How to manage Backup

If the Kaspersky application detects malicious code in a file while scanning a protected device, the application can block the file, assign the Infected status to it, place a copy in Backup, and attempt to disinfect the file.

Backup keeps copies of files that have been deleted or modified during disinfection. A backup copy is created before disinfecting or deleting the file. Backup copies of files are stored in a special format and do not pose a threat.

If the file is successfully disinfected, the status of the backup copy changes to Disinfected. Sometimes it is not possible to maintain the integrity of files during disinfection. If you partially or completely lose access to important information in a disinfected file after disinfection, you can attempt to restore the file from the disinfected copy to the file's original directory.

We recommend restoring files from backup copies only if these have a status of Disinfected. Restoring infected objects may lead to a device infection.

Backup file copies may contain personal data. Root privileges are required to access Backup objects.

You can configure the following Backup settings:

• Storage time for objects in Backup. Objects are kept for 30 days by default.
• Maximum Backup size. Backup has an unlimited size by default.
• Path to Backup. By default, Backup is located in the /var/opt/kaspersky/kfl/common/objects-backup/ directory.

After the specified time has elapsed or when the maximum size of Backup is reached, the application automatically deletes backup copies of files, regardless of their status, from Backup, starting with the earliest copies.

You can delete the backup copy of a restored or unrestored file manually.

You can view the overall list of files placed in Backup by Kaspersky applications on the device in the application interface and on the command line. You can view the properties of backup copies on the protected device, run malware scans in Backup, and delete files from Backup.