'Settings' > 'Advanced Protection' > 'Miscellaneous' > ' Apply the selected action to unrecognized autorun entries to new/modified registry items'

• On-Demand Scans - Click 'Settings' > 'Antivirus Settings' > 'Scans' > 'select the scan profile' > 'Options' > 'Apply this action to suspicious auto-run processes'.

• XCS will disable apps that attempt to modify protected registry items if 'Terminate and Disable' is chosen for 'Apply this action to suspicious auto-run processes'.

• You can also unblock applications that you think are safe.

View and manage blocked autorun items

• Click 'Tasks' at the top-left of the home screen

• Click the 'Unblock Autoruns' tile
  

• The interface shows all auto-run items blocked by XCS:

Unblock Autoruns - Column Descriptions
Column Header	Description
Name	The label of the blocked item.
Type	The category of item. For example, 'Autorun File', 'Scheduled Task' or 'Windows Service'.
Detected By	The security module which identified the threat.
Date/Time	When the item was detected.
Action	The response to the threat. The possible actions are: Ignore Terminate Terminate and Disable Quarantine and Disable
Location	Path of the identified application.

Restore blocked autorun items

• Click 'Tasks' > 'General Tasks' > 'Unblock Autoruns'

• Select the items you want to release

• Click the 'Unblock' button:

 

You will be asked if you want to add the file to the Scan Exclusions list.

• Click 'Yes' to add the item to exclusions. It will be restored to its original location and won’t be flagged as dangerous by future scans.

• Click 'No' to ignore the item once. It will be restored to its original location, but will still be flagged as a threat by the next scan.

Delete blocked autoruns entries

• Click 'Tasks' > 'General Tasks' > 'Unblock Autoruns'

• Select the items you want to remove

• Click the 'Delete' button

The item will be removed from your computer.