KAPERSKY ANTI-VIRUS 5.7 - FOR NOVELL NETWARE Service manual

KASPERSKY LAB
Kaspersky Anti-Virus 5.7
for Novell NetWare
ADMINISTRATOR’S
GUIDE

KASPERSKY ANTI-VIRUS 5.7 FOR NOVELL NETWARE
Administrator’s Guide
©Kaspersky Lab
http://www.kaspersky.com/
Revision date: October, 2006

Contents
CHAPTER 1. INTRODUCTION............................................................................ 7
1.1. What’s new in version 5.7?.................................................................................. 8
1.2. Hardware and software requirements................................................................. 8
1.3. Distribution kit....................................................................................................... 8
1.4. Help Desk for Registered Users.......................................................................... 9
1.5. Conventions ....................................................................................................... 10
CHAPTER 2. KASPERSKY ANTI-VIRUS 5.7 FOR NOVELL NETWARE
BASICS 11
2.1. Deploying protection on servers........................................................................ 11
2.2. Basic concepts and operation scheme of the application ................................ 12
2.3. Maintaining the antiviral protection system ....................................................... 13
CHAPTER 3. INSTALLING, UPDATING, AND UNINSTALLING THE
APPLICATION 14
3.1. Installation from the distribution package.......................................................... 14
3.1.1. Installing Kaspersky Anti-Virus for Novell NetWare..................................... 16
3.1.2. Installing Snapin for Console One................................................................ 19
3.1.3. Installing Web management module............................................................ 19
3.1.4. Installing Kaspersky Administration Kit Network Agent............................... 20
3.2. Deploying the application across the network .................................................. 21
3.3. Installing application on cluster volume............................................................. 23
3.4. Uninstalling the application ................................................................................ 24
3.5. Updating the application version ....................................................................... 24
CHAPTER 4. SETTING UP THE APPLICATION.............................................. 26
4.1. Starting the application ...................................................................................... 26
4.2. Application interface........................................................................................... 26
4.3. Default protection of the server ......................................................................... 29
4.4. Starting/stopping the application on the server................................................. 30
4.5. Setting up the application .................................................................................. 33
CHAPTER 5. UPDATING THE ANTI-VIRUS DATABASE ............................... 36

4 Kaspersky Anti-Virus for Novell NetWare
5.1. Creating an update task..................................................................................... 37
5.2. Setting up the task ............................................................................................. 38
5.3. Batch task setup................................................................................................. 43
5.4. Starting/stopping a task ..................................................................................... 46
5.5. Deleting a task ................................................................................................... 46
CHAPTER 6. SCANNING THE SERVER FOR VIRUSES ............................... 48
6.1. Creating tasks for Real-Time Protection and On-Demand Scan..................... 49
6.2. Setting up a task ................................................................................................ 51
6.3. Batch task setup................................................................................................. 55
6.4. Starting/stopping a task ..................................................................................... 57
6.5. Deleting a task ................................................................................................... 58
CHAPTER 7. GENERATING AND VIEWING LOGS, RECEIVING
NOTIFICATIONS 60
7.1. Viewing the anti-virus database updating results ............................................. 61
7.2. Viewing the server scanning results.................................................................. 65
7.3. Summarized results of the task execution ........................................................ 70
7.4. Notification regarding detected viruses ............................................................. 72
CHAPTER 8. LICENSE MANAGEMENT .......................................................... 73
8.1. Licensing policy.................................................................................................. 73
8.2. Installing the license key.................................................................................... 76
CHAPTER 9. MANAGING KASPERSKY ANTI-VIRUS USING
KASPERSKY ADMINISTRATION KIT...................................................................... 78
9.1. Managing policies .............................................................................................. 79
9.1.1. Creating a policy ........................................................................................... 79
9.1.2. Viewing and editing policy settings............................................................... 86
9.1.2.1.Viewing information about the application ............................................. 87
9.1.2.2.Viewing policy enforcement results........................................................ 88
9.1.2.3.Configuring event logging settings ......................................................... 89
9.1.2.4.Specifying CPU usage during scans ..................................................... 90
9.1.2.5.Selecting the updating source for the anti-virus database .................... 90
9.1.2.6.Configuring settings for the on-demand scan task ................................ 91
9.1.2.7.Selecting actions for the on-demand scan task..................................... 92
9.1.2.8.Configuring settings for the real-time protection task ............................ 94
9.1.2.9.Selecting actions for the real-time protection task................................. 95

Contents 5
9.2. Managing application settings ........................................................................... 96
9.2.1.1.Viewing the information about the application ....................................... 98
9.2.1.2.Viewing the information about the location of objects ........................... 98
9.2.1.3.Viewing connection settings and CPU usage........................................ 99
9.2.1.4.Viewing information about license keys............................................... 100
9.2.1.5.Viewing information about events ........................................................ 101
9.3. Managing tasks................................................................................................ 102
9.3.1. Configuring specific task settings ............................................................... 104
9.3.1.1.Specifying the settings specific to updating the anti-virus database... 104
9.3.1.2.Configuring specific settings for the on-demand scan and real-time
protection tasks..................................................................................... 106
9.3.1.3.Configuring specific settings for the license key installation task........ 109
9.3.2. Starting and stopping tasks ........................................................................ 110
APPENDIX B. APPLICATION SETTINGS ................................................................. 112
B.1. The General Tab............................................................................................... 112
B.2. The Folders Tab................................................................................................ 113
B.3. The Advanced Tab ........................................................................................... 115
B.4. The E-mail Notification tab................................................................................ 116
B.5. The Schedule Tab............................................................................................. 117
B.6. The Task Tab .................................................................................................... 120
APPENDIX C. TASK SETTINGS................................................................................ 122
C.1. The Update Task .............................................................................................. 122
C.1.1. The Recipients Tab.................................................................................... 122
C.1.2. The Updating source Tab .......................................................................... 124
C.1.3. The Event log Tab...................................................................................... 129
C.1.4. The Proxy Tab............................................................................................ 131
C.1.5. The Schedule Tab...................................................................................... 133
C.1.6. The E-mail notification tab ......................................................................... 137
C.2. The On-Demand Scan and Real-Time Protection Tasks ............................... 139
C.2.1. The Scan settings Tab............................................................................... 139
C.2.1.1. Code analyzer ..................................................................................... 142
C.2.1.2. Extracting Engine ................................................................................ 142
C.2.1.3. Executable Module Extracting Engine ............................................... 143
C.2.2. The Actions Tab......................................................................................... 144

6 Kaspersky Anti-Virus for Novell NetWare
C.2.3. The Event log Tab...................................................................................... 146
C.2.3.1. Messages regarding infected files ...................................................... 148
C.2.3.2. Messages Regarding Suspicious Files .............................................. 149
C.2.3.3. Warnings ............................................................................................. 150
C.2.3.4. Messages Regarding Packed Executable Files ................................ 150
C.2.3.5. Messages Regarding Archive Files.................................................... 151
C.2.3.6. Messages Regarding Uninfected Files .............................................. 151
C.2.4. The NW-Notification Tab ........................................................................... 151
C.2.5. The E-mail Notification Tab ....................................................................... 153
C.2.6. The Schedule Tab...................................................................................... 155
APPENDIX D. KASPERSKY LAB............................................................................... 160
Other Kaspersky Lab Products................................................................................ 161
Contact Us ................................................................................................................ 169

CHAPTER 1. INTRODUCTION
Kaspersky Anti-Virus 5.7 for Novell NetWare (hereafter, referred to as
Kaspersky Anti-Virus) is an anti-virus application designed to protect LAN file
servers running the Novell NetWare operating system.
Kaspersky Anti-Virus has the following functions:
• Real-time server protection – scans all started or modified files, then
disinfects and/or deletes infected objects.
• On-demand server scan – successively scans the files on the server on
administrator’s demand or according to a schedule with user-specified
frequency. The anti-virus application can disinfect and/or delete infected
objects.
• Anti-virus database updating – updates the anti-virus database used to
search for viruses, and distributes the downloaded updates to other
servers on the Novell NetWare network. The database can be scheduled
for automatic updating. The application will download the latest updates
via the Internet or the LAN and distribute these among the specified
servers. Prior to updating the anti-virus database on a server the program
will back up all the files being modified, thus making it possible to revert to
the latest update if necessary.
• Quarantine – moves infected or suspicious files to a special storage
location called ‘quarantine’. Quarantined files can be analyzed by the
administrator or sent to the Kaspersky Lab for examination.
• Event log keeping – creates detailed logs and writes the results of the
on-demand server scanning, real-time protection and anti-virus database
updating. The logs can be viewed and printed.
• Backup – saves backup copies of any suspicious or infected files prior to
disinfecting or deleting them. This makes it possible to restore the data in
the event of disinfection, deletion failure or error.
• Notification – notifies users and administrators of finished scans, warns
about found dangerous objects using Novell NetWare network and by
email.
Kaspersky Anti-Virus is based on the client-server architecture. Its server part
consists of two modules: Kaspersky Anti-Virus, dealing with anti-virus
functionality, and Anti-virus database updating,responsible for updating the
anti-virus database and application modules. The client part consists of Snapin
for ConsoleOne, a web module, and a module for managing the application
using Kaspersky Administration Kit that provide the user interface for the

8 Kaspersky Anti-Virus for Novell NetWare
application administrative services and enable the user to install the application,
set it up, and manage the server part.
1.1. What’s new in version 5.7?
Version 5.7 of Kaspersky Anti-Virus for Novell NetWare has the following main
difference from the previous version: now Kaspersky Anti-Virus can be managed
from a remote location using Kaspersky Administration Kit.
1.2. Hardware and software
requirements
Software requirements:
• A server with installed Novell NetWare ver. 5.x or 6.0, 6.5.
• Installed servlet container (for installing and using the web management
interface).
Viewing the task performance log within a web interface requires the
presence of an installed Novell NetWare client on the computer.
• Installed Support Packs:
• For Novell NetWare 5.x – Support Pack 6 or higher
• For Novell NetWare 6.0.x – Support Pack 3 or higher
• Microsoft Internet Explorer 6.0 or higher.
Hardware requirements:
• An Intel Pentium processor or higher.
• About 12 MB of available (free) RAM.
• About 8 MB of free hard-disk space on the server’s volumes.
1.3. Distribution kit
You can purchase Kaspersky Anti-Virus 5.7 for Novell NetWare either from our
distributors (retail box) or online at one of our Internet shops (for example,
www.kaspersky.com – select the E-Store link).
The retail box includes:

Introduction 9
• A sealed envelope with an installation CD containing files for the software
product
• User Guide
• A license key written on the installation CD
• License agreement
Before you unseal the envelope containing the CD, be sure to thoroughly review
the license agreement.
If you buy Kaspersky Anti-Virus for Novell NetWare online, you download the
installation file of the product from the Kaspersky Lab website. This installation
file includes this User Guide and the license key. The license key can also be
sent to you by e-mail after receiving your payment.
The License Agreement (LA) is a legal agreement between you and the
manufacturer (Kaspersky Lab Ltd.) describing the terms on which you may use
the anti-virus product which you have purchased.
Make sure you read the License Agreement!
If you do not agree to the terms of this LA you can return the unused product to
your Kaspersky Anti-Virus dealer for a full refund, making sure the envelope
containing the CD is sealed.
By unsealing the envelope or installing the program, you agree to all the terms of
the LA.
1.4. Help Desk for Registered Users
Kaspersky Lab offers a large service package enabling its registered customers
to enjoy all available features of Kaspersky Anti-Virus.
If you register and purchase a subscription you will be provided with the following
services for the period of your subscription:
• New versions of this anti-virus software product provided free of charge.
• Phone or e-mail advice on matters related to the installation,
configuration, and operation of this anti-virus product.
• Information about new Kaspersky Lab products and about new computer
viruses (for those who subscribe to the Kaspersky Lab newsletter).
Kaspersky Lab does not provide information related to operation and use of your
operating system or various other technologies.

10 Kaspersky Anti-Virus for Novell NetWare
1.5. Conventions
In this book we use various conventions to emphasize different meaningful parts
of the documentation. The table below lists the conventions used in this Guide.
Convention Meaning
Bold font Menu titles, commands, window titles, dia-
log elements, etc.
Attention Additional information, notes
Warning! Critical information
To perform action:
1. Step 1.
2. …
Actions that must be taken
Task, Example Formulation of the problem or an example
of how to use the product.

CHAPTER 2. KASPERSKY
ANTI-VIRUS 5.7 FOR
NOVELL NETWARE BASICS
2.1. Deploying protection on servers
Building of the file server antiviral protection system using Kaspersky Anti-Virus
must begin with installation of Snapin for Novell ConsoleOne and/or the web
management module1.
Snapin for ConsoleOne is installed from the distribution package on one of the
workstations running Windows or on a NetWare server, where the Novell
ConsoleOne network administration utility is installed.
The Web management module is also installed from the distribution package on
a Windows workstation or on a NetWare server with the installed Tomcat servlet
container.
Snapin for ConsoleOne and the Web module can be installed on only one of the
computers as they provide centralized access to all network resources from a
single administrator workbench. However, if in the event that several
administrators are working jointly, the management modules can be installed on
each of their computers.
If none of the modules is installed, the anti-virus functionality of the application
will be limited to real-time server protection mode with default settings. Scanning
will be launched automatically when starting the server and will be stopped when
the server is shut down. Stopping or starting the scanning forcibly will only be
possible from the command line by closing or starting the application.
The next step is installation of the server side application on all the NetWare file
servers across the network. Kaspersky Anti-Virus and Anti-virus database
updating modules can be installed on the server either using the distribution
package or without it, by using the Snapin for ConsoleOne or web interface.
1Hereinafter in this Administrator’s Guide we shall demonstrate the interface of
the Snapin for Novell ConsoleOne. All peculiarities of the web-based interface will be
mentioned individually.

12 Kaspersky Anti-Virus for Novell NetWare
2.2. Basic concepts and operation
scheme of the application
The antiviral protection system is based on creation of tasks, which maximize the
basic functionality of the application.
A task is a specific action performed by the application. Tasks are divided into
several types according to their function. Kaspersky Anti-Virus uses three types
of task:
• Real-time protection
• Scan on-demand
• Anti-virus database updating
The tasks can be started according to a schedule, manually, or upon an
application event. Each task has a corresponding set of parameters that specify
how the application will work when running this task.
The set of application parameters common for all its task types makes up the
application settings. The application parameters specific to each type of task
make up task settings.
Because of the distributed architecture of Kaspersky Anti-Virus, obtaining access
to its anti-virus functionality requires starting its server part – Kaspersky Anti-
Virus or Anti-virus database updating module – to carry out the update.
Updating can be started using the Snapin for Novell ConsoleOne, the web
module (see section 4.4 on page 30), or the Kaspersky Administration Kit
management module.
In order to initiate execution of the required function, the user must set the
application parameters (see section 4.5 on page 33), create the respective task
(see section 5.1 on page 37 and section 6.1 on page 49), set its generic
parameters (see section 5.2 on page 38 and section 6.2 on page 51) and run this
task (see section 5.4 on page 46 and section 6.4 on page 57). If the scheduled
start mode or start on event mode is selected, the task is launched automatically.
Access to the application administrative functions, and creation and running of
the tasks is granted to the users2 who possess administrator rights. The user
rights are checked based on their authentication in the Novell Netware network.
2In this document, users with administrator rights are referred to as users.

Kaspersky Anti-Virus 5.7 for Novell NetWare basics 13
2.3. Maintaining the antiviral
protection system
Maintenance of the server antiviral protection system involves the following
processes:
• Reception and processing of virus detection messages
• Regular checking of anti-virus database update reception and distribution
reports
An important factor that determines the quality of infected object detection by
anti-virus programs is completeness of their anti-virus database. The procedure
of searching and removing viruses is based on the records of the anti-virus
database, which stores descriptions of every virus known at the time along with
methods of cleaning objects infected by them.
Kaspersky Lab adds descriptions of new viruses to the anti-virus database daily
and places the updates on the Internet for downloading. It is recommended to
download these updates daily.
The anti-virus database versions must be the same on all the protected servers.
In order to save traffic, the update process can be set up in such a way that the
anti-virus database updates will be downloaded from the Internet by the “main"
server. All the other servers will receive the updates from the shared folder
located on the “main” server.
A server can receive updates only from the server located in the same NDS tree.
Therefore, it is necessary to create at least one server responsible for updating
the anti-virus database in every NDS tree whose servers are to be protected
from viruses.

CHAPTER 3. INSTALLING,
UPDATING, AND
UNINSTALLING THE
APPLICATION
Prior to installing Kaspersky Anti-Virus for Novell NetWare please make sure that
hardware and software of the server/workstation meets the program’s require-
ments. The minimal possible requirements are specified in section 1.1 on page 8.
3.1. Installation from the distribution
package
Kaspersky Anti-Virus is installed from a computer running Windows
9x/NT/2000/Me/XP.
To install Kaspersky Anti-Virus,
run the installer (setup.exe) from the CD with the application distribution
package.
This will start the installation wizard. Follow its directions. Most of the settings
required for installation will be made by default or will be based on the choice you
make. Please read carefully the text in each window of the wizard. Make any
desired changes if necessary.
A detailed description of the installation steps is provided below.
1. First of all, the license agreement will be displayed. You must
accept it in order to proceed with the installation.
2. After that you should select the application components to install
(see Figure 1). You can install both the server-side application and
the client application simultaneously (full installation) or install the
Snapin for ConsoleOne first and then deploy the application via
Novell ConsoleOne. To install the server-side application select
Kaspersky Anti-Virus; for the client application select Snapin for
ConsoleOne, the Web management module, and / or Kaspersky
Network Agent.

Installing, updating, and uninstalling the application 15
Figure 1. Selecting the components to install
3. Further installation process depends on the component you want to
install.
• Kaspersky Anti-Virus for Novell NetWare ( see 3.1.1 on page
16)
• Snapin for ConsoleOne
• Web management module
• Kaspersky Network Agent
4. Next, the files will be copied to the server and the settings will be
stored in the NDS.
5. After the wizard successfully completes its work, in the final window
(see Figure 2) you will be offered the opportunity to modify the
AUTOEXEC.NCF file so as to start the server-side application
whenever the server is started. In addition, you will be offered the

16 Kaspersky Anti-Virus for Novell NetWare
possibility of loading the server-side application immediately after
the application is installed on the server. Enable the necessary
checkboxes.
The AUTOEXEC.NCF is modified automatically and does not require
additional settings to be made.
Figure 2. The final window of the setup wizard
3.1.1.Installing Kaspersky Anti-Virus for
Novell NetWare
To install Kaspersky Anti-Virus for Novell NetWare:
1. Specify servers for the installation (Figure 3). Select the required
servers from the list of those currently connected.

Installing, updating, and uninstalling the application 17
Figure 3. Selecting servers for the Kaspersky Anti-Virus installation
2. Specify the directories in which to install the components of
Kaspersky Anti-Virus 5.6 for Novell NetWare. The server-side
application is installed in the SYS/KAV folder. If you are installing
the product on only one server, you can specify another destination
folder in the volume structure of the server. The group of elements
of the component is only displayed if it was selected for installation.
3. In the license key installation window please specify the license key
file (*.keys), using which Kaspersky Anti-Virus will check the validity
of the license agreement and its deadline (see Figure 5).

18 Kaspersky Anti-Virus for Novell NetWare
Figure 4. Installation folders selection
Figure 5. The License Key installation window

Installing, updating, and uninstalling the application 19
The license key is your personal “key”, which stores the information
required for full-featured operation of the application and some reference
information. This information includes:
• Support information (who provides it and where it can by ob-
tained).
• Name, number and the expiration date of the license.
Your license key can be enclosed with the distribution package or
sent to you by e-mail after the product is purchased. The program
will not run without the key file.
3.1.2.Installing Snapin for Console One
To install Snapin for ConsoleOne,
Select the install folder. The installation directory for Novell
ConsoleOne should be Novell ConsoleOne Install folder on the
computer from which the application control utility will be started. By
default this field contains the server’s directory
SYS\Public\mgmt\ConsoleOne\1.2 of the workstation’s directory
\Novell\ConsoleOne\1.2. You can change it.
3.1.3.Installing Web management module
To install the Web management module (iKAV)
1. Specify servers for the installation (Figure 3). Select the required
servers from the list of those currently connected.
2. Select the destination folder. By default, the Web management
module (iKAV) is installed in the <server_name >\\SYS\Tomcat\4
directory.
This path is correct if you are running a server version 6.0 or
higher.
For a server version 5.x, check the version of Tomcat launched at
startup and specify the path <server_name >\SYS\Tomcat\<
Tomcat_version>. The default Tomcat version is 33. The path for
this version should be changed to <server_name >\SYS\Tomcat\33.
If you want to install only the web management module, the default
installation directory is C:\Tomcat\4. You can change the path by

20 Kaspersky Anti-Virus for Novell NetWare
specifying the Tomcat directory on your local drive or simply copy
the module files to the Tomcat directory after the installation.
After installing web management module to Tomcat you need to restart Tomcat
3.1.4.Installing Kaspersky Administration
Kit Network Agent
To install Kaspersky Administration Kit Network Agent
1. Specify servers for the installation (Figure 3). Select the required
servers from the list of those currently connected.
2. Specify address and port number of the administration server,
which works as a central storage for information about Kaspersky
Lab applications installed in the network.
Figure 6. Specify address and port number of the administration server