KAPERSKY ANTI-VIRUS 6.0 User manual

KASPERSKY LAB
Kaspersky®Anti-Virus 6.0
USER GUIDE

KASPERSKY ANTI-VIRUS 6.0
User Guide
©Kaspersky Lab
http://www.kaspersky.com
Revision date: January 2006

Table of Contents
CHAPTER 1. THREATS TO COMPUTER SECURITY................................................. 9
1.1. Sources of Threats ................................................................................................ 9
1.2. How threats spread ............................................................................................. 10
1.3. Types of Threats.................................................................................................. 12
1.4. Signs of Infection ................................................................................................. 15
1.5. What to do if you suspect infection ..................................................................... 16
1.6. Preventing Infection............................................................................................. 17
CHAPTER 2. KASPERSKY ANTI-VIRUS 6.0.............................................................. 19
2.1. What’s new in Kaspersky Anti-Virus 6.0............................................................. 19
2.2. The elements of Kaspersky Anti-Virus Defense................................................. 21
2.2.1. Protection components................................................................................. 22
2.2.2. Virus scan tasks............................................................................................ 23
2.2.3. Program tools................................................................................................ 23
2.3. Hardware and software system requirements ................................................... 25
2.4. Software packages.............................................................................................. 25
2.5. Support for registered users................................................................................ 26
CHAPTER 3. INSTALLING KASPERSKY ANTI-VIRUS 6.0....................................... 27
3.1. Installation procedure using the Installation Wizard........................................... 27
3.2. Setup Wizard ....................................................................................................... 31
3.2.1. Using objects saved with Version 5.0 .......................................................... 31
3.2.2. Activating the program.................................................................................. 31
3.2.2.1. Selecting a program activation method................................................. 32
3.2.2.2. Entering the activation code .................................................................. 32
3.2.2.3. Obtaining a license key.......................................................................... 33
3.2.2.4. Selecting a license key file..................................................................... 33
3.2.2.5. Completing program activation.............................................................. 33
3.2.3. Selecting a security mode ............................................................................ 33
3.2.4. Configuring update settings.......................................................................... 34
3.2.5. Configuring a virus scan schedule ............................................................... 35
3.2.6. Restricting program access.......................................................................... 35

4 Kaspersky Anti-Virus 6.0
3.2.7. Application Integrity Control.......................................................................... 36
3.2.8. Finishing the Setup Wizard .......................................................................... 36
3.3. Installing the program from the command prompt ............................................. 36
3.4. Upgrading from 5.0 to 6.0 ................................................................................... 37
CHAPTER 4. PROGRAM INTERFACE ....................................................................... 38
4.1. System tray icon .................................................................................................. 38
4.2. The context menu................................................................................................ 39
4.3. Main program window......................................................................................... 40
4.4. Program settings window.................................................................................... 43
CHAPTER 5. GETTING STARTED.............................................................................. 45
5.1. What is the protection status of my computer? .................................................. 45
5.1.1. Protection indicators ..................................................................................... 46
5.1.2. Kaspersky Anti-Virus component status...................................................... 49
5.1.3. Program performance statistics ................................................................... 50
5.2. How to scan your computer for viruses .............................................................. 50
5.3. How to scan critical areas of the computer......................................................... 51
5.4. How to scan a file, folder or disk for viruses ....................................................... 51
5.5. How to update the program ................................................................................ 52
5.6. What to do if protection is not running ................................................................ 53
CHAPTER 6. PROTECTION MANAGEMENT SYSTEM............................................ 54
6.1. Stopping and resuming protection on your computer ........................................ 54
6.1.1. Pausing protection ........................................................................................ 54
6.1.2. Stopping protection....................................................................................... 56
6.1.3. Pausing / stopping protection components, virus scans, and update
tasks .............................................................................................................. 56
6.1.4. Restoring protection on your computer........................................................ 57
6.1.5. Shutting down the program .......................................................................... 58
6.2. Types of programs to be monitored.................................................................... 58
6.3. Creating a trusted zone ....................................................................................... 59
6.3.1. Exclusion rules.............................................................................................. 60
6.3.2. Trusted applications...................................................................................... 65
6.4. Starting virus scan and update tasks under another user account ................... 68
6.5. Configuring virus scan and update schedules ................................................... 69
6.6. Power options...................................................................................................... 71
6.7. Advanced Disinfection Technology .................................................................... 72

Table of Contents 5
CHAPTER 7. FILE ANTI-VIRUS ................................................................................... 73
7.1. Selecting a file security level ............................................................................... 73
7.2. Configuring File Anti-Virus................................................................................... 75
7.2.1. Defining the file types to be scanned ........................................................... 75
7.2.2. Defining protection scope............................................................................. 78
7.2.3. Configuring advanced settings..................................................................... 79
7.2.4. Restoring default File Anti-Virus settings ..................................................... 82
7.2.5. Selecting actions for objects......................................................................... 82
7.3. Postponed disinfection ........................................................................................ 84
CHAPTER 8. MAIL ANTI-VIRUS .................................................................................. 85
8.1. Selecting an email protection level ..................................................................... 86
8.2. Configuring Mail Anti-Virus.................................................................................. 87
8.2.1. Selecting a protected email group................................................................ 88
8.2.2. Configuring email processing in Microsoft Office Outlook........................... 89
8.2.3. Configuring email scans in The Bat! ............................................................ 91
8.2.4. Restoring default Mail Anti-Virus settings .................................................... 92
8.2.5. Selecting actions for dangerous email objects ............................................ 93
CHAPTER 9. WEB ANTI-VIRUS .................................................................................. 95
9.1. Selecting the web security level.......................................................................... 96
9.2. Configuring Web Anti-Virus................................................................................. 98
9.2.1. Setting a scan method.................................................................................. 98
9.2.2. Creating a trusted address list...................................................................... 99
9.2.3. Restoring default Web Anti-Virus settings ................................................. 100
9.2.4. Selecting responses to dangerous objects................................................ 101
CHAPTER 10. PROACTIVE DEFENSE .................................................................... 102
10.1. Proactive Defense settings ............................................................................. 105
10.1.1. Activity control rules .................................................................................. 106
10.1.2. Application Integrity Control...................................................................... 110
10.1.2.1. Configuring Application Integrity Control rules.................................. 111
10.1.2.2. Creating a list of shared components................................................ 113
10.1.3. Office Guard.............................................................................................. 114
10.1.4. Registry Guard.......................................................................................... 116
10.1.4.1. Selecting registry keys for creating a rule ......................................... 118
10.1.4.2. Creating a Registry Guard rule.......................................................... 119

6 Kaspersky Anti-Virus 6.0
CHAPTER 11. SCANNING FOR VIRUSES ON YOUR COMPUTER ..................... 121
11.1. Managing virus scan tasks.............................................................................. 122
11.2. Creating a list of objects to scan ..................................................................... 122
11.3. Creating virus scan tasks ................................................................................ 124
11.4. Configuring virus scan tasks ........................................................................... 125
11.4.1. Selecting a security level .......................................................................... 125
11.4.2. Specifying the types of objects to scan.................................................... 126
11.4.3. Restoring default scan settings ................................................................ 129
11.4.4. Selecting actions for objects..................................................................... 129
11.4.5. Advanced virus scan options ................................................................... 131
11.4.6. Setting up global scan settings for all tasks............................................. 133
CHAPTER 12. TESTING KASPERSKY ANTI-VIRUS FEATURES ......................... 134
12.1. The EICAR test virus and its variations .......................................................... 134
12.2. Testing File Anti-Virus ..................................................................................... 136
12.3. Testing Virus scan tasks ................................................................................. 137
CHAPTER 13. PROGRAM UPDATES....................................................................... 139
13.1. Starting the Updater ........................................................................................ 140
13.2. Rolling back to the previous update................................................................ 141
13.3. Creating update tasks ..................................................................................... 141
13.4. Configuring update settings ............................................................................ 143
13.4.1. Selecting an update source...................................................................... 143
13.4.2. Selecting an update method and what to update.................................... 145
13.4.3. Configuring connection settings............................................................... 147
13.4.4. Update distribution.................................................................................... 149
13.4.5. Actions after updating the program.......................................................... 150
CHAPTER 14. ADVANCED OPTIONS ...................................................................... 152
14.1. Quarantine for potentially infected objects...................................................... 153
14.1.1. Actions with quarantined objects.............................................................. 154
14.1.2. Setting up Quarantine............................................................................... 155
14.2. Backup copies of dangerous objects.............................................................. 156
14.2.1. Actions with backup copies ...................................................................... 156
14.2.2. Configuring Backup settings .................................................................... 158
14.3. Reports ............................................................................................................ 158
14.3.1. Configuring report settings ....................................................................... 161

Table of Contents 7
14.3.2. The Detected tab ...................................................................................... 161
14.3.3. The Events tab.......................................................................................... 162
14.3.4. The Statistics tab ...................................................................................... 163
14.3.5. The Settings tab........................................................................................ 164
14.3.6. The Macros tab......................................................................................... 165
14.3.7. The Registry tab ....................................................................................... 166
14.4. General information about the program ......................................................... 167
14.5. Managing licenses........................................................................................... 168
14.6. Technical Support ........................................................................................... 170
14.7. Creating a monitored port list .......................................................................... 171
14.8. Checking your SSL connection....................................................................... 173
14.9. Configuring the Kaspersky Anti-Virus interface.............................................. 175
14.10. Rescue Disk .................................................................................................. 176
14.10.1. Creating a rescue disk............................................................................ 177
14.10.1.1. Getting ready to write the disk......................................................... 177
14.10.1.2. Creating an .iso file .......................................................................... 178
14.10.1.3. Burning the disk ............................................................................... 178
14.10.1.4. Finishing creating a rescue disk...................................................... 178
14.10.2. Using the rescue disk ............................................................................. 178
14.11. Using advanced options................................................................................ 180
14.11.1. Kaspersky Anti-Virus event notifications................................................ 180
14.11.1.1. Types of events and notification delivery methods......................... 181
14.11.1.2. Configuring email notification .......................................................... 183
14.11.1.3. Configuring event log settings ......................................................... 184
14.11.2. Self-Defense and access restriction ...................................................... 185
14.11.3. Resolving conflicts with other applications ............................................ 187
14.12. Importing and exporting Kaspersky Anti-Virus settings ............................... 187
14.13. Resetting to default settings.......................................................................... 188
CHAPTER 15. WORKING WITH THE PROGRAM FROM THE COMMAND
PROMPT .................................................................................................................. 189
15.1. Activating the application................................................................................. 190
15.2. Managing program components and tasks.................................................... 191
15.3. Anti-virus scans ............................................................................................... 192
15.4. Program updates............................................................................................. 196
15.5. Rollback settings ............................................................................................. 197
15.6. Exporting settings ............................................................................................ 197

8 Kaspersky Anti-Virus 6.0
15.7. Importing settings ............................................................................................ 198
15.8. Starting the program........................................................................................ 199
15.9. Stopping the program...................................................................................... 199
15.10. Viewing Help.................................................................................................. 199
15.11. Return codes from the command line interface ........................................... 200
CHAPTER 16. MODIFYING, REPAIRING, AND REMOVING THE PROGRAM .... 201
16.1. Modifying, repairing and removing the program using Setup Wizard ........... 201
16.2. Uninstalling the program from the command prompt..................................... 203
CHAPTER 17. FREQUENTLY ASKED QUESTIONS............................................... 204
APPENDIX A. REFERENCE INFORMATION ........................................................... 206
A.1. List of files scanned by extension..................................................................... 206
A.2. Possible file exclusion masks ........................................................................... 208
A.3. Possible threat exclusion classifications from the Virus Encyclopedia ........... 209
APPENDIX B. KASPERSKY LAB............................................................................... 211
B.1. Other Kaspersky Lab Products ........................................................................ 212
B.2. Contact Us......................................................................................................... 217
APPENDIX C. LICENSE AGREEMENT .................................................................... 218

CHAPTER 1. THREATS TO
COMPUTER SECURITY
As information technology has rapidly developed and penetrated many aspects
of human existence, so the number and range of crimes aimed at breaching
information security has grown.
Cyber criminals have shown great interest in the activities of both state structures
and commercial enterprises. They attempt to steal or disclose confidential
information, which damages business reputations, disrupts business continuity,
and may impair an organization's information resources. These acts can do
extensive damage to assets, both tangible and intangible.
It is not only big companies who are at risk:, individual users can also be
attacked. Criminals can gain access to personal data (for instance, bank account
and credit card numbers and passwords), or cause a computer to malfunction.
Some types of attacks can give hackers complete access to a computer, which
can then be used as part of a “zombie network” of infected computers to attack
servers, send out spam, harvest confidential information, and spread new viruses
and Trojans.
In today’s world, it is widely acknowledged that information is a valuable asset
which should be protected. At the same time, information must be accessible to
those who legitimately require it (for instance, employees, clients and partners of
a business). Hence the need to create a comprehensive information security
system, which must take account of all possible sources of threats, whether
human, man-made, or natural disasters, and use a complete array of defensive
measures, at the physical, administrative and software levels.
1.1. Sources of Threats
A person, a group of people, or phenomena unrelated to human activity can
threaten information security. Following from this, all threat sources can be put
into one of three groups:
•The human factor. This group of threats concerns the actions of people
with authorized or unauthorized access to information. Threats in this
group can be divided into:
•External, including cyber criminals, hackers, internet scams,
unprincipled partners, and criminal organisations.

10 Kaspersky Anti-Virus 6.0
•Internal, including the actions of company staff and users of
home PCs. Actions taken by this group could be deliberate or
accidental.
•The technological factor. This threat group is connected with technical
problems – use of obsolete or poor-quality software and hardware to
process information. This can lead to equipment failure and often to data
loss.
•The natural-disaster factor. This threat group includes the whole range
of events caused by nature and independent of human activity.
All three threat sources must be accounted for when developing a data
security protection system. This User Guide focuses on the area that is
directly tied to Kaspersky Lab’s expertise – external threats involving
human activity.
1.2. How threats spread
As modern computer technology and communications tools develop, hackers
have more opportunities for spreading threats. Let’s take a closer look at them:
The Internet
The Internet is unique, since it is no one’s property and has no
geographical borders. In many ways, this has promoted the development
of web resources and the exchange of information. Today, anyone can
access data on the Internet or create their own webpage.
However, these very features of the worldwide web give hackers the
ability to commit crimes on the Internet, and makes the hackers difficult to
detect and punish.
Hackers place viruses and other malicious programs on Internet sites and
disguise them as useful freeware. Furthermore, scripts that run
automatically when you open a webpage can execute dangerous actions
on your computer, including modifying the system registry, stealing
personal data, and installing malicious software.
By using network technologies, hackers can attack remote PCs and
company servers. These attacks can cause parts of your system to
malfunction, or could provide hackers with complete access to your
system and thereby to the information stored on it. They can also use it
as part of a zombie network.
Lastly, since it became possible to use credit cards and e-money through
the Internet in online stores, auctions, and bank homepages, online
scams have become increasingly common.