Kaspersky Anti-Virus for Mac USER GUIDE PROGRAM VERSION: 8.
Dear User! Thank you for choosing our product. We hope that this documentation will help you in your work and will provide answers regarding this software product. Any type of reproduction and distribution of any materials, including translation thereof, is allowed only by a written permission of Kaspersky Lab. This document and graphic images related to it can be used exclusively for information, non-commercial or personal purposes.
TABLE OF CONTENTS KASPERSKY ANTI-VIRUS ........................................................................................................................................... 6 Hardware and software system requirements .......................................................................................................... 6 Distribution kit ..........................................................................................................................................................
KASPERSKY ANTI-VIRUS Selecting a security level .................................................................................................................................. 48 Specifying the types of objects to be scanned ................................................................................................. 50 Selecting actions on objects .............................................................................................................................
TABLE OF CONTENTS Info-ZIP 5.51 library ............................................................................................................................................. 114 LZMA SDK 4.43 library ........................................................................................................................................ 115 RFC1321-based (RSA-free) MD5 LIBRARY library ............................................................................................. 115 Zlib 1.2 library .
KASPERSKY ANTI-VIRUS Kaspersky Anti-Virus for Mac (hereinafter referred to as Kaspersky Anti-Virus) is the new generation of information protection solutions. It is designed to protect computers managed by Mac OS against viruses and malware.
KASPERSKY ANTI-VIRUS 80 MB free hard drive space; Mac OS X 10.4.11 operating system, or higher. DISTRIBUTION KIT You may purchase Kaspersky Anti-Virus (box edition) from our distributors or at an online store (such as www.kaspersky.com, eStore section).
KASPERSKY ANTI-VIRUS IN THIS SECTION: Sources of information to research on your own ............................................................................................................... 8 Contacting Technical Support ........................................................................................................................................... 9 Contacting Sales Department..................................................................................................................
KASPERSKY ANTI-VIRUS The complete Help system contains information on how to manage computer protection: view protection status, scan various areas of the computer for viruses, and execute other tasks. To open the help file, select the Help Kaspersky Anti-Virus Help System command in the Kaspersky Anti-Virus main menu, or click the button in the main application window (on page 13). If you have any questions regarding a separate window or tab of Kaspersky Anti-Virus, you can refer to the context help.
KASPERSKY ANTI-VIRUS To contact Technical Support Service, open the web form of the customer request processing system Helpdesk (http://support.kaspersky.com/helpdesk.html). On the Technical Support Service page that opens, enter your Personal Cabinet and fill in the request form. You can send your question in Russian, English, German, French, or Spanish.
INSTALLING AND REMOVING KASPERSKY ANTI-VIRUS The Kaspersky Anti-Virus installation package includes the installation assistant and the uninstallation assistant. To install Kaspersky Anti-Virus on your computer, run the installation file (*.dmg) and select Anti-Virus Installation. The installation assistant is a sequence of steps. You can switch between them using the Continue (go to the next step of installation) and Go Back (go one step back) buttons.
KASPERSKY ANTI-VIRUS Once the components are selected, please click the Install button and enter the administrator's password to confirm the installation. To restore the default installation settings, click the Standard installation button. 5. Completing the installation. The last window of the installation assistant displays information about the successful completion of the installation process. To exit the installation assistant, click the Close button.
APPLICATION INTERFACE Kaspersky Anti-Virus has a simple and easy-to-use interface. In this section we will take a closer look at its basic elements: main application window, application settings window and the Kaspersky Anti-Virus icon. You can change the appearance of the application by using various graphic elements and selected color schemes. IN THIS SECTION: Main application window...........................................................................................................................
KASPERSKY ANTI-VIRUS presence of various problems in the operation or configuration of the application. For more detailed information on these problems and their quick elimination, use the Security Assistant (see section "What is the protection status of your computer?" on page 18) that opens when you click on the color indicator.
APPLICATION INTERFACE APPLICATION SETTINGS WINDOW Kaspersky Anti-Virus settings window (see the figure below) may be accessed from the main window (see section "Main application window" on page 13), by clicking the button, or by selecting Preferences from the application menu, which will open if you click the Kaspersky Anti-Virus icon (on page 15) in Dock or Mac OS Menu Bar. Figure 2: Application settings window.
KASPERSKY ANTI-VIRUS 2. In the Show application icon section select the In Dock option. Note that this modification will take place only after Kaspersky Anti-Virus is restarted. Figure 3: Application settings window. Appearance If you selected the option of displaying application icon in MAC OS menu bar, the icon will not appear in Dock when the application is started or main window is opened.
APPLICATION INTERFACE All the colors, fonts, icons and texts used in the Kaspersky Anti-Virus interface can be changed. You can create your own skins for the application, or localize it in another language. To activate a skin, specify the path to the folder in the Skin field. To select a folder, use the Select button. Figure 4: Application settings window.
QUICK START One of the main goals of Kaspersky Lab specialists when they designed the application was to ensure optimum configuration of Kaspersky Anti-Virus to provide your computer with protection immediately after the installation. You are advised to perform the following actions after completing the installation and starting the application on your computer: Activate your copy of Kaspersky Anti-Virus (see section "License management" on page 72).
QUICK START Yellow. Your computer's protection is below the previous level. This protection status indicates that there are problems in the performance or settings of Kaspersky Anti-Virus. Such problems include, for example: slight deviations from the recommended operation settings, or the Kaspersky Anti-Virus databases have not been updated for several days. Red. Your computer is at serious risk of infection.
KASPERSKY ANTI-VIRUS If you still have threats left after you have finished using the Security Assistant, the main window color will indicate security problems. If you postpone the elimination of some threats, they will not be present in the list of active threats the next time Security Assistant is opened. However, you can still return to view and eliminate postponed threats by clicking the View postponed threats button in the last window of the Security Assistant.
QUICK START HOW TO SCAN A FILE, FOLDER OR DISK FOR VIRUSES It is useful to be able to scan a part of your computer for viruses rather than the entire computer: for example, the hard drive containing applications, games, or email databases which have been transferred from work. To scan an individual object for viruses: 1. Open the main application window (on page 13) and click the button. 2.
MULTI-TASKED PROTECTION MANAGEMENT By default, Kaspersky Anti-Virus starts when the operating system starts and protects your computer during the entire session. File-Anti-Virus' activity is indicated by the Kaspersky Anti-Virus icon (on page 15) in the Dock or in the Mac OS Menu Bar. If the icon is active, your computer's protection is enabled, if the icon is inactive, the protection is disabled.
MULTI-TASKED PROTECTION MANAGEMENT There are several ways to disable computer protection: Click the Kaspersky Anti-Virus icon (on page 15) in the Dock or in the Mac OS Menu Bar and select the Turn Protection Off command from the menu that opens. Figure 6: Disabling protection from the contextual menu Open the application settings window (on page 15), select the Protection tab and uncheck the Enable File Anti-Virus box. Figure 7: Application settings window.
KASPERSKY ANTI-VIRUS From the menu that opens by clicking the Anti-Virus icon (see section "Kaspersky Anti-Virus icon" on page 15) in the Mac OS Menu Bar or in the Dock. To do this, select the Turn Protection On item. Figure 8: Enabling protection from the contextual menu From the Security Assistant (see section "What is the protection status of your computer?" on page 18) interface.
MULTI-TASKED 2. PROTECTION MANAGEMENT In the Configuration manager section click the Load button and select the file you want to import Kaspersky Anti-Virus settings from. Figure 9: Application settings window. Service EXITING KASPERSKY ANTI-VIRUS If, for any reason, you need to close Kaspersky Anti-Virus, click the Kaspersky Anti-Virus icon (on page 15) in the Mac OS Menu Bar or in the Dock, and select the Exit command in the menu that opens.
CREATING A PROTECTION SCOPE Kaspersky Anti-Virus protection scope is defined on the Threats tab of the application settings window (see section "Application settings window" on page 15). They include: list of threats against which Kaspersky Anti-Virus will ensure the protection; list of objects in the trusted area, which will be excluded from protection. IN THIS SECTION: Selecting malicious programs to be monitored .....................................................................................
CREATING A PROTECTION SCOPE Kaspersky Lab does not recommend disabling monitoring of Spyware, Adware and Auto-dialers. If Kaspersky Anti-Virus classifies a program as riskware which you do not consider dangerous, you can configure an exclusion for it (see section "Trusted zone creation" on page 27). Figure 11: Application settings window. Threats TRUSTED ZONE CREATION Trusted zone is a user-created list of objects which Kaspersky Anti-Virus does not monitor.
KASPERSKY ANTI-VIRUS To create an exclusion list: 1. Open the application settings window (on page 15) and select the Threats section (see figure below). Figure 12: Application settings window. Threats 2. Click the Trusted zone button in the Exclusions section (see figure above). This will open the window containing a list of objects excluded from protection (see figure below).
CREATING A PROTECTION SCOPE To edit the exclusion rule you are using, select it from the list and click the Edit button. To delete a rule, click the button. To add a new exclusion rule, click the rule creation window (see figure below). button and specify the exclusion conditions in the Object / All objects. Specify the exclusion object, which may be a file, a folder, or a file mask (see section "Allowed file exclusion masks" on page 91).
ANTI-VIRUS PROTECTION OF YOUR COMPUTER'S FILE SYSTEM Your computer's file system may contain viruses and other malicious programs that persist for years, having initially penetrated the computer from a removable disk drive or from the Internet, and never causing any trouble. But once the infected file is opened, the virus will be activated immediately. File Anti-Virus is the component that monitors the computer's file system in real-time mode.
ANTI-VIRUS PROTECTION OF YOUR COMPUTER'S FILE SYSTEM To disable File Anti-Virus, click the Kaspersky Anti-Virus icon (see page 15) in the Dock or in the Mac OS Menu Bar and select the Turn Protection Off command. You also can disable file protection from the application settings window (see section "Application settings window" on page 15). To do this, select the Protection tab and uncheck the Enable File Anti-Virus box (see the figure below). Figure 15: Application settings window.
KASPERSKY ANTI-VIRUS IN THIS SECTION: Selecting the file security level ........................................................................................................................................ 32 Specifying the types of files to scan................................................................................................................................. 33 Creating a protection scope......................................................................................................
ANTI-VIRUS 3. PROTECTION OF YOUR COMPUTER'S FILE SYSTEM Edit the file protection settings in the window that opens, and click the OK button. Figure 16: Application settings window. File Anti-Virus SPECIFYING THE TYPES OF FILES TO SCAN You can specify which types of files will be scanned by File Anti-Virus, using the criteria of file size, file format, or location, whenever they are opened, executed, or saved.
KASPERSKY ANTI-VIRUS In the Compound files section, specify which compound files should be scanned for viruses: Scan archives - scan archives in ZIP, CAB, RAR, ARJ formats; Scan installation packages - scan self-unpacking archives for viruses; Scan attachments - scan objects embedded in files, such as Excel spreadsheets or a macro embedded in a Microsoft Office Word file, or email attachments.
ANTI-VIRUS 3. PROTECTION OF YOUR COMPUTER'S FILE SYSTEM Select the General tab in the window that opens (see the figure below). Figure 18: File Anti-Virus. Configuring scan settings CREATING A PROTECTION SCOPE By default, File Anti-Virus scans all files the moment they are accessed, regardless of the media they are stored on, whether it is a hard disk drive, a CD/DVD-ROM, or a flash card.
KASPERSKY ANTI-VIRUS To restrict the protection scope: 1. Open the application settings window (on page 15) and select the Protection section (see figure below). Figure 19: Application settings window. File Anti-Virus 2. Click the Preferences button in the Security level section. 3. In the window that opens, select the Protection scope tab (see the figure below). The tab contains the list of objects which will be scanned by File Anti-Virus.
ANTI-VIRUS 3. PROTECTION OF YOUR COMPUTER'S FILE SYSTEM Combine the first and second ways, i.e. create a protection scope and exclude a number of objects from it. Figure 20: File Anti-Virus. Creating a protection scope CONFIGURING ADDITIONAL SETTINGS You can configure the following additional settings for File Anti-Virus: scan mode for the file system objects, use of iSwift technology, which increases performance of objects processing, and conditions for temporarily pausing the component.
KASPERSKY ANTI-VIRUS To configure additional settings of File Anti-Virus: 1. Open the application settings window (on page 15) and select the Protection section (see figure below). Figure 21: Application settings window. File Anti-Virus 2. Click the Preferences button in the Security level section. 3. In the window that opens, select the Additional tab (see the figure below). The object scanning mode determines File Anti-Virus processing conditions. You have the following options: Smart mode.
ANTI-VIRUS PROTECTION OF YOUR COMPUTER'S FILE SYSTEM Note that the files being opened will be intercepted and scanned by File Anti-Virus, regardless of the mode you have selected. Figure 22: File Anti-Virus. Configuring additional settings iSwift technology can increase the speed of the File Anti-Virus by excluding certain objects from the scan.
KASPERSKY ANTI-VIRUS SELECTING ACTIONS ON OBJECTS If an anti-virus scan shows that a file is infected or suspicious, File Anti-Virus' subsequent actions depend on the object's status and the action selected. When the scan is complete, the object may be identified as: malicious, for example, virus, Trojan; potentially infected when the scan cannot determine whether the object is infected or not.
ANTI-VIRUS PROTECTION OF YOUR COMPUTER'S FILE SYSTEM If the action you have selected is… … when an infected or potentially infected object is detected: Block access Kaspersky Anti-Virus blocks access to the infected object and attempts to disinfect it. If the object is successfully disinfected, it becomes available for use. If the object cannot be disinfected, its location is not be changed.
KASPERSKY ANTI-VIRUS FILE PROTECTION STATISTICS The main application window displays summary statistics related to the current performance of File Anti-Virus, including: the number of objects scanned during File Anti-Virus' current session; the number of dangerous objects detected, and the name of the file currently being scanned (see section "Main application window" on page 13).
SCANNING FOR VIRUSES In addition to the computer protection (see section "Anti-virus protection of your computer's file system" on page 30) provided by the File Anti-Virus, it is critical to periodically scan the computer for viruses. This is required to stop the spread of malicious programs not detected by File Anti-Virus, because, for instance, a low protection level has been selected.
KASPERSKY ANTI-VIRUS 2. In the menu (see figure below) that opens, select the required task Full Scan, Quick Scan or Virus Scan. If you select the latter, the application will ask to select the object / objects for scan (see section "Creating the list of objects to scan" on page 45). Apart from the above listed tasks, included in the application package, the menu can also display users scan tasks (see section "Creating virus scan tasks" on page 46), if such tasks were created.
SCANNING 2. FOR VIRUSES In the list on the left, select the name of the virus scan task (see figure below) and click the Pause button. This will pause the scan until you start the task again manually or it starts again automatically according to the schedule. To start the scan manually, click the Start button. Figure 27: Managing virus scan tasks from the report To stop a virus scan task, please do the following: 1. Open the Kaspersky Anti-Virus report window.
KASPERSKY ANTI-VIRUS To delete an object, select it from the list and click the button. You can temporarily disable scanning of individual objects for any task without deleting them from the list. To do this, uncheck the box beside the object that you do not want to scan. You can create / edit a list of objects to scan for users task (see section "Creating virus scan tasks" on page 46) in the same way.
SCANNING FOR VIRUSES To create a new virus scan task: 1. Open the application settings window (on page 15), select the Virus Scan tab and select the task with the settings closest to your needs in the dropdown list on the left (see figure below). Figure 29: Application settings window. Full scan task 2. Click the button located under the virus scan task list and select Copy. 3. Enter a name for the task in the window that opens and click the OK button.
KASPERSKY ANTI-VIRUS 2. Enter a new name for the task in the window that will open and click the OK button. The task name will change. To delete a created task, please do the following 1. Select the task from the list, click the button under the scan task list, and select Delete. 2. Confirm the task deletion in the window that will prompt you for confirmation. The task will be deleted from the task list. You can only rename and delete tasks that you have created.
SCANNING FOR VIRUSES Maximum protection. The most complete scan of the entire computer or individual disks, folders, or files. We recommend using this level if you suspect that a virus has infected your computer. Recommended. This is the level with the settings recommended by Kaspersky Lab experts. Maximum speed. This level enables you to comfortably use other applications that require significant system resources, since the range of files scanned is smaller.
KASPERSKY ANTI-VIRUS 2. Click the Preferences button in the Security level section. 3. Edit the file protection settings in the window that opens, and click the OK button. SPECIFYING THE TYPES OF OBJECTS TO BE SCANNED You can specify which types of objects will be scanned, by specifying which file formats, file sizes, and drives will be scanned for viruses when this task runs. The types of files to be scanned for viruses are determined in the File types section (see the figure below).
SCANNING FOR VIRUSES Scan attachments - scan objects embedded in files (for example, Excel spreadsheets or a macro embedded in a Microsoft Word file, email attachments, etc.). Scan email format files - scan email format files and email databases. If this box is checked, Kaspersky AntiVirus scans each component of the email message (body and any attachments). If this box is not checked, the email file will be scanned as a single object.
KASPERSKY ANTI-VIRUS 3. Select the General tab in the window that will open (see the figure below). Figure 32: Scanning for viruses. Configuring scan settings SELECTING ACTIONS ON OBJECTS If an anti-virus scan shows that a file is infected or suspected of being infected, Kaspersky Anti-Virus' subsequent actions depend on the object's status and the action selected. One of the following statuses can be assigned to the object after the scan: status of a malicious program (for example, virus, Trojan).
SCANNING FOR VIRUSES To change the action on an object, open the application settings window (on page 15), open the Virus Scan tab, and select the name of the required task. In the table below you can find descriptions of all available actions on objects. Figure 33: Application settings window. Full scan task Table 2.
KASPERSKY ANTI-VIRUS If the action you have selected is… … when an infected or potentially infected object is detected: Do not prompt for action Kaspersky Anti-Virus records information about detected objects in the report without processing them. We do not recommend enabling this operation mode since infected and potentially infected objects persist on your computer and it is practically impossible to avoid infection.
SCANNING FOR VIRUSES Minutes. The interval between scan task startups is measured in minutes. Enter the number of minutes between scan startups in the schedule settings (the value should be specified in range from 5 to 59 minutes). Hours. The interval between scan startups is measured in hours. Specify the interval in the schedule settings as Every N-th hour and specify the value of N. For example, to run the task every hour, enter Every 1 hour. Days.
KASPERSKY ANTI-VIRUS To specify an account, please do the following: 1. Open the application settings window (on page 15), open the Virus Scan tab, and select the Virus Scan task in the list (see figure below). Figure 35: Application settings window. Full scan task 2. Enable task running by the schedule in the Run mode section and click the Edit button.
SCANNING 3. FOR VIRUSES In the schedule configuring window (see figure below) in the Start from the user's account select the account under which the task will be started from the Drop-down menu. Figure 36: Configuring the task schedule ASSIGNING UNIFORM SCAN SETTINGS TO ALL TASKS Each scan task is performed according to its own settings. By default, all tasks created when installing Kaspersky AntiVirus on your computer use the settings recommended by Kaspersky Lab.
KASPERSKY ANTI-VIRUS To assign uniform scan settings for all tasks: 1. Open the application settings window (on page 15), open the Virus Scan tab, and select the Virus Scan task in the list (see figure below). Figure 37: Application settings window. Scanning for viruses 2. To modify the scan settings, select the security level (see section "Selecting a security level" on page 48), configure advanced level settings, and select an action on objects (see section "Selecting actions on objects" on page 52).
SCANNING 2. FOR VIRUSES Click the Default button in the Security level section (see the figure below). Figure 38: Application settings window. Scanning for viruses VIRUS SCAN STATISTICS You can view the information on results of Virus Scan in the Completed tasks section of the report (see section "Reports" on page 81) on application operation.
KASPERSKY ANTI-VIRUS object by Kaspersky Anti-Virus: if the malicious program that has infected the object is revealed, this object is assigned the corresponding status. For example, virus, Trojan, etc. If the type of malicious effect cannot be exactly established, the object is assigned the status of suspicious. Next to the status, the action taken on the object is specified (detected, not found, disinfected).
UPDATING THE APPLICATION Keeping protection up-to-date is a key to reliably protecting your computer. As new viruses, Trojans, and malicious software emerge daily, it is extremely important to update the application regularly to keep your data permanently protected. Kaspersky Anti-Virus update implies that the following components will be downloaded and installed on your computer: Application databases Protection of information stored on the computer is ensured thanks to databases.
KASPERSKY ANTI-VIRUS IN THIS SECTION: Starting the update .......................................................................................................................................................... 62 Rolling back the latest update ......................................................................................................................................... 62 Configuring the update ....................................................................................................
UPDATING 2. THE APPLICATION Click the Roll back update button. Figure 39: Application settings window. Update CONFIGURING THE UPDATE Kaspersky Anti-Virus will only be updated in accord with the following settings: Update source. Update source is a resource that contains the latest database and module files for Kaspersky Anti-Virus. Update sources (see section "Selecting an update source" on page 64) can be HTTP and FTP servers, local or network folders. Update objects.
KASPERSKY ANTI-VIRUS IN THIS SECTION: Selecting an update source ............................................................................................................................................. 64 Selecting the update mode and objects........................................................................................................................... 65 Configuring the update task schedule ....................................................................................................
UPDATING THE APPLICATION By default, the list contains only Kaspersky Lab update servers. When the update is in progress, Kaspersky Anti-Virus accesses this list, selects the address of the first server, and tries to download updates from this server. If updates cannot be downloaded from the selected server, the application tries to connect and retrieve the updates from the next server. You can edit the source list using the button to add a new source and the button to remove a source from the list.
KASPERSKY ANTI-VIRUS If the next application update occurs before the computer restarts and the program module updates downloaded earlier are installed, only the databases will be updated. Update mode determines how the update is launched. One of the following modes can be selected in the Run mode section (see the figure above): Automatically. Kaspersky Anti-Virus checks for an update package in the update source at the set time intervals (see section "Selecting an update source" on page 64).
UPDATING THE APPLICATION Months. The task will run once a month at the specified time. At a specified time. The task will run once at the date and time that you have specified. At application startup. The task starts every time that Kaspersky Anti-Virus starts. You can also set an interval between the application startup and the task startup.
KASPERSKY ANTI-VIRUS Kaspersky Anti-Virus only retrieves its own update package from Kaspersky Lab's servers. Figure 44: Configuring update distribution service If you want other computers on the network to update from the folder containing updates copied from the Internet, you should do the following: 1. Grant public access to this folder. 2. Specify the shared folder as the update source on the networked computers in the update service settings.
UPDATING 2. THE APPLICATION Uncheck the Rescan quarantine box in the Action after update section. Figure 45: Application settings window. Update CONFIGURING PROXY SERVER SETTINGS If you use a proxy server to establish the Internet connection, you will need to configure connection settings. Kaspersky Anti-Virus uses these settings to update the databases and modules.
KASPERSKY ANTI-VIRUS To configure the proxy server settings: 1. Open the application settings window (on page 15) and select the Network tab (see figure below). Figure 46: Application settings window. Network 2. Check the Use proxy server box and specify which proxy server settings you need to use: Use system proxy server preferences - if this option is selected, Kaspersky Anti-Virus uses the proxy server settings specified in the MAC OS settings.
UPDATING THE APPLICATION If you are downloading the update from an FTP server, the server is connected to in passive mode by default. If this connection fails, it will attempt to connect in active mode. By default, the time assigned to connect to an update server is one minute. If the connection fails, once this time has elapsed, the application will attempt to connect to the next update server.
LICENSE MANAGEMENT Ability to use Kaspersky Anti-Virus is determined by a license obtained by purchasing the product and granting you the right to use the application as soon as you install your license. Without a license, unless a trial version has been activated, Kaspersky Anti-Virus will run in one-update mode. The application will not download any new updates. If a trial version has been activated, after the trial period expires, Kaspersky Anti-Virus will not run.
LICENSE MANAGEMENT key name and number, and its expiration date. The application is activated using the Activation assistant. Let us take a closer look at its steps. SELECTING APPLICATION ACTIVATION TYPE There are several options for activating the application, depending on whether you have a key for Kaspersky Anti-Virus or need to obtain one from a Kaspersky Lab server: Activate using activation code.
KASPERSKY ANTI-VIRUS Information about the current key will be displayed in the bottom part of the window, including the key number, the key type (commercial, trial, etc.), and the license key expiration date. COMPLETING ACTIVATION The Activation assistant will inform you that the application has been successfully activated. In addition, information about the installed key is displayed, including key number, key type (for instance, commercial or trial), and the license key's expiration date.
QUARANTINE Quarantine is a special repository containing the objects that could have been infected with viruses. Potentially infected objects are objects that are suspected of being infected with viruses or modifications of them. Why are objects detected as potentially infected? It is not always possible to exactly determine whether an object is infected or not. This could be for the following reasons: The code of the object being analyzed resembles a known threat but is partially altered.
KASPERSKY ANTI-VIRUS A file moved to quarantine manually may change its status if it had been scanned using the updated databases not earlier than three days after it was scanned for the first time after being placed in quarantine. Later, the file will be restored if it is assigned the false positive status, or removed with a copy placed in the backup if it is considered infected.
QUARANTINE CONFIGURING QUARANTINE SETTINGS You can configure the settings for the composition and operation of quarantine, specifically: Set the automatic scan mode for quarantined objects after each application database update (see section "Actions after update" on page 68). Kaspersky Anti-Virus will not be able to scan quarantined objects immediately after updating the databases if you are working with quarantine. Set the maximum duration for storing objects in quarantine.
BACKUP Sometimes, when disinfecting the objects, their integrity cannot be saved. If the disinfected file contained important information, and after disinfection it became partly or completely inaccessible, you can attempt to restore the original object from its backup copy. Backup copy is a copy of the original dangerous object that is created when first disinfecting or deleting the object, and saved in backup.
BACKUP We recommend that you periodically view the repository content and clear it using the Delete button. To clear the backup storage completely, click the Clear all button. You can also set up the application so that it independently deletes the oldest copies from backup (see section "Configuring the backup settings" on page 79). Figure 50: Backup storage CONFIGURING THE BACKUP SETTINGS You can determine the maximum period for storing copies in backup.
KASPERSKY ANTI-VIRUS To configure the settings for storing objects in the backup, please do the following: 1. Open the application settings window (on page 15) and select the Reports section (see figure below). Figure 51: Application settings window. Reports 2. In the Quarantine and Backup check Delete objects after box and set the term for keeping objects in the storage after which objects in the storage will be automatically deleted.
REPORTS Kaspersky Anti-Virus allows you to view detailed statistics of its results as well as for any events arising when the program runs. A detailed report will also be created for each application component: File Anti-Virus (see section "Antivirus protection of your computer's file system" on page 30), virus scan (see section "Scanning for viruses" on page 43) and update (see section "Updating the application" on page 61).
KASPERSKY ANTI-VIRUS Completed tasks. List of completed tasks. You may view all completed tasks or the last twenty ones. To clear the list, click the tasks command. button in the lower-left corner of the report window and select the Delete all completed From the report window you can manage the operation of File Anti-Virus, virus scan and update tasks: start, stop and pause them. To do this, use the buttons with the same name in the report window of the specific task.
REPORTS Allow or block logging information events. As a rule, these events are not important for security. To detect these events in the report, check Log non-critical events box. Allow storing in the report only for the important events occurring since the last time the task was run. This saves disk space by reducing the report size.
KASPERSKY ANTI-VIRUS THE EVENTS TAB The Events tab (see figure below) logs all important events which occur during File Anti-Virus's (see section "Anti-virus protection of your computer's file system" on page 30) operation, including virus scan tasks (see section "Scanning for viruses" on page 43) and update tasks (see section "Updating the application" on page 61).
REPORTS how many dangerous objects were detected, and how many of them were deleted, quarantined, or not disinfected.
KASPERSKY ANTI-VIRUS THE PREFERENCES TAB The Preferences tab (see the figure below) gives a complete overview of the settings for File Anti-Virus's operation (see section "Anti-virus protection of your computer's file system" on page 30), including virus scan (see section "Scanning for viruses" on page 43) tasks and application updates (see section "Updating the application" on page 61).
NOTIFICATIONS Various types of events occur when Kaspersky Anti-Virus runs. They may be of an informative nature or contain important information. For example, an event can inform you on the successful completion of an update or can detect an error in the operation of File Anti-Virus that should be eliminated immediately.
KASPERSKY ANTI-VIRUS 2. Check the Enable notifications in the Events notification section and switch to advanced settings. To do this, click the Additional button. In the window that opens (see the figure below), you may configure the following types of notices about events listed above: Pop-up message on screen, which contains information about an event that has occurred. To use this type of notification, check the box in the Balloon field next to the event you want to be notified of.
HELP INFORMATION This manual section contains help information about the formats of files being scanned and allowed masks being used when configuring Kaspersky Anti-Virus settings. IN THIS SECTION: List of objects to scan by extension ................................................................................................................................. 89 Allowed file exclusion masks ..................................................................................................................
KASPERSKY ANTI-VIRUS cla – Java class. vbs - Visual Basic script. vbe – BIOS video extension. js, jse - JavaScript source text. htm – hypertext document. htt - Microsoft Windows hypertext template. hta - hypertext program for Microsoft Internet Explorer. asp - Active Server Pages script. chm - compiled HTML file. pht - HTML file with embedded PHP scripts. php - script embedded in HTML files. wsh - Microsoft Windows Script Host file. wsf - Microsoft Windows script.
HELP INFORMATION jpg, jpeg, png - file in format for storing compressed images. emf - file in Enhanced Metafile format. Next generation of Microsoft Windows metafile. ico - object icon file. ov? - MS DOS executable files.
KASPERSKY ANTI-VIRUS dir/*.zip – all files with the zip extension in all dir/ folders dir/*.zi? - all files with the zi? extension in all dir/ folders where ? can represent any single character The * exclusion mask can only be used if you also assign a threat type to exclude, using the nomenclature of the Virus Encyclopedia. In this case the application will not look for the specified threat in any objects. Using this mask without selecting a threat type essentially disables monitoring.
USING THIRD-PARTY CODE Third-party code was used during Kaspersky Anti-Virus development. IN THIS SECTION: CryptoEx LLC .................................................................................................................................................................. 93 Boost 1.30.0 library.......................................................................................................................................................... 93 Libcurl 7.19.3 library ........................
KASPERSKY ANTI-VIRUS The copyright notices in the Software and this entire statement, including the above license grant, this restriction and the following disclaimer, must be included in all copies of the Software, in whole or in part, and all derivative works of the Software, unless such copies or derivative works are solely in the form of machine-executable object code generated by a source language processor.
USING THIRD-PARTY CODE libpng versions 0.89, June 1996, through 0.96, May 1997, are Copyright © 1996, 1997 Andreas Dilger Distributed according to the same disclaimer and license as libpng-0.88, with the following individuals added to the list of Contributing Authors: John Bowler, Kevin Bracey, Sam Bushell, Magnus Holmgren, Greg Roelofs, Tom Tanner. libpng versions 0.5, May 1995, through 0.88, January 1996, are Copyright © 1995, 1996 Guy Eric Schalnat, Group 42, Inc.
KASPERSKY ANTI-VIRUS To protect your rights, we need to make restrictions that forbid anyone to deny you these rights or to ask you to surrender the rights. These restrictions translate to certain responsibilities for you if you distribute copies of the software, or if you modify it. For example, if you distribute copies of such a program, whether gratis or for a fee, you must give the recipients all the rights that you have. You must make sure that they, too, receive or can get the source code.
USING THIRD-PARTY CODE These requirements apply to the modified work as a whole. If identifiable sections of that work are not derived from the Program, and can be reasonably considered independent and separate works in themselves, then this License, and its terms, do not apply to those sections when you distribute them as separate works.
KASPERSKY ANTI-VIRUS would not permit royalty-free redistribution of the Program by all those who receive copies directly or indirectly through you, then the only way you could satisfy both it and this License would be to refrain entirely from distribution of the Program. If any portion of this section is held invalid or unenforceable under any particular circumstance, the balance of the section is intended to apply and the section as a whole is intended to apply in other circumstances.
USING THIRD-PARTY CODE To do so, attach the following notices to the program. It is safest to attach them to the start of each source file to most effectively convey the exclusion of warranty; and each file should have at least the "copyright" line and a pointer to where the full notice is found.
KASPERSKY ANTI-VIRUS first think carefully about whether this license or the ordinary General Public License is the better strategy to use in any particular case, based on the explanations below. When we speak of free software, we are referring to freedom of use, not price.
USING 0. THIRD-PARTY CODE This License Agreement applies to any software library or other program which contains a notice placed by the copyright holder or other authorized party saying it may be distributed under the terms of this Lesser General Public License (also called "this License"). Each licensee is addressed as "you".
KASPERSKY ANTI-VIRUS 3. You may opt to apply the terms of the ordinary GNU General Public License instead of this License to a given copy of the Library. To do this, you must alter all the notices that refer to this License, so that they refer to the ordinary GNU General Public License, version 2, instead of to this License. (If a newer version than version 2 of the ordinary GNU General Public License has appeared, then you can specify that version instead if you wish.
USING THIRD-PARTY CODE c. Accompany the work with a written offer, valid for at least three years, to give the same user the materials specified in Subsection 6a, above, for a charge no more than the cost of performing this distribution. d. If distribution of the work is made by offering access to copy from a designated place, offer equivalent access to copy the above specified materials from the same place. e.
KASPERSKY ANTI-VIRUS This section is intended to make thoroughly clear what is believed to be a consequence of the rest of this License. 12. If the distribution and/or use of the Library is restricted in certain countries either by patents or by copyrighted interfaces, the original copyright holder who places the Library under this License may add an explicit geographical distribution limitation excluding those countries, so that distribution is permitted only in or among countries not thus excluded.
USING THIRD-PARTY CODE This library is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU Lesser General Public License for more details. You should have received a copy of the GNU Lesser General Public License along with this library; if not, write to the Free Software Foundation, Inc.
KASPERSKY ANTI-VIRUS Some devices are designed to deny users access to install or run modified versions of the software inside them, although the manufacturer can do so. This is fundamentally incompatible with the aim of protecting users' freedom to change the software. The systematic pattern of such abuse occurs in the area of products for individuals to use, which is precisely where it is most unacceptable. Therefore, we have designed this version of the GPL to prohibit the practice for those products.
USING THIRD-PARTY CODE available free programs which are used unmodified in performing those activities but which are not part of the work. For example, Corresponding Source includes interface definition files associated with source files for the work, and the source code for shared libraries and dynamically linked subprograms that the work is specifically designed to require, such as by intimate data communication or control flow between those subprograms and other parts of the work.
KASPERSKY ANTI-VIRUS license the work in any other way, but it does not invalidate such permission if you have separately received it. d. If the work has interactive user interfaces, each must display Appropriate Legal Notices; however, if the Program has interactive interfaces that do not display Appropriate Legal Notices, your work need not make them do so.
USING THIRD-PARTY CODE If you convey an object code work under this section in, or with, or specifically for use in, a User Product, and the conveying occurs as part of a transaction in which the right of possession and use of the User Product is transferred to the recipient in perpetuity or for a fixed term (regardless of how the transaction is characterized), the Corresponding Source conveyed under this section must be accompanied by the Installation Information.
KASPERSKY ANTI-VIRUS You may not propagate or modify a covered work except as expressly provided under this License. Any attempt otherwise to propagate or modify it is void, and will automatically terminate your rights under this License (including any patent licenses granted under the third paragraph of section 11).
USING THIRD-PARTY CODE If you convey a covered work, knowingly relying on a patent license, and the Corresponding Source of the work is not available for anyone to copy, free of charge and under the terms of this License, through a publicly available network server or other readily accessible means, then you must either (1) cause the Corresponding Source to be so available, or (2) arrange to deprive yourself of the benefit of the patent license for this particular work, or (3) arrange, in a manner consist
KASPERSKY ANTI-VIRUS THERE IS NO WARRANTY FOR THE PROGRAM, TO THE EXTENT PERMITTED BY APPLICABLE LAW. EXCEPT WHEN OTHERWISE STATED IN WRITING THE COPYRIGHT HOLDERS AND/OR OTHER PARTIES PROVIDE THE PROGRAM "AS IS" WITHOUT WARRANTY OF ANY KIND, EITHER EXPRESSED OR IMPLIED, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE. THE ENTIRE RISK AS TO THE QUALITY AND PERFORMANCE OF THE PROGRAM IS WITH YOU.
USING THIRD-PARTY CODE You should also get your employer (if you work as a programmer) or school, if any, to sign a "copyright disclaimer" for the program, if necessary. For more information on this, and how to apply and follow the GNU GPL, see >>. The GNU General Public License does not permit incorporating your program into proprietary programs.
KASPERSKY ANTI-VIRUS Permission is hereby granted, free of charge, to any person obtaining a copy of this software and associated documentation files (the "Software"), to deal in the Software without restriction, including without limitation the rights to use, copy, modify, merge, publish, distribute, sublicense, and / or sell copies of the Software, and to permit persons to whom the Software is furnished to do so, subject to the following conditions: The above copyright notice and this permission notice s
USING THIRD-PARTY CODE 1. Redistributions of source code (in whole or in part) must retain the above copyright notice, definition, disclaimer, and this list of conditions. 2. Redistributions in binary form (compiled executables and libraries) must reproduce the above copyright notice, definition, disclaimer, and this list of conditions in documentation and/or other materials provided with the distribution.
KASPERSKY ANTI-VIRUS 2. Altered source versions must be plainly marked as such, and must not be misrepresented as being the original software. 3. This notice may not be removed or altered from any source distribution. GCC 4.0.1 LIBRARY The GCC 4.0.
USING THIRD-PARTY CODE Activities other than copying, distribution and modification are not covered by this License; they are outside its scope. The act of running the Program is not restricted, and the output from the Program is covered only if its contents constitute a work based on the Program (independent of having been made by running the Program). Whether that is true depends on what the Program does. 1.
KASPERSKY ANTI-VIRUS If distribution of executable or object code is made by offering access to copy from a designated place, then offering equivalent access to copy the source code from the same place counts as distribution of the source code, even though third parties are not compelled to copy the source along with the object code. 4. You may not copy, modify, sublicense, or distribute the Program except as expressly provided under this License.
USING THIRD-PARTY CODE 11. BECAUSE THE PROGRAM IS LICENSED FREE OF CHARGE, THERE IS NO WARRANTY FOR THE PROGRAM, TO THE EXTENT PERMITTED BY APPLICABLE LAW. EXCEPT WHEN OTHERWISE STATED IN WRITING THE COPYRIGHT HOLDERS AND/OR OTHER PARTIES PROVIDE THE PROGRAM "AS IS" WITHOUT WARRANTY OF ANY KIND, EITHER EXPRESSED OR IMPLIED, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE.
KASPERSKY ANTI-VIRUS This General Public License does not permit incorporating your program into proprietary programs. If your program is a subroutine library, you may consider it more useful to permit linking proprietary applications with the library. If this is what you want to do, use the GNU Library General Public License instead of this License. GNU LESSER GENERAL PUBLIC LICENSE Version 2.1, February 1999 Copyright © 1991, 1999 Free Software Foundation, Inc.
USING THIRD-PARTY CODE non-free programs. These disadvantages are the reason we use the ordinary General Public License for many libraries. However, the Lesser license provides advantages in certain special circumstances. For example, on rare occasions, there may be a special need to encourage the widest possible use of a certain library, so that it becomes a de-facto standard. To achieve this, non-free programs must be allowed to use the library.
KASPERSKY ANTI-VIRUS c. You must cause the whole of the work to be licensed at no charge to all third parties under the terms of this License. d.
USING THIRD-PARTY CODE Otherwise, if the work is a derivative of the Library, you may distribute the object code for the work under the terms of Section 6. Any executables containing that work also fall under Section 6, whether or not they are linked directly with the Library itself. 6.
KASPERSKY ANTI-VIRUS 9. You are not required to accept this License, since you have not signed it. However, nothing else grants you permission to modify or distribute the Library or its derivative works. These actions are prohibited by law if you do not accept this License.
USING THIRD-PARTY CODE 16.
KASPERSKY LAB Kaspersky Lab was founded in 1997. Today it is the leading developer of a wide range of high-performance information security software products, including anti-virus, anti-spam and anti-hacking systems. Kaspersky Lab is an international company. Headquartered in the Russian Federation, the company has offices in the United Kingdom, France, Germany, Japan, the Benelux countries, China, Poland, Romania and the USA (California).
