KAPERSKY ANTI-VIRUS - FOR FREEBSD-OPENBSD-BSDI FILE... User manual

KASPERSKY LAB
Kaspersky Anti-Virus
for FreeBSD, OpenBSD and BSDi
File Server
USER GUIDE

1
11
1
KASPERSKY ANTI-VIRUS FOR FREEBSD,
OPENBSD AND BSDI FILE SERVER
User Guide
User GuideUser Guide
User Guide
Kaspersky Lab Ltd.
http://www.kaspersky.com
Revision date: June 2002

2
22
2
Contents
1. KASPERSKYTM ANTI-VIRUS FOR FREEBSD, OPENBSD AND
BSDI FILE SERVER.............................................................................8
1.1. Introduction .................................................................................8
1.2. Distribution kit............................................................................10
1.2.1. What is in the distribution kit...............................................10
1.2.2. License agreement.............................................................11
1.2.3. Registration card.................................................................11
1.3. Help desk for registered users.................................................11
1.4. Information in the book.............................................................12
1.5. Conventions..............................................................................12
2. INSTALLING KASPERSKY ANTI-VIRUS FOR XBSD FILE
SERVER ..............................................................................................14
2.1. Software and hardware requirements.....................................14
2.2. Backing up your installation diskettes......................................15
2.3. Step-By-Step Installation..........................................................15
2.3.1. … of Kaspersky Anti-Virus for FreeBSD ...........................15
2.3.2. … of Kaspersky Anti-Virus for OpenBSD and BSDi.........17
2.4. Preparing to run........................................................................18
2.4.1. Editing the .ini file................................................................18
2.4.2. Editing the path to temporary files......................................19
2.4.3. Customizing software for several users.............................19
3. RUNNING KASPERSKY ANTI-VIRUS FOR XBSD FILE SERVER21
3.1. Changing scanning settings.....................................................21
3.2. Starting to check.......................................................................22
3.3. Starting to update virus-definition databases..........................23
4. ANTI-VIRUS SCANNER: SCANNING AND DISINFECTING.........25

CONTENTS
3
33
3
4.1. Starting Scanner.......................................................................25
4.2. Searching for viruses and deleting them.................................27
4.2.1. Loading anti-virus scanner.................................................27
4.2.2. Handling infected objects ...................................................28
4.2.3. Handling corrupted objects.................................................30
4.2.4. Handling suspicious objects...............................................31
4.3. Reviewing performance statistics............................................32
5. ANTI-VIRUS SCANNER AND DAEMON PROCESS: USING
SWITCHES AND PROFILES.............................................................34
5.1. Scanning settings.....................................................................34
5.2. How to change settings............................................................35
5.3. Settings for a separate location to be checked.......................36
5.3.1. Defining the location(s) to be checked...............................36
5.3.2. Defining objects to be checked..........................................38
5.3.2.1. Object types.................................................................... 38
5.3.2.2. Sectors............................................................................. 38
5.3.2.3. Files.................................................................................. 39
5.3.2.4. Packed executables...................................................... 41
5.3.2.5. Archives........................................................................... 42
5.3.2.6. Mail databases and plain mail files............................ 43
5.3.2.7. Embedded OLE objects............................................... 44
5.3.3. Defining anti-virus actions ..................................................44
5.3.4. Defining the advanced scanning tools to be used ............46
5.4. Settings for the cumulative location to be checked ................49
5.4.1. Cumulative settings ............................................................49
5.4.2. Defining scanning and performance settings: Scanner and
Daemon...............................................................................50
5.4.3. Defining actions on infected and suspicious objects ........54
5.4.4. Defining the reporting parameters .....................................56
6. DAEMON PROCESS: INTEGRATING ANTI-VIRUS PROTECTION
IN CLIENTS.........................................................................................59
6.1. Features of the Daemon program...........................................59

CONTENTS
4
44
4
6.2. Launching the daemon process..............................................60
6.3. Calling up the process from a client program .........................63
7. ANTI-VIRUS MONITOR: MONITORING THE SYSTEM FOR
VIRUSES .............................................................................................65
7.1. Features and functions.............................................................65
7.2. Assembling and Configuring....................................................66
7.2.1. Assembling Monitor............................................................66
7.2.2. Configuring Monitor ............................................................68
7.3. Launching Monitor....................................................................71
7.4. Reviewing the performance results.........................................72
7.5. Troubleshooting........................................................................72
8. SLOGAN: PROCESSING AND SUMMARIZING THE
PERFORMANCE REPORTS.............................................................75
8.1. Features and functions.............................................................75
8.2. Launching Slogan.....................................................................76
8.3. Slogan in the real-time monitoring mode ................................78
9. TUNER: CUSTOMIZING SCANNER AND DAEMON.....................80
9.1. Features and functions.............................................................80
9.2. Launching Tuner.......................................................................81
9.3. Interface....................................................................................82
9.4. Creating, editing and saving a profile......................................83
9.5. The Location page....................................................................85
9.5.1. Defining the location to be scanned for viruses ................85
9.5.2. Defining scanning settings for a separate directory..........87
9.5.2.1. The directory Property window: Selecting the
required directory........................................................... 87
9.5.2.2. The directory Property window: Objects to be
checked........................................................................... 88
9.5.2.3. The directory Property window: Defining anti-virus
actions.............................................................................. 90
9.5.2.4. The directory Property window: Defining the
advanced scanning tools used. The Options page 92

CONTENTS
5
55
5
9.6. The Options page.....................................................................93
9.7. The Report page.......................................................................95
9.8. The ActionWith page................................................................98
9.9. The Customize page..............................................................100
10. WEBTUNER: REMOTE ADMINISTRATION PROGRAM ............102
10.1. Functions and features...........................................................102
10.2. General concept of the program performance......................103
10.3. Installing WebTuner. Access rights.......................................105
10.3.1. The WebTuner components ............................................105
10.3.2. Setting up the web server and WebTuner.......................106
10.3.3. Rights on the web server..................................................109
10.3.3.1. Rights to run the web server..................................... 109
10.3.3.2. Rights to run the WebTuner copy............................ 110
10.4. Launching WebTuner.............................................................111
10.5. Interface..................................................................................112
10.6. Defining the Configuration of WebTuner...............................114
10.6.1. WebTuner settings............................................................114
10.6.2. The main page: WebTuner performance settings..........116
10.6.3. The modules page: remote administration settings........117
10.7. WebTuner: Administering Daemon.......................................121
10.7.1. Daemon settings...............................................................121
10.7.2. Remote configuration of the Daemon program...............123
10.7.2.1. The Profile tuning window......................................... 123
10.7.2.2. The objects page: location to be scanned............. 124
10.7.2.3. The options page: scanning settings ...................... 126
10.7.2.4. The actions page: object-handling settings........... 126
10.7.2.5. The report page: reporting settings ......................... 127
10.7.2.6. The customs page: advanced scanning settings. 128
10.7.3. Launching Daemon from a remote location....................128
10.7.4. Reviewing the log file........................................................132
10.8. WebTuner: administering Scanner........................................135

CONTENTS
6
66
6
10.8.1. Scanner settings...............................................................135
10.8.2. Remote configuration of the Scanner program...............137
10.8.3. Launching Scanner from a Remote Location..................137
10.8.4. Reviewing the log file........................................................139
10.9. WebTuner: administering Updater ........................................139
11. UPDATER: UPDATING VIRUS-DEFINITION DATABASES .......143
11.1. Function and features.............................................................143
11.2. Starting the Updater...............................................................143
11.3. How to update virus-definition databases.............................145
11.3.1. Updating via the Internet ..................................................145
11.3.2. Updating from a network directory...................................146
11.3.3. Updating from an archive.................................................146
11.4. Saving the report to a file .......................................................147
12. INSPECTOR: MONITORING FILESYSTEM INTEGRITY.............148
12.1. Function and Features...........................................................148
12.2. Running Inspector ..................................................................149
12.2.1. The Program Command Line ..........................................149
12.2.2. Defining the location to be checked.................................150
12.2.3. Handling modified and new files......................................152
12.2.4. Saving the performance report ........................................154
13. CONTROL CENTRE: SCHEDULING THE KASPERSKY ANTI-
VIRUS FOR XBSD FILE SERVER PERFORMANCE...................155
13.1. Function and Features...........................................................155
13.2. Running Control Centre .........................................................155
13.3. Scheduling performance of package component-based
tasks........................................................................................156
13.4. Saving the performance report..............................................160
14. APPENDIX A. PRINCIPAL FILES..................................................162
15. APPENDIX B. SUPPLEMENTARY DETAILS OF KASPERSKY
ANTI-VIRUS FOR XBSD FILE SERVER........................................163

CONTENTS
7
77
7
15.1. Files with the program settings..............................................163
15.2. Scanner and Daemon: The initialization file (AvpUnix.ini) ...163
15.3. Scanner and Daemon: the profile (defUnix.prf)....................165
15.4. Scanner and Daemon: command line switches...................176
15.5. Scanner and Daemon: report messages..............................181
15.6. Scanner and Daemon: exit codes.........................................183
15.7. Slogan: report templates........................................................184
15.8. Inspector: command line switches ........................................187
15.9. Control Centre: command line switches................................190
15.10. Monitor: configuration file (monitor.conf)...............................194
15.11. Updater: command line switches ..........................................196
15.12. Installer: command line switches...........................................199
15.13. WebTuner: the configuration file (loader.cfg)........................200
16. APPENDIX C. CLASSIFYING COMPUTER VIRUSES.................204
17. APPENDIX D. KASPERSKY LAB LTD.........................................207
17.1. About Kaspersky Lab.............................................................207
17.2. Other Kaspersky Lab AntiViral Products...............................208
17.3. Kaspersky Lab Contact Information......................................210
18. INDEX.................................................................................................212

8
88
8
Attention!!! New viruses arise every da
y
and if you want to keep your anti-virus
fresh and capable, we strongl
y
recommend you to update anti-virus
databases at least every day (for more
details see below). Moreover, make sure
to update them right after you install the
product on your computer!
1.
1.1.
1. Kaspersky
KasperskyKaspersky
KasperskyTM
TMTM
TM Anti
AntiAnti
Anti-
--
-Virus for
Virus forVirus for
Virus for
FreeBSD, OpenBSD and BSDi
FreeBSD, OpenBSD and BSDiFreeBSD, OpenBSD and BSDi
FreeBSD, OpenBSD and BSDi
File Server
File ServerFile Server
File Server
1.1.Introduction
What is Kaspersky Anti-Virus for FreeBSD,
OpenBSD and BSDi File Server?
KasperskyTM Anti-Virus for FreeBSD, OpenBSD and BSDi File
Server (Kaspersky Anti-Virus for xBSD File Server) is a software
product that is designed to search for and delete viruses1from xBSD and
remotely manage Kaspersky Anti-Virus for xBSD File Server File Server. It
1The computer virus is a computer program (that is, executable code and/or a collection
of instructions) that can replicate itself (though the copy may not necessarily exactly
match the original) and penetrate files and other resources of computer systems and
networks and make them perform tasks the virus dictates without the user’s permission.
Copies of the program are also capable of self-replicating.
Chapter
1

INTRODUCTION
9
99
9
allows detection and deletion of all currently known types of viruses and
mailware codes including:
• polymorphic or self-encoding viruses;
• stealth or invisible viruses;
• viruses for Windows 9x, Windows NT, UNIX, OS/2;
• new viruses for Java applets;
• macroviruses infecting Word documents, Excel spreadsheets,
PowerPoint presentations, Help files etc.;
• network worms;
• Trojans.
!"For classification of viruses that can be detected and deleted using
Kaspersky Anti-Virus for xBSD File Server refer to Appendix C.
The package contains a set of anti-virus applications and utilities.
The kavscanner (Scanner) enables you to check for viruses in your
operation system on demand2.
The kavdaemon anti-virus process (Daemon) allows integration of the
virus check process into your programs, and kavmonitor, the anti-virus file-
monitor (Monitor), continuously keeps checking for viruses in files of your
FreeBSD filesystem that are started or opened.
The slogan program (Slogan) was developed to process and summarize
data within the performance reports of the Scanner and the Daemon
programs.
Kavupdater (Updater) enables you to update virus-definition databases
that are used by other components when checking for viruses.
!"When checking for viruses Kaspersky Anti-Virus for xBSD File
Server uses virus-definition databases that contain information
allowing detection and deletion of many viruses. Kaspersky Lab
releases virus-definition database updates containing information
about new viruses on a daily basis.
2If there are other computer drives mounted under your filesystem, files on these drives
will be also virus-checked. Hereinafter when describing the virus-checking process on
your computer we mean your computer filesystem and all the files mounted under it.