Manuali utente per Kaspersky Lab WorkSpace Security EU ED, 150-249u, 2Y, RNW

Sommario

• Introduction

  11
  • Distribution Kit

    11
    • End user license agreement (EULA)

      11
  • Services provided for registered users

    11
  • Hardware and software system requirements

    12
• Kaspersky Anti-Virus 6.0 for Windows Workstations MP4

  13
  • Obtaining information about the application

    13
    • Sources of information to research on your own

      13
    • Contacting the Sales Department

      14
    • Contacting the Technical Support service

      14
    • Discussing Kaspersky Lab's applications on the web forum

      15
  • What's new in Kaspersky Anti-Virus 6.0 for Windows Workstations MP4

    15
  • What Kaspersky Anti-Virus defense is built on

    16
    • Protection components

      17
    • Virus scan tasks

      18
    • Update

      18
    • Support features of the application

      18
• Installing Kaspersky Anti-Virus 6.0

  20
  • Installation using the Installation Wizard

    20
    • Step 1. Verifying that the system meets the installation requirements

      21
    • Step 2. Installation start window

      21
    • Step 3. Viewing the License Agreement

      21
    • Step 4. Selecting installation folder

      21
    • Step 5. Using application settings saved after previous installation

      21
    • Step 6. Selecting the type of the installation

      22
    • Step 7. Selecting application components for the installation

      22
    • Step 8. Disabling Microsoft Windows firewall

      22
    • Step 9. Searching for other anti-virus applications

      23
    • Step 10. Final preparation for installation

      23
    • Step 11. Completing the installation

      23
  • Application installation from the command line

    24
  • Installation from Group Policy Object editor

    24
    • Installing the application

      24
    • Description of setup.ini file settings

      25
    • Updating application version

      26
    • Removing the application

      26
• Getting started

  27
  • Initial Configuration Wizard

    27
    • Using the objects saved from the previous version

      28
    • Activating the application

      28
      • Online activation

        29
        • Entering the activation code

          29
        • Obtaining a key file

          29
      • Activating the trial version

        29
      • Activation using a key file

        29
      • Completing the activation

        30
    • Protection mode

      30
    • Update settings configuration

      30
    • Configuring virus scan schedule

      31
    • Restricting access to the application

      31
    • Configuring Anti-Hacker

      31
      • Determining a security zone’s status

        32
      • Creating the list of network applications

        33
    • Finishing the Configuration Wizard

      33
  • Scanning computer for viruses

    33
  • Updating the application

    34
  • Managing licenses

    34
  • Security management

    35
  • Pausing protection

    36
  • Eliminating problems. User technical support

    36
  • Creating a trace file

    37
  • Configuring application settings

    37
  • Application operation reports. Data files

    37
• Application interface

  38
  • Taskbar notification area icon

    38
  • Context menu

    39
  • Main application window

    40
  • Notifications

    41
  • Application settings window

    42
• File Anti-Virus

  43
  • Component operation algorithm

    44
  • Changing security level

    45
  • Changing actions to be performed on detected objects

    46
  • Creating a protection scope

    47
  • Using heuristic analysis

    48
  • Scan optimization

    48
  • Scan of compound files

    48
  • Scanning large compound files

    49
  • Changing the scan mode

    50
  • Scan technology

    50
  • Pausing the component: creating a schedule

    51
  • Pausing the component: creating a list of applications

    51
  • Restoring default protection settings

    51
  • File Anti-Virus statistics

    52
  • Delayed object treatment

    52
• Mail Anti-Virus

  54
  • Component operation algorithm

    55
  • Changing security level

    56
  • Changing actions to be performed on detected objects

    56
  • Creating a protection scope

    57
  • Selecting the scan method

    58
  • Email scanning in Microsoft Office Outlook

    59
  • Email scanning by the plug-in in The Bat!

    59
  • Using heuristic analysis

    60
  • Scan of compound files

    60
  • Attachment filtering

    61
  • Restoring default mail protection settings

    61
  • Email protection statistics

    61
• Web Anti-Virus

  63
  • Component operation algorithm

    64
  • Changing HTTP traffic security level

    65
  • Changing actions to be performed on detected objects

    65
  • Creating a protection scope

    66
  • Selecting the scan method

    66
  • Using heuristic analysis

    67
  • Scan optimization

    67
  • Restoring default web protection settings

    68
  • Web Anti-Virus statistics

    68
• Proactive Defense

  70
  • Component operation algorithm

    70
  • Application Activity Analyzer

    71
    • Using the list of dangerous activity

      71
    • Changing the dangerous activity monitoring rule

      72
    • System accounts control

      73
    • Proactive Defense events

      73
  • Registry Guard

    76
    • Managing the list of system registry monitoring rules

      76
    • Creating a group of system registry objects to monitor

      77
      • Selecting registry objects for creating a rule

        77
      • Creating a rule for monitoring registry objects

        78
  • Proactive Defense statistics

    78
• Anti-Spy

  80
  • Anti-Banner

    80
    • Creating the list of allowed banner addresses

      81
    • Creating the list of blocked banner addresses

      81
    • Advanced component settings

      81
    • Exporting / importing banner lists

      82
  • Anti-Dialer

    82
  • Anti-Spy statistics

    83
• Protection against network attacks

  84
  • Component operation layout

    85
  • Changing Anti-Hacker protection level

    86
  • Rules for applications and packet filtering

    87
    • Rules for applications. Creating a rule manually

      87
    • Rules for applications. Creating rules with templates

      88
    • Rules for packet filtering. Creating a rule

      88
    • Changing rule priority

      89
    • Exporting and importing the created rules

      90
    • Fine-tuning rules for applications and packet filtering

      90
      • Changing data transfer protocol

        91
      • Changing the direction of connection

        91
      • Defining the network connection address

        92
      • Defining the connection port

        92
      • Defining the time range of rule's activity

        92
      • Determining socket type

        92
      • Changing ICMP packet type

        93
  • Rules for security zones

    93
    • Adding new security zones

      94
    • Changing security zone’s status

      94
    • Enabling/disabling Stealth Mode

      95
  • Changing the Firewall mode

    95
  • Intrusion Detection System

    96
  • Network Monitor

    96
  • Types of network attacks

    96
  • Anti-Hacker statistics

    98
• Anti-Spam

  100
  • Component operation algorithm

    101
  • Training Anti-Spam

    102
    • Training using the Training Wizard

      103
    • Training using outgoing email messages

      104
    • Training using email client

      104
    • Training with reports

      105
  • Changing the Sensitivity Level

    105
  • Filtering email messages at the server. Mail Dispatcher

    106
  • Excluding Microsoft Exchange Server messages from the scan

    107
  • Selecting the scan method

    107
  • Selecting the spam filtering technology

    108
  • Defining spam and potential spam factors

    108
  • Using additional spam filtering features

    109
  • Creating the list of allowed senders

    110
  • Creating the list of allowed phrases

    110
  • Import of allowed senders list

    111
  • Creating the list of blocked senders

    111
  • Creating the list of banned phrases

    112
  • Actions to be performed on spam

    113
    • Configuring spam processing in Microsoft Office Outlook

      113
    • Configuring spam processing in Microsoft Outlook Express (Windows Mail)

      115
    • Configuring spam processing in The Bat!

      115
  • Restoring default Anti-Spam settings

    116
  • Anti-Spam statistics

    116
• Access Control

  118
  • Device Control. Restricting the use of external devices

    118
  • Device Control. Disable autorun

    119
  • Access Control statistics

    119
• Scanning computer for viruses

  120
  • Starting the virus scan

    121
  • Creating a list of objects to scan

    122
  • Changing security level

    123
  • Changing actions to be performed on detected objects

    123
  • Changing the type of objects to scan

    124
  • Scan optimization

    125
  • Scan of compound files

    126
  • Scan technology

    126
  • Changing the scan method

    127
  • Computer performance during task execution

    127
  • Run mode: specifying an account

    128
  • Run mode: creating a schedule

    128
  • Features of scheduled task launch

    129
  • Virus scan statistics

    129
  • Assigning common scan settings for all tasks

    129
  • Restoring default scan settings

    130
• Updating the application

  131
  • Starting the update

    132
  • Rolling back the last update

    133
  • Selecting an update source

    133
  • Regional settings

    134
  • Using a proxy server

    134
  • Run mode: specifying an account

    135
  • Run mode: creating a schedule

    135
  • Changing the update task’s run mode

    136
  • Selecting objects to update

    136
  • Updating from a local folder

    137
  • Update statistics

    138
  • Possible problems during the update

    138
• Configuring application settings

  142
  • Protection

    144
    • Enabling / disabling computer protection

      144
    • Launching the application at the operating system startup

      145
    • Using advanced disinfection technology

      145
    • Selecting detectable threat categories

      146
    • Creating a trusted zone

      146
      • Creating an exclusion rule

        147
      • Additional exclusion settings

        148
      • Allowed file exclusion masks

        148
      • Allowed exclusion masks according to the Virus Encyclopedia

        149
      • Creating the list of trusted applications

        149
      • Exporting / importing trusted zone components

        150
    • Exporting / importing Kaspersky Anti-Virus settings

      150
    • Restoring the default settings

      151
  • File Anti-Virus

    151
  • Mail Anti-Virus

    152
  • Web Anti-Virus

    153
  • Proactive Defense

    153
  • Anti-Spy

    154
  • Anti-Hacker

    155
  • Anti-Spam

    156
  • Scan

    157
  • Update

    157
  • Options

    158
    • Application self-defense

      158
    • Restricting access to the application

      159
    • Using the application on a laptop

      159
    • Restricting the size of iSwift files

      160
    • Notifications about Kaspersky Anti-Virus events

      160
      • Selecting event type and way of sending notifications

        161
      • Configuring notification by email

        161
      • Configuring event log

        162
    • Active interface elements

      162
  • Reports and Storages

    162
    • Principles of handling reports

      163
    • Configuring reports

      164
    • Quarantine for potentially infected objects

      164
    • Actions on quarantined objects

      165
    • Backup copies of dangerous objects

      165
    • Working with backup copies

      165
    • Configuring quarantine and backup

      166
  • Network

    166
    • Creating a list of ports to be monitored

      166
    • Scanning encrypted connections

      167
    • Scanning encrypted connections in Mozilla Firefox

      168
    • Scanning encrypted connections in Opera

      169
• Rescue Disk

  170
  • Creating the Rescue Disk

    170
    • Step 1. Select Rescue Disk image source

      171
    • Step 2. Copying ISO image

      171
    • Step 3. ISO image update

      171
    • Step 4. Remote startup

      172
    • Step 5. Closing the Wizard

      172
  • Booting the computer using the Rescue Disk

    172
  • Working with Kaspersky Rescue Disk from the command prompt

    174
    • Virus scan

      174
    • Kaspersky Anti-Virus update

      176
    • Rolling back the last update

      176
    • Viewing Help

      177
• Validating Kaspersky Anti-Virus settings

  178
  • Test "virus" EICAR and its modifications

    178
  • Testing the HTTP traffic protection

    179
  • Testing the SMTP traffic protection

    180
  • Validating File Anti-Virus settings

    180
  • Validating virus scan task settings

    180
  • Validating Anti-Spam settings

    181
• Types of notifications

  182
  • Malicious object detected

    182
  • Object cannot be disinfected

    183
  • Special treatment required

    183
  • Suspicious object detected

    184
  • Dangerous object detected in traffic

    184
  • Dangerous activity detected in the system

    185
  • Invader detected

    185
  • Hidden process detected

    186
  • Attempt to access the system registry detected

    186
  • Attempt to redirect calling of system functions detected

    187
  • Network activity of an application detected

    187
  • Network activity of a modified executable file detected

    188
  • New network detected

    188
  • Phishing attack detected

    189
  • Autodial attempt detected

    189
  • Invalid certificate detected

    190
• Working with the application from the command line

  191
  • Viewing Help

    192
  • Virus scan

    192
  • Updating the application

    194
  • Rolling back the last update

    195
  • Starting / stopping a protection component or a task

    195
  • Statistics on a component's operation or a task

    197
  • Exporting protection settings

    197
  • Importing protection settings

    197
  • Activating the application

    198
  • Restoring a file from quarantine

    198
  • Closing the application

    198
  • Obtaining a trace file

    199
  • Return codes of the command line

    199
• Modifying, repairing, or removing the application

  200
  • Modifying, repairing, and removing the application using the Installation Wizard

    200
    • Step 1. Installation Welcome window

      200
    • Step 2. Selecting an operation

      201
    • Step 3. Completing application modification, repair, or removal

      201
  • Removing the application from the command prompt

    202
• Managing the application via Kaspersky Administration Kit

  203
  • Managing the application

    205
    • Starting and stopping the application

      206
    • Configuring application settings

      207
    • Configuring specific settings

      209
  • Managing tasks

    210
    • Starting and stopping tasks

      211
    • Creating tasks

      212
    • Local Task Wizard

      213
      • Step 1. Entering general data on the task

        213
      • Step 2. Selecting an application and task type

        213
      • Step 3. Configuring the selected task type

        213
      • Step 4. Configuring a schedule

        214
      • Step 5. Completing the task creation

        214
    • Configuring tasks

      214
  • Managing policies

    216
    • Creating policies

      216
    • Policy Creation Wizard

      217
      • Step 1. Entering general data on the policy

        217
      • Step 2. Selecting the policy status

        217
      • Step 3. Importing the application settings

        217
      • Step 4. Configuring the protection

        217
      • Step 5. Configuring password protection

        217
      • Step 6. Configuring the trusted zone

        217
      • Step 7. Configuring the interaction with the user

        218
      • Step 8. Completing the policy creation

        218
    • Configuring the policy

      219
• Using third-party code

  221
  • Boost-1.30.0 library

    223
  • LZMA SDK 4.40, 4.43 library

    223
  • OPENSSL-0.9.8D library

    223
  • Windows Template Library 7.5

    225
  • Windows Installer XML (WiX) toolset 2.0 library

    226
  • ZIP-2.31 library

    229
  • ZLIB-1.0.4, ZLIB-1.0.8, ZLIB-1.1.3, ZLIB-1.2.3 library

    230
  • UNZIP-5.51 library

    231
  • LIBPNG-1.0.1, LIBPNG-1.2.8, LIBPNG-1.2.12 library

    231
  • LIBJPEG-6B library

    233
  • LIBUNGIF-4.1.4 library

    235
  • PCRE-3.0 library

    235
  • REGEX-3.4A library

    236
  • MD5 MESSAGE-DIGEST ALGORITHM-REV. 2 library

    237
  • MD5 MESSAGE-DIGEST ALGORITHM-V. 18.11.2004 library

    237
  • INDEPENDENT IMPLEMENTATION OF MD5 (RFC 1321)-V. 04.11.1999 library

    237
  • CONVERSION ROUTINES BETWEEN UTF32, UTF-16, AND UTF-8-V. 02.11.2004 library

    237
  • COOL OWNER DRAWN MENUS-V. 2.4, 2.63 By Brent Corkum library

    238
  • FMT-2002 library

    238
  • EXPAT-1.95.2 library

    238
  • LIBNKFM-0.1 library

    239
  • PLATFORM INDEPENDENT IMAGE CLASS library

    239
  • NETWORK KANJI FILTER (PDS VERSION)-2.0.5 library

    240
  • DB-1.85 library

    240
  • LIBNET-1991, 1993 library

    240
  • GETOPT-1987, 1993, 1994 library

    241
  • MERGE-1992, 1993 library

    242
  • FLEX PARSER (FLEXLEXER)-V. 1993 library

    242
  • STRPTIME-1.0 library

    243
  • ENSURECLEANUP, SWMRG, LAYOUT-V. 2000 library

    243
  • OUTLOOK2K ADDIN-2002 library

    244
  • STDSTRING- V. 1999 library

    244
  • T-REX (TINY REGULAR EXPRESSION LIBRARY)- V. 2003-2006 library

    245
  • NTSERVICE- V. 1997 library

    245
  • SHA-1-1.2 library

    245
  • COCOA SAMPLE CODE- V. 18.07.2007 library

    246
  • PUTTY SOURCES-25.09.2008 library

    247
  • Other information

    247
• Glossary

  248
  • Active license

    248
  • Additional license

    248
  • Administration agent

    248
  • Archive

    248
  • Available updates

    248
  • Backup

    248
  • Backup copy

    248
  • Backup storage

    248
  • Black list of addresses

    248
  • Black list of key files

    248
  • Blocking the object

    248
  • Boot-virus

    248
  • Client

    249
  • Compressed file

    249
  • Content filtering databases

    249
  • Dangerous object

    249
  • Data folder

    249
  • Database updates

    249
  • Databases

    249
  • Deleting an object

    249
  • Disinfecting objects on restart

    249
  • Disk boot sector

    249
  • Event severity level

    250
  • Exclusion

    250
  • False alarm

    250
  • File mask

    250
  • Header

    250
  • Heuristic analyzer

    250
  • Host

    250
  • iChecker technology

    251
  • Incompatible application

    251
  • Infected object

    251
  • Interceptor

    251
  • Internet Protocol (IP)

    251
  • Kaspersky Anti-Virus Administrator

    251
  • Kaspersky Lab's update servers

    251
  • Key file

    251
  • License validity period

    252
  • Mail databases

    252
  • Maximum protection

    252
  • Message deletion

    252
  • Monitored object

    252
  • Moving objects to quarantine

    252
  • Network port

    252
  • Object disinfection

    252
  • Obscene message

    252
  • OLE object

    253
  • On-demand scan

    253
  • Potentially infectable object

    253
  • Potentially infected object

    253
  • Protection status

    253
  • Protocol

    253
  • Quarantine

    253
  • Real-time protection

    253
  • Recommended level

    253
  • Restoration

    253
  • Script

    253
  • Simple object

    254
  • Skipping objects

    254
  • SOCKS

    254
  • Spam

    254
  • Startup objects

    254
  • Storage scan

    254
  • Subnet mask

    254
  • Suspicious message

    254
  • Suspicious object

    254
  • Traffic scan

    254
  • Trusted process

    254
  • Unknown virus

    254
  • Update

    254
  • Update package

    255
  • Urgent updates

    255
  • Virus activity threshold

    255
  • Virus outbreak

    255
  • White list of addresses

    255
• Kaspersky Lab

  256
• License Agreement

  257
• Index

  262