What is the difference between unknown and modified applications?
An unknown application is an application that has not run or been “baselined” previously, thus Desktop Protector is not aware of the application and treats it as suspicious. A modified application is one that has been run and “baselined” previously. Upon execution its baseline is checked and the file is found to be modified.