KAPERSKY ANTI-VIRUS 5.0 - FOR NOVELL NETWARE User manual

KASPERSKY LABS
Kaspersky Anti-Virus 5.0
for Novell NetWare
USER GUIDE

KASPERSKY ANTI-VIRUS 5.0 FOR NOVELL NETWARE
User Guide
Kaspersky Labs Ltd.
Visit our website: http://www.kaspersky.com/
Edition date: October 2003

Table of contents:
CHAPTER 1. INTRODUCTION ...................................................................................... 6
1.1. Functions and Features ........................................................................................ 6
1.2. What’s new in version 5.0 ..................................................................................... 7
1.3. Hardware and software requirements .................................................................. 8
1.4. Distribution kit ........................................................................................................ 8
1.4.1. License agreement ......................................................................................... 9
1.4.2. Registration card............................................................................................. 9
1.5. Help Desk for Registered Users ........................................................................... 9
1.6. Conventions......................................................................................................... 10
CHAPTER 2. THE PROGRAM OPERATION CONCEPT .......................................... 11
2.1. Deployment Pattern of Server Antiviral Protection............................................. 11
2.2. Basic Concepts and Operation Scheme of the Program................................... 11
2.3. Maintaining the Antiviral Protection System ....................................................... 12
CHAPTER 3. INSTALLING THE PROGRAM .............................................................. 14
3.1. Installation from the distribution package ........................................................... 14
3.2. Installation in the network.................................................................................... 18
3.3. Uninstalling the program ..................................................................................... 20
3.4. Upgrading to the next version of the program .................................................... 21
CHAPTER 4. SETTING UP THE APPLICATION ........................................................ 22
4.1. Program interface................................................................................................ 22
4.2. Default protection of the server ........................................................................... 24
4.3. Starting/stopping the program on the server ...................................................... 25
4.4. Setting up the application .................................................................................... 28
CHAPTER 5. UPDATING THE ANTI-VIRUS DATABASE.......................................... 31
5.1. Creating an update task ...................................................................................... 32
5.2. Setting up the task............................................................................................... 33
5.3. Batch task setup .................................................................................................. 38

4 Kaspersky Anti-Virus for Novell NetWare
5.4. Starting/stopping a task....................................................................................... 40
5.5. Deleting a task ..................................................................................................... 41
CHAPTER 6. SCANNING THE SERVER FOR VIRUSES.......................................... 43
6.1. Creating tasks for Real-Time Protection and Scan on Demand ....................... 43
6.2. Setting up a task.................................................................................................. 45
6.3. Batch task setup .................................................................................................. 49
6.4. Starting/stopping a task....................................................................................... 51
6.5. Deleting a task ..................................................................................................... 52
CHAPTER 7. GENERATING AND VIEWING LOGS, RECEIVING
NOTIFICATIONS........................................................................................................ 54
7.1. Viewing the anti-virus database updating results............................................... 55
7.2. Viewing the server scanning results ................................................................... 58
7.3. Summarized results of the task execution.......................................................... 62
7.4. Notification regarding detected viruses............................................................... 64
CHAPTER 8. LICENSE MANAGEMENT..................................................................... 66
8.1. Licensing policy ................................................................................................... 66
8.2. Installing the license key...................................................................................... 69
APPENDIX A. APPLICATION SETTINGS ................................................................... 71
A.1. The General Tab................................................................................................. 71
A.2. The Folders Tab.................................................................................................. 72
A.3. The Advanced Tab ............................................................................................. 73
A.4. The Schedule Tab............................................................................................... 74
A.5. The Tasks Tab .................................................................................................... 77
A.6. The E-mail Notification tab.................................................................................. 78
APPENDIX B. TASK-SPECIFIC SETTINGS................................................................ 80
B.1. The Update Task ................................................................................................ 80
B.1.1. The Recipients Tab ...................................................................................... 80
B.1.2. The Settings Tab.......................................................................................... 82
B.1.3. The Event log Tab........................................................................................ 86
B.1.4. The Proxy Tab.............................................................................................. 88
B.1.5. The Schedule Tab........................................................................................ 89
B.1.6. The Statistics Tab......................................................................................... 92

Table of contents 5
5
B.2. The Scan on Demand and Real-Time Protection Tasks................................... 93
B.2.1. The Scanning options Tab........................................................................... 93
B.2.1.1. Code analyzer ....................................................................................... 96
B.2.1.2. Extracting Engine .................................................................................. 96
B.2.1.3. Executable Module Extracting Engine.................................................. 97
B.2.2. The Actions Tab ........................................................................................... 98
B.2.3. The Event log Tab...................................................................................... 100
B.2.3.1. Messages Regarding Infected Files ................................................... 102
B.2.3.2. Messages Regarding Suspicious Files .............................................. 103
B.2.3.3. Warnings.............................................................................................. 104
B.2.3.4. Messages Regarding Packed Executable Files ................................ 104
B.2.3.5. Messages Regarding Archive Files .................................................... 104
B.2.3.6. Messages Regarding Uninfected Files............................................... 104
B.2.4. The NW-Notification Tab............................................................................ 104
B.2.5. The E-mail Notification Tab........................................................................ 106
B.2.6. The Schedule Tab...................................................................................... 108
B.2.7. The Statistics Tab....................................................................................... 112
APPENDIX C. KASPERSKY LABS LTD.................................................................... 114
C.1. Other Anti-Virus products ................................................................................. 115
C.2. Contact Information........................................................................................... 117
APPENDIX D. LICENSE AGREEMENT .................................................................... 118

CHAPTER 1. INTRODUCTION
1.1. Functions and Features
Kaspersky Anti-Virus 5.0 for Novell NetWare is an anti-virus application de-
signed to protect LAN file servers running the Novell NetWare operating system.
Kaspersky Anti-Virus 5.0 has the following functions:
•Real-time server protection – virus scans all the files started or modified
on the server, then disinfects and/or deletes any detected viruses.
•On-demand server scanning – successively scans the files on the
server on the user’s request or according to a schedule with user-
specified frequency. The anti-virus software can disinfect and/or delete
any detected viruses.
•Anti-virus database updating – updates the anti-virus database used to
search for viruses, and distributes the downloaded updates to other serv-
ers in the Novell NetWare network. The database can be scheduled for
automatic updating. The application will download the latest updates via
the Internet or the LAN and distribute these among the specified servers.
Prior to updating the anti-virus database on a server the program will back
up all the files being modified, thus making it possible to revert to the lat-
est update if necessary.
•Quarantine – moves any detected infected or suspicious files to a special
storage location called ‘quarantine’. Quarantined files can be analyzed by
the administrator or sent to the Kaspersky Lab for examination.
•Event log keeping – creates detailed logs and writes the results of the
on-demand server scanning, real-time protection and anti-virus database
updating. The logs can be viewed and printed.
•Backup – saves backup copies of any suspicious or infected files prior to
disinfecting or deleting them. This makes it possible to restore the data in
the event of disinfection, deletion failure or error.
Kaspersky Anti-Virus 5.0 for Novell NetWare is based on client-server architec-
ture. Its server part consists of two modules: Kaspersky Anti-Virus, dealing with
anti-virus functionality, and Anti-Virus database updater, responsible for up-
dating the anti-virus database and the software modules. The client part consists
of Snapin for ConsoleOne, which provides the user interface for the application
administrative services and enables the user to install the application, set it up,
and manage the server part.

Introduction 7
Kaspersky Anti-Virus 5.0 for Novell NetWare ensures a high level of protection
for corporate networks running Novell NetWare.
1.2. What’s new in version 5.0
The main difference in Kaspersky Anti-Virus 5.0 for Novell NetWare compared to
all the previous versions is that server protection control is now based on tasks
that maximize the functionality of the application. This makes it possible to create
a more flexible server antiviral protection system due to the creation and launch-
ing of different types of tasks with different settings. Thanks to the possibility of
the tasks batch setup, adjustment of the protection is much simpler and less
time-consuming.
In the real-time server protection mode the files are not only scanned when they
are created or opened, but also when they are modified.
The application can be installed on a group of servers directly from the distribu-
tion package.
The antiviral engine, which scans the files for viruses, is executed in a protected
address space. Such an approach increases application reliability since the op-
erational capability of the application and of the whole file server is not affected in
the event of any contingency during file scanning.
The application performance (the number of simultaneously scanned connec-
tions) can be increased by running more than one copy of the antiviral engine on
several processors at the same time.
New features have been added such as the opportunity of notifying network us-
ers about detected infected or suspicious objects via the SMTP protocol. Previ-
ously, information regarding infected and suspicious objects was only distributed
via the Novell NetWare network. With the current version all users concerned
can be notified by e-mail too.
The logging system has been considerably improved. This provides the adminis-
trator with quick, convenient and unified access to the task execution results, and
allows filtering, sorting and merging of the data. The logs are stored in the txt and
xml (htm) formats and can be viewed in standard software such as Internet Ex-
plorer.
It is now possible to cancel the latest update of the anti-virus database used for
scanning the server for viruses. This opportunity is provided by the backup copy
of the anti-virus database created prior to its update.
This version does not support the function of controlling the application via
NWAdmin (Novell NetWare Administrator).

8 Kaspersky Anti-Virus for Novell NetWare
1.3. Hardware and software
requirements
Software requirements:
• A server with installed Novell NetWare ver. 5.x or 6.0, 6.5.
• Installed service pack:
• For Novell NetWare 5.x – Support Pack 6 or higher
• For Novell NetWare 6.0.x – Support Pack 3 or higher
• All servers and workstations used to control the program must support the
TCP/IP protocols.
• Internet Explorer 6.0 or higher.
Hardware requirements:
• An Intel Pentium processor or higher.
• About 12 Mb of available (free) RAM.
• About 8 Mb of free hard-disk space on the server’s volumes.
1.4. Distribution kit
You can purchase Kaspersky Anti-Virus 5.0 for Novell NetWare either from our
distributors (retail box) or online at one of our Internet shops (for example,
www.kaspersky.com – select the Buy online link).
The retail box includes:
• A sealed envelope with an installation CD containing files for the software
product
• User Guide
• A license key written on the installation CD
• A registration card with the serial number of the product
• License agreement
Before you unseal the envelope containing the CD, be sure to thor-
oughly review the license agreement.

Introduction 9
If you buy Kaspersky Anti-Virus 5.0 for Novell NetWare online, you download the
installation file of the product from the Kaspersky Lab website. This installation
file includes this User Guide and the license key. The license key can also be
sent to you by e-mail after receiving your payment.
1.4.1. License agreement
The License Agreement (LA) is a legal agreement between you and the manu-
facturer (Kaspersky Labs Ltd.) describing the terms on which you may use the
anti-virus product which you have purchased.
Make sure you read the License Agreement!
If you do not agree to the terms of this LA you can return the unused product to
your Kaspersky Anti-Virus dealer for a full refund, making sure the envelope con-
taining the CD is sealed.
By unsealing the envelope or installing the program, you agree to all the terms
of the LA.
1.4.2. Registration card
To register, please fill in the tear-off section of your registration card with your full
name, phone, and e-mail address (if you have one), and return this card to the
distributor that sold you this software product.
If your postal/e-mail addresses have changed, please notify your distributor.
The registration card is a document that gives you the status of a registered user
of our company who is provided with full-scale product support during the sub-
scription period. Registered users who subscribe to the Kaspersky Lab newslet-
ter are provided with information about new products from the Kaspersky Lab.
1.5. Help Desk for Registered Users
Kaspersky Labs offers a large service package enabling its registered customers
to enjoy all available features of Kaspersky Anti-Virus.
If you register and purchase a subscription you will be provided with the following
services for the period of your subscription:
•New versions of this anti-virus software product provided free of charge.

10 Kaspersky Anti-Virus for Novell NetWare
•Phone or e-mail advice on matters related to the installation, configura-
tion, and operation of this anti-virus product.
•Information about new Kaspersky Labs products and about new computer
viruses (for those who subscribe to the Kaspersky Labs newsletter).
Kaspersky Labs does not provide information related to operation and
use of your operating system or various other technologies.
1.6. Conventions
In this book we use various conventions to emphasize different meaningful parts
of the documentation. The table below lists the conventions used in this Guide.
Convention Meaning
Bold font Menu titles, commands, window titles, dia-
log elements, etc.
Note.
Additional information, notes
Attention!
Critical information
To do this,
1. Step 1.
2. …
Actions that must be taken
Task or example
Formulation of the problem or an example
of how to use the product.
Solution
A solution of the problem formulated
[key] – Function of the key. Command line keys
Text of information
messages and the com-
mand line
Text of configuration files, information
messages, and the command line.