Thank you for choosing our product. We hope that you will find this documentation useful and that it will provide answers
to most of your questions that may arise.
Warning! This document is the property of Kaspersky Lab ZAO (herein also referred to as Kaspersky Lab): all rights to
this document are reserved by the copyright laws of the Russian Federation, and by international treaties. Illegal
reproduction and distribution of this document or parts hereof will result in civil, administrative or criminal liability by
applicable law.
Any type of reproduction or distribution of any materials, including translations, is allowed only with the written permission
of Kaspersky Lab ZAO.
This document and related graphic images can be used exclusively for informational, non-commercial or personal use.
This document may be amended without additional notification. The latest version of this document can be found on the
Kaspersky Lab website, at http://www.kaspersky.com/docs.
Kaspersky Lab ZAO assumes no liability for the content, quality, relevance, or accuracy of any materials used in this
document for which the rights are held by third parties, or for any potential damages associated with the use of such
documents.
This document uses registered trademarks and service marks, which are the property of their respective owners.
KASPERSKY LAB END USER LICENSE AGREEMENT ............................................................................................ 10
ABOUT THIS GUIDE ................................................................................................................................................... 15
In this document ..................................................................................................................................................... 15
ADDITIONAL SOURCES OF INFORMATION ............................................................................................................. 18
Sources of information for independent research ................................................................................................... 18
Discussing Kaspersky Lab applications on the web forum ..................................................................................... 19
Contacting the Sales Department ........................................................................................................................... 19
Contacting the Documentation development group ................................................................................................ 19
What's new ................................................................................................ ................................ ............................. 20
Ensuring your computer protection ......................................................................................................................... 20
Distribution kit ......................................................................................................................................................... 22
Service for registered users ................................................................................................ .................................... 22
Hardware and software requirements ..................................................................................................................... 22
INSTALLING AND REMOVING THE APPLICATION .................................................................................................. 24
Standard installation procedure .............................................................................................................................. 24
Step 1. Finding a newer version of the application ............................................................................................ 25
Step 2. Making sure the system meets the installation requirements ............................................................... 25
Step 3. Select installation type .......................................................................................................................... 26
Step 4. Reviewing the license agreement ......................................................................................................... 26
Step 5. Kaspersky Security Network Data Collection Statement ...................................................................... 26
Step 6. Searching for incompatible applications ............................................................................................... 26
Step 7. Selecting the destination folder ............................................................................................................. 27
Getting started ........................................................................................................................................................ 34
U S E R G U I DE
4
Removing the application ....................................................................................................................................... 34
Step 1. Saving data for repeated use ................................................................................................................ 35
Step 2. Confirmation of application removal...................................................................................................... 35
Step 3. Removing the application. Completing removal .................................................................................... 35
MANAGING THE LICENSE ......................................................................................................................................... 36
About End User License Agreement ...................................................................................................................... 36
About license .......................................................................................................................................................... 36
About activation code ............................................................................................................................................. 37
Viewing license information .................................................................................................................................... 38
Notification area icon ................................................................ ................................................................ .............. 39
Context menu ......................................................................................................................................................... 40
Kaspersky Anti-Virus main window ......................................................................................................................... 41
Notification windows and pop-up messages ........................................................................................................... 43
STARTING AND STOPPING THE APPLICATION ...................................................................................................... 47
Enabling and disabling automatic launch ............................................................................................................... 47
Starting and stopping the application manually ...................................................................................................... 47
COMPUTER PROTECTION STATUS ......................................................................................................................... 48
Diagnostics and elimination of problems in your computer protection .................................................................... 48
Enabling and disabling protection ........................................................................................................................... 50
Pausing and resuming protection ........................................................................................................................... 51
How to activate the application ............................................................................................................................... 52
How to purchase or renew a license ....................................................................................................................... 53
What to do when the application's notifications appear .......................................................................................... 54
How to update application databases and modules ............................................................................................... 54
How to scan critical areas of your computer for viruses ......................................................................................... 55
How to scan a file, folder, disk, or another object for viruses .................................................................................. 56
How to perform full scan of your computer for viruses ............................................................................................ 58
Scanning computer for vulnerabilities ..................................................................................................................... 58
How to protect your personal data against theft ..................................................................................................... 59
Protection against phishing ............................................................................................................................... 60
What to do if you suspect an object of being infected with a virus .......................................................................... 61
What to do if you suspect your computer of being infected .................................................................................... 62
How to restore an object that has been deleted or disinfected by the application .................................................. 63
How to create and use Rescue Disk ....................................................................................................................... 64
Create Rescue Disk .......................................................................................................................................... 64
Starting the computer from the Rescue Disk..................................................................................................... 66
How to view the report on the application's operation ............................................................................................. 67
How to restore application default settings ............................................................................................................. 67
How to import the application settings to Kaspersky Anti-Virus installed on another computer .............................. 68
How to switch from Kaspersky Anti-Virus to Kaspersky Internet Security .............................................................. 69
Switching to the commercial version ................................................................................................................. 69
Temporarily switching to the trial version .......................................................................................................... 70
C O N T E N T
5
How to use Kaspersky Gadget ............................................................................................................................... 71
General protection settings ..................................................................................................................................... 74
Restricting access to Kaspersky Anti-Virus ....................................................................................................... 74
Changing and restoring security level ......................................................................................................... 77
Creating the scan startup schedule ............................................................................................................. 77
Creating a list of objects to scan.................................................................................................................. 78
Selecting the scan method .......................................................................................................................... 78
Selecting the scan technology ..................................................................................................................... 79
Changing actions to be performed on detected objects .............................................................................. 79
Running scan under a different user account .............................................................................................. 79
Changing the type of objects to scan .......................................................................................................... 80
Scan of compound files ............................................................................................................................... 80
Selecting an update source............................................................................................................................... 84
Selecting the update server region .............................................................................................................. 84
Updating the application from a shared folder ............................................................................................. 85
Creating the update startup schedule ............................................................................................................... 85
Rolling back the last update .............................................................................................................................. 86
Scanning Quarantine after update .................................................................................................................... 86
Using the proxy server ................................................................ ...................................................................... 87
Running updates under a different user account .............................................................................................. 87
Using heuristic analysis .................................................................................................................................... 91
Selecting the scan technology .......................................................................................................................... 91
Changing actions to be performed on detected objects .................................................................................... 91
Scan of compound files ..................................................................................................................................... 92
Mail Anti-Virus ........................................................................................................................................................ 93
Enabling and disabling Mail Anti-Virus .............................................................................................................. 94
Creating a protection scope .............................................................................................................................. 95
Changing and restoring security level ............................................................................................................... 95
Using heuristic analysis .................................................................................................................................... 96
Changing actions to be performed on detected objects .................................................................................... 96
Scan of compound files ..................................................................................................................................... 97
U S E R G U I DE
6
Email scanning in Microsoft Office Outlook ....................................................................................................... 97
Email scanning in The Bat! ............................................................................................................................... 97
Web Anti-Virus ........................................................................................................................................................ 98
Enabling and disabling Web Anti-Virus ................................................................................................ ........... 100
Selecting the Web Anti-Virus security level ..................................................................................................... 101
Changing actions to be performed on dangerous objects ............................................................................... 101
Checking URLs using the databases of suspicious and phishing addresses .................................................. 101
Using heuristic analysis .................................................................................................................................. 102
Creating a list of trusted addresses ................................................................................................................. 104
Restoring Web Anti-Virus default settings ....................................................................................................... 105
IM Anti-Virus ......................................................................................................................................................... 105
Enabling and disabling IM Anti-Virus .............................................................................................................. 106
Creating a protection scope ............................................................................................................................ 106
Selecting the scan method .............................................................................................................................. 106
Enabling and disabling Proactive Defense ...................................................................................................... 108
Creating a group of trusted applications ......................................................................................................... 108
Using the dangerous activity list ...................................................................................................................... 108
Changing the dangerous activity monitoring rule ............................................................................................ 109
System Watcher ................................................................................................................................................... 109
Enabling and disabling System Watcher ......................................................................................................... 110
Using patterns of dangerous activity (BSS)..................................................................................................... 110
Rolling back a malicious program's actions .................................................................................................... 111
Scanning encrypted connections in Mozilla Firefox ................................................................................... 112
Scanning encrypted connections in Opera ................................................................................................ 113
Configuring the proxy server ........................................................................................................................... 114
Creating a list of monitored ports .................................................................................................................... 114
Trusted zone ......................................................................................................................................................... 115
Creating a list of trusted applications .............................................................................................................. 116
Creating the exclusion rules ............................................................................................................................ 116
Performance and compatibility with other applications ................................................................ ......................... 117
Enabling and disabling self-protection ............................................................................................................ 121
Protection against external control .................................................................................................................. 121
Quarantine and Backup ........................................................................................................................................ 121
Storing quarantine and backup objects ........................................................................................................... 122
Working with quarantined objects ................................................................................................................... 122
Additional tools for better protection of your computer ......................................................................................... 124
Creating a report for the selected component ................................................................................................. 129
Data filtering ................................................................................................................................ .................... 129
Saving a report to file ...................................................................................................................................... 131
Active interface elements ................................................................................................................................ 133
Test "virus" EICAR and its modifications .............................................................................................................. 137
Testing the HTTP traffic protection ....................................................................................................................... 138
Testing the SMTP traffic protection ...................................................................................................................... 139
CONTACTING THE TECHNICAL SUPPORT SERVICE ........................................................................................... 141
My Kaspersky Account ......................................................................................................................................... 141
Technical support by phone .................................................................................................................................. 142
Creating a system state report .............................................................................................................................. 142
Creating a trace file .............................................................................................................................................. 143
Sending data files ................................................................................................................................................. 143
Kaspersky Anti-Virus notification list ..................................................................................................................... 148
Notifications in any protection mode ............................................................................................................... 148
Special treatment required ........................................................................................................................ 148
New network detected ............................................................................................................................... 149
Malicious application or legal application that may be used by intruders detected .................................... 158
Suspicious / malicious link detected .......................................................................................................... 159
Dangerous object detected in traffic .......................................................................................................... 160
Attempt to access a phishing website detected ......................................................................................... 160
Attempt to access the system registry detected ........................................................................................ 160
Object cannot be disinfected ..................................................................................................................... 161
Hidden process detected ........................................................................................................................... 161
Working with the application from the command line ............................................................................................ 162
Activating the application ................................................................................................................................ 164
Starting the application ................................................................................................................................... 164
Stopping the application .................................................................................................................................. 164
Managing application components and tasks ................................................................................................. 165
Updating the application ................................................................................................................................. 169
Rolling back the last update ............................................................................................................................ 170
Creating a trace file ......................................................................................................................................... 171
Viewing Help ................................................................................................................................................... 171
Return codes of the command line ................................................................................................................. 172
KASPERSKY LAB ZAO ............................................................................................................................................. 182
INFORMATION ABOUT THIRD-PARTY CODE ........................................................................................................ 183
Program code ....................................................................................................................................................... 183
Development tools ................................................................................................................................................ 212
MS DDK 4.0, 2000 .......................................................................................................................................... 212
MS WDK 6000, 6001, 6002 ............................................................................................................................ 212
WINDOWS INSTALLER XML (WIX) TOOLSET 3.0 ....................................................................................... 212
Distributed program code ..................................................................................................................................... 216
Other information .................................................................................................................................................. 225
INDEX ........................................................................................................................................................................ 226
10
KASPERSKY LAB END USER LICENSE
AGREEMENT
IMPORTANT LEGAL NOTICE TO ALL USERS: CAREFULLY READ THE FOLLOWING LEGAL AGREEMENT BEFORE
YOU START USING THE SOFTWARE.
BY CLICKING THE ACCEPT BUTTON IN THE LICENSE AGREEMENT WINDOW OR BY ENTERING
CORRESPONDING SYMBOL(-S) YOU CONSENT TO BE BOUND BY THE TERMS AND CONDITIONS OF THIS
AGREEMENT. SUCH ACTION IS A SYMBOL OF YOUR SIGNATURE AND YOU ARE CONSENTING TO BE BOUND
BY AND ARE BECOMING A PARTY TO THIS AGREEMENT AND AGREE THAT THIS AGREEMENT IS
ENFORCEABLE LIKE ANY WRITTEN NEGOTIATED AGREEMENT SIGNED BY YOU. IF YOU DO NOT AGREE TO
ALL OF THE TERMS AND CONDITIONS OF THIS AGREEMENT, CANCEL THE INSTALLATION OF THE SOFTWARE
AND DO NOT INSTALL THE SOFTWARE.
AFTER CLICKING THE ACCEPT BUTTON IN THE LICENSE AGREEMENT WINDOW OR AFTER ENTERING
CORRESPONDING SYMBOL(-S) YOU HAVE THE RIGHT TO USE THE SOFTWARE IN ACCORDANCE WITH THE
TERMS AND CONDITIONS OF THIS AGREEMENT.
1. Definitions
1.1. Software means software including any Updates and related materials.
1.2. Rightholder (owner of all rights, whether exclusive or otherwise to the Software) means Kaspersky Lab ZAO, a
company incorporated according to the laws of the Russian Federation.
1.3. Computer(s) means hardware(s), including personal computers, laptops, workstations, personal digital
assistants, ‘smart phones’, hand-held devices, or other electronic devices for which the Software was designed
where the Software will be installed and/or used.
1.4. End User (You/Your) means individual(s) installing or using the Software on his or her own behalf or who is
legally using a copy of the Software; or, if the Software is being downloaded or installed on behalf of an
organization, such as an employer, "You" further means the organization for which the Software is downloaded
or installed and it is represented hereby that such organization has authorized the person accepting this
agreement to do so on its behalf. For purposes hereof the term "organization," without limitation, includes any
partnership, limited liability company, corporation, association, joint stock company, trust, joint venture, labor
organization, unincorporated organization, or governmental authority.
1.5. Partner(s) means organizations or individual(s), who distributes the Software based on an agreement and
license with the Rightholder.
1.6. Update(s) means all upgrades, revisions, patches, enhancements, fixes, modifications, copies, additions or
maintenance packs etc.
1.7. User Manual means user manual, administrator guide, reference book and related explanatory or other
materials.
2. Grant of License
2.1. The Rightholder hereby grants You a non-exclusive license to store, load, install, execute, and display (to "use")
the Software on a specified number of Computers in order to assist in protecting Your Computer on which the
Software is installed, from threats described in the User Manual, according to the all technical requirements
described in the User Manual and according to the terms and conditions of this Agreement (the "License") and
you accept this License:
Trial Version. If you have received, downloaded and/or installed a trial version of the Software and are hereby
granted an evaluation license for the Software, you may use the Software only for evaluation purposes and only
during the single applicable evaluation period, unless otherwise indicated, from the date of the initial installation.
Any use of the Software for other purposes or beyond the applicable evaluation period is strictly prohibited.
Multiple Environment Software; Multiple Language Software; Dual Media Software; Multiple Copies; Bundles. If
you use different versions of the Software or different language editions of the Software, if you receive the
Software on multiple media, if you otherwise receive multiple copies of the Software, or if you received the
Software bundled with other software, the total permitted number of your Computers on which all versions of the
Software are installed shall correspond to the number of licenses you have obtained from the Rightholder
provided that unless the licensing terms provide otherwise, each purchased license entitles you to install and
use the Software on such a number of Computer(s) as is specified in Clauses 2.2 and 2.3.
K A S P E R S K Y L AB E N D U S E R L I C E N S E A G R E E M E N T
11
2.2. If the Software was purchased on a physical medium You have the right to use the Software for protection of
such a number of Computer(s) as is specified on the Software package.
2.3. If the Software was purchased via the Internet You have the right to use the Software for protection of such a
number of Computers that was specified when You purchased the License to the Software.
2.4. You have the right to make a copy of the Software solely for back-up purposes and only to replace the legally
owned copy if such copy is lost, destroyed or becomes unusable. This back-up copy cannot be used for other
purposes and must be destroyed when you lose the right to use the Software or when Your license expires or is
terminated for any other reason according to the legislation in force in the country of your principal residence or
in the country where You are using the Software.
2.5. You can transfer the non-exclusive license to use the Software to other individuals or legal entities within the
scope of the license granted from the Rightholder to You provided that the recipient agrees to be bound by all
the terms and conditions of this Agreement and substitute you in full in the license granted from the Rightholder.
In case You fully transfer the rights granted from the Rightholder to use the Software You must destroy all
copies of the Software including the back-up copy. If You are a recipient of a transferred license You must
agree to abide by all the terms and conditions of this Agreement. If You do not agree to be bound by all the
terms and conditions of this Agreement, You may not install and/or use the Software. You also agree as the
recipient of a transferred license that You do not have any additional or better rights than what the original End
User who purchased the Software from the Rightholder, did.
2.6. From the time of the Software activation or after license key file installation (with the exception of a trial version
of the Software) You have the right to receive the following services for the defined period specified on the
Software package (if the Software was purchased on a physical medium) or specified during purchase (if the
Software was purchased via the Internet):
- Updates of the Software via the Internet when and as the Rightholder publishes them on its website or
through other online services. Аny Updates that you may receive become part of the Software and the
terms and conditions of this Agreement apply to them;
- Technical Support via the Internet and Technical Support telephone hotline.
3. Activation and Term
3.1. If You modify Your Computer or make changes to other vendors’ software installed on it, You may be required
by the Rightholder to repeat activation of the Software or license key file installation. The Rightholder reserves
the right to use any means and verification procedures to verify the validity of the License and/or legality of a
copy of the Software installed and/or used on Your Computer.
3.2. If the Software was purchased on a physical medium, the Software can be used, upon your acceptance of this
Agreement, for the period that is specified on the package commencing upon acceptance of this Agreement.
3.3. If the Software was purchased via the Internet, the Software can be used, upon your acceptance of this
Agreement, for the period that was specified during purchase.
3.4. You have the right to use a trial version of the Software as provided in Clause 2.1 without any charge for the
single applicable evaluation period (30 days) from the time of the Software activation according to this
Agreement provided that the trial version does not entitle You Updates and Technical support via the Internet
and Technical support telephone hotline.
3.5. Your License to Use the Software is limited to the period of time as specified in Clauses 3.2 or 3.3 (as
applicable) and the remaining period can be viewed via means described in User Manual.
3.6. If You have purchased the Software that is intended to be used on more than one Computer then Your License
to Use the Software is limited to the period of time starting from the date of activation of the Software or license
key file installation on the first Computer.
3.7. Without prejudice to any other remedy in law or in equity that the Rightholder may have, in the event of any
breach by You of any of the terms and conditions of this Agreement, the Rightholder shall at any time without
notice to You be entitled to terminate this License to use the Software without refunding the purchase price or
any part thereof.
3.8. You agree that in using the Software and in using any report or information derived as a result of using this
Software, you will comply with all applicable international, national, state, regional and local laws and
regulations, including, without limitation, privacy, copyright, export control and obscenity law.
3.9. Except as otherwise specifically provided herein, you may not transfer or assign any of the rights granted to you
under this Agreement or any of your obligations pursuant hereto.
4. Technical Support
The Technical Support described in Clause 2.6 of this Agreement is provided to You when the latest Update of the
Software is installed (except for a trial version of the Software).
Technical support service: http://support.kaspersky.com
5. Information Collection
5.1. Having agreed with the terms and conditions of this Agreement You consent to provide information to the
Rightholder about executable files and their checksums to improve Your security protection level.
U S E R G U I DE
12
5.2. In order to improve security awareness about new threats and their sources and in order to improve Your
security protection level the Rightholder, with your consent, that has been explicitly confirmed in the Kaspersky
Security Network Data Collection Statement, is expressly entitled to receives such information. You can
deactivate the Kaspersky Security Network service during installation. Also, You can activate and deactivate the
Kaspersky Security Network service at any time in the Software options page.
You further acknowledge and agree that any information gathered by Rightholder can be used to track and
publish reports on security risk trends in the Rightholder’s sole and exclusive discretion.
5.3. The Software does not process any personally identifiable data and does not combine the processing data with
any personal information.
5.4. If you do not wish for the information collected by the Software to be sent to the Rightholder, You should not
activate and/or de-activate the Kaspersky Security Network service.
6. Limitations
6.1. You shall not emulate, clone, rent, lend, lease, sell, modify, decompile, or reverse engineer the Software or
disassemble or create derivative works based on the Software or any portion thereof with the sole exception of
a non-waivable right granted to You by applicable legislation, and you shall not otherwise reduce any part of the
Software to human readable form or transfer the licensed Software, or any subset of the licensed Software, nor
permit any third party to do so, except to the extent the foregoing restriction is expressly prohibited by applicable
law. Neither Software’s binary code nor source may be used or reverse engineered to re-create the program
algorithm, which is proprietary. All rights not expressly granted herein are reserved by Rightholder and/or its
suppliers, as applicable. Any such unauthorized use of the Software shall result in immediate and automatic
termination of this Agreement and the License granted hereunder and may result in criminal and/or civil
prosecution against You.
6.2. You shall not transfer the rights to use the Software to any third party except as set forth in Clause 2.5 of this
Agreement.
6.3. You shall not provide the activation code and/or license key file to third parties or allow third parties access to
the activation code and/or license key which are deemed confidential data of Rightholder and you shall exercise
reasonable care in protecting the activation code and/or license key in confidence provided that you can transfer
the activation code and/or license key to third parties as set forth in Clause 2.5 of this Agreement.
6.4. You shall not rent, lease or lend the Software to any third party.
6.5. You shall not use the Software in the creation of data or software used for detection, blocking or treating threats
described in the User Manual.
6.6. The Rightholder has the right to block the key file or to terminate Your License to use the Software in the event
You breach any of the terms and conditions of this Agreement and without any refund to You.
6.7. If You are using the trial version of the Software You do not have the right to receive the Technical Support
specified in Clause 4 of this Agreement and You don’t have the right to transfer the license or the rights to use
the Software to any third party.
7. Limited Warranty and Disclaimer
7.1. The Rightholder guarantees that the Software will substantially perform according to the specifications and
descriptions set forth in the User Manual provided however that such limited warranty shall not apply to the
following: (w) Your Computer’s deficiencies and related infringement for which Rightholder’s expressly disclaims
any warranty responsibility; (x) malfunctions, defects, or failures resulting from misuse; abuse; accident; neglect;
improper installation, operation or maintenance; theft; vandalism; acts of God; acts of terrorism; power failures
or surges; casualty; alteration, non-permitted modification, or repairs by any party other than Rightholder; or any
other third parties’ or Your actions or causes beyond Rightholder’s reasonable control; (y) any defect not made
known by You to Rightholder as soon as practical after the defect first appears; and (z) incompatibility caused
by hardware and/or software components installed on Your Computer.
7.2. You acknowledge, accept and agree that no software is error free and You are advised to back-up the
Computer, with frequency and reliability suitable for You.
7.3. The Rightholder does not provide any guarantee that the Software will work correctly in case of violations of the
terms described in the User Manual or in this Agreement.
7.4. The Rightholder does not guarantee that the Software will work correctly if You do not regularly download
Updates specified in Clause 2.6 of this Agreement.
7.5. The Rightholder does not guarantee protection from the threats described in the User Manual after the
expiration of the period specified in Clauses 3.2 or 3.3 of this Agreement or after the License to use the
Software is terminated for any reason.
7.6. THE SOFTWARE IS PROVIDED "AS IS" AND THE RIGHTHOLDER MAKES NO REPRESENTATION AND
GIVES NO WARRANTY AS TO ITS USE OR PERFORMANCE. EXCEPT FOR ANY WARRANTY,
CONDITION, REPRESENTATION OR TERM THE EXTENT TO WHICH CANNOT BE EXCLUDED OR
LIMITED BY APPLICABLE LAW THE RIGHTHOLDER AND ITS PARTNERS MAKE NO WARRANTY,
CONDITION, REPRESENTATION, OR TERM (EXPRESSED OR IMPLIED, WHETHER BY STATUTE,
COMMON LAW, CUSTOM, USAGE OR OTHERWISE) AS TO ANY MATTER INCLUDING, WITHOUT
LIMITATION, NONINFRINGEMENT OF THIRD PARTY RIGHTS, MERCHANTABILITY, SATISFACTORY
K A S P E R S K Y L AB E N D U S E R L I C E N S E A G R E E M E N T
13
QUALITY, INTEGRATION, OR APPLICABILITY FOR A PARTICULAR PURPOSE. YOU ASSUME ALL
FAULTS, AND THE ENTIRE RISK AS TO PERFORMANCE AND RESPONSIBILITY FOR SELECTING THE
SOFTWARE TO ACHIEVE YOUR INTENDED RESULTS, AND FOR THE INSTALLATION OF, USE OF, AND
RESULTS OBTAINED FROM THE SOFTWARE. WITHOUT LIMITING THE FOREGOING PROVISIONS, THE
RIGHTHOLDER MAKES NO REPRESENTATION AND GIVES NO WARRANTY THAT THE SOFTWARE WILL
BE ERROR-FREE OR FREE FROM INTERRUPTIONS OR OTHER FAILURES OR THAT THE SOFTWARE
WILL MEET ANY OR ALL YOUR REQUIREMENTS WHETHER OR NOT DISCLOSED TO THE
RIGHTHOLDER .
8. Exclusion and Limitation of Liability
TO THE MAXIMUM EXTENT PERMITTED BY APPLICABLE LAW, IN NO EVENT SHALL THE RIGHTHOLDER OR ITS
PARTNERS BE LIABLE FOR ANY SPECIAL, INCIDENTAL, PUNITIVE, INDIRECT, OR CONSEQUENTIAL DAMAGES
WHATSOEVER (INCLUDING, BUT NOT LIMITED TO, DAMAGES FOR LOSS OF PROFITS OR CONFIDENTIAL OR
OTHER INFORMATION, FOR BUSINESS INTERRUPTION, FOR LOSS OF PRIVACY, FOR CORRUPTION, DAMAGE
AND LOSS OF DATA OR PROGRAMS, FOR FAILURE TO MEET ANY DUTY INCLUDING ANY STATUTORY DUTY,
DUTY OF GOOD FAITH OR DUTY OF REASONABLE CARE, FOR NEGLIGENCE, FOR ECONOMIC LOSS, AND FOR
ANY OTHER PECUNIARY OR OTHER LOSS WHATSOEVER) ARISING OUT OF OR IN ANY WAY RELATED TO THE
USE OF OR INABILITY TO USE THE SOFTWARE, THE PROVISION OF OR FAILURE TO PROVIDE SUPPORT OR
OTHER SERVICES, INFORMATON, SOFTWARE, AND RELATED CONTENT THROUGH THE SOFTWARE OR
OTHERWISE ARISING OUT OF THE USE OF THE SOFTWARE, OR OTHERWISE UNDER OR IN CONNECTION
WITH ANY PROVISION OF THIS AGREEMENT, OR ARISING OUT OF ANY BREACH OF CONTRACT OR ANY TORT
(INCLUDING NEGLIGENCE, MISREPRESENTATION, ANY STRICT LIABILITY OBLIGATION OR DUTY), OR ANY
BREACH OF STATUTORY DUTY, OR ANY BREACH OF WARRANTY OF THE RIGHTHOLDER OR ANY OF ITS
PARTNERS, EVEN IF THE RIGHTHOLDER OR ANY PARTNER HAS BEEN ADVISED OF THE POSSIBILITY OF
SUCH DAMAGES.
YOU AGREE THAT IN THE EVENT THE RIGHTHOLDER AND/OR ITS PARTNERS ARE FOUND LIABILE, THE
LIABILITY OF THE RIGHTHOLDER AND/OR ITS PARTNERS SHALL BE LIMITED BY THE COSTS OF THE
SOFTWARE. IN NO CASE SHALL THE LIABILITY OF THE RIGHTHOLDER AND/OR ITS PARTNERS EXCEED THE
FEES PAID FOR THE SOFTWARE TO THE RIGHTHOLDER OR THE PARTNER (AS MAY BE APPLICABLE).
NOTHING IN THIS AGREEMENT EXCLUDES OR LIMITS ANY CLAIM FOR DEATH AND PERSONAL INJURY.
FURTHER IN THE EVENT ANY DISCLAIMER, EXCLUSION OR LIMITATION IN THIS AGREEMENT CANNOT BE
EXLUDED OR LIMITED ACCORDING TO APPLICABLE LAW THEN ONLY SUCH DISCLAIMER, EXCLUSION OR
LIMITATION SHALL NOT APPLY TO YOU AND YOU CONTINUE TO BE BOUND BY ALL THE REMAINING
DISCLAIMERS, EXCLUSIONS AND LIMITATIONS.
9. GNU and Other Third Party Licenses
The Software may include some software programs that are licensed (or sublicensed) to the user under the GNU
General Public License (GPL) or other similar free software licenses which, among other rights, permit the user to copy,
modify and redistribute certain programs, or portions thereof, and have access to the source code ("Open Source
Software"). If such licenses require that for any software, which is distributed to someone in an executable binary format,
that the source code also be made available to those users, then the source code should be made available by sending
the request to source@kaspersky.com or the source code is supplied with the Software. If any Open Source Software
licenses require that the Rightholder provide rights to use, copy or modify an Open Source Software program that are
broader than the rights granted in this Agreement, then such rights shall take precedence over the rights and restrictions
herein.
10. Intellectual Property Ownership
10.1 You agree that the Software and the authorship, systems, ideas, methods of operation, documentation and
other information contained in the Software, are proprietary intellectual property and/or the valuable trade
secrets of the Rightholder or its partners and that the Rightholder and its partners, as applicable, are protected
by civil and criminal law, and by the law of copyright, trade secret, trademark and patent of the Russian
Federation, European Union and the United States, as well as other countries and international treaties. This
Agreement does not grant to You any rights to the intellectual property including any the Trademarks or Service
Marks of the Rightholder and/or its partners ("Trademarks"). You may use the Trademarks only insofar as to
identify printed output produced by the Software in accordance with accepted trademark practice, including
identification of the Trademark owner’s name. Such use of any Trademark does not give you any rights of
ownership in that Trademark. The Rightholder and/or its partners own and retain all right, title, and interest in
and to the Software, including without limitation any error corrections, enhancements, Updates or other
modifications to the Software, whether made by the Rightholder or any third party, and all copyrights, patents,
trade secret rights, trademarks, and other intellectual property rights therein. Your possession, installation or
use of the Software does not transfer to you any title to the intellectual property in the Software, and you will not
acquire any rights to the Software except as expressly set forth in this Agreement. All copies of the Software
U S E R G U I DE
14
made hereunder must contain the same proprietary notices that appear on and in the Software. Except as
stated herein, this Agreement does not grant you any intellectual property rights in the Software and you
acknowledge that the License, as further defined herein, granted under this Agreement only provides you with a
right of limited use under the terms and conditions of this Agreement. Rightholder reserves all rights not
expressly granted to you in this Agreement.
10.2 You acknowledge that the source code, activation code and/or license key file for the Software are proprietary
to the Rightholder and constitutes trade secrets of the Rightholder. You agree not to modify, adapt, translate,
reverse engineer, decompile, disassemble or otherwise attempt to discover the source code of the Software in
any way.
10.3 You agree not to modify or alter the Software in any way. You may not remove or alter any copyright notices or
other proprietary notices on any copies of the Software.
11. Governing Law; Arbitration
This Agreement will be governed by and construed in accordance with the laws of the Russian Federation without
reference to conflicts of law rules and principles. This Agreement shall not be governed by the United Nations
Convention on Contracts for the International Sale of Goods, the application of which is expressly excluded. Any dispute
arising out of the interpretation or application of the terms of this Agreement or any breach thereof shall, unless it is
settled by direct negotiation, be settled by in the Tribunal of International Commercial Arbitration at the Russian
Federation Chamber of Commerce and Industry in Moscow, the Russian Federation. Any award rendered by the
arbitrator shall be final and binding on the parties and any judgment on such arbitration award may be enforced in any
court of competent jurisdiction. Nothing in this Section 11 shall prevent a Party from seeking or obtaining equitable relief
from a court of competent jurisdiction, whether before, during or after arbitration proceedings.
12. Period for Bringing Actions
No action, regardless of form, arising out of the transactions under this Agreement, may be brought by either party hereto
more than one (1) year after the cause of action has occurred, or was discovered to have occurred, except that an action
for infringement of intellectual property rights may be brought within the maximum applicable statutory period.
13. Entire Agreement; Severability; No Waiver
This Agreement is the entire agreement between you and Rightholder and supersedes any other prior agreements,
proposals, communications or advertising, oral or written, with respect to the Software or to subject matter of this
Agreement. You acknowledge that you have read this Agreement, understand it and agree to be bound by its terms. If
any provision of this Agreement is found by a court of competent jurisdiction to be invalid, void, or unenforceable for any
reason, in whole or in part, such provision will be more narrowly construed so that it becomes legal and enforceable, and
the entire Agreement will not fail on account thereof and the balance of the Agreement will continue in full force and
effect to the maximum extent permitted by law or equity while preserving, to the fullest extent possible, its original intent.
No waiver of any provision or condition herein shall be valid unless in writing and signed by you and an authorized
representative of Rightholder provided that no waiver of any breach of any provisions of this Agreement will constitute a
waiver of any prior, concurrent or subsequent breach. Rightholder’s failure to insist upon or enforce strict performance of
any provision of this Agreement or any right shall not be construed as a waiver of any such provision or right.
14. Contact Information
Should you have any questions concerning this Agreement, or if you desire to contact the Rightholder for any reason,
please contact our Customer Service Department at:
In this document .............................................................................................................................................................. 15
This document is the Guide on installing, configuring and operating Kaspersky Anti-Virus 2011 application (hereinafter
referred to as Kaspersky Anti-Virus). The document is designed for a wide audience. Users of the application should be
able to operate a personal computer at a basic level: to be familiar with the Microsoft Windows operating system
interface and navigation within it, and to know how to use popular email and Internet programs, such as Microsoft Office
Outlook and Microsoft Internet Explorer.
The aim of the document:
to help users to install the application on the computer on their own, and activate and configure it with regard to
user's required tasks;
to provide a readily available source of information on application related issues;
to provide alternative sources of information about the application and the means of getting technical support.
IN THIS DOCUMENT
This document contains the following sections:
Additional sources of information
This section contains a description of the data on the sources of additional information regarding the application and an
Internet-resource where you can discuss the application, share ideas, ask questions and receive answers.
Kaspersky Anti-Virus 2011
This section describes the application's new features, and gives brief information about its individual components and
basic functions. It reveals the function of each part of the package supplied and a range of services available to
registered users of the application. The section contains hardware and software requirements which the computer should
meet to have Kaspersky Anti-Virus installed on it.
Installing and removing the application
This section contains instructions that help you install the application on your computer or update the previous version.
This section also describes the application's uninstall procedure.
Managing the license
This section contains information regarding the basic concepts used in the context of the application licensing. In this
section, you will also learn about the automatic renewal of the license and where to view information regarding the
current license.
U S E R G U I DE
16
Application interface
This section contains a description of the basic GUI components of the application: icon and context menu, main
application window, settings window, and notification windows.
Starting and stopping the application
This section contains information regarding the application's startup and shutdown.
Computer protection status
This section contains information about how to find out whether your computer is currently protected, or if its security is
under threat, as well as how to eliminate emerging threats. In this section, you also can find information about enabling,
disabling, and pausing protection when working with Kaspersky Anti-Virus.
Solving typical tasks
This section contains instructions on the basic tasks encountered by most users when working with the application.
Advanced application settings
This section provides detailed information about each application component and describes the operation and
configuration algorithms for each component.
Checking the consistency of the application settings
This section contains recommendations in how to check if the application components run correctly.
Contacting the Technical Support Service
This section contains recommendations with respect for making contact with Kaspersky Lab from My Kaspersky Account
on the Technical Support Service website and by phone.
Appendix
This section includes reference information which complements the document text.
Glossary
This section contains the list of terms used in the document and their definitions.
A B O U T T H I S G U I D E
17
SAMPLE TEXT
DOCUMENT CONVENTIONS DESCRIPTION
Note that...
Warnings are highlighted in red and enclosed in frames. Warnings contain
important information, for example, related to computer operations critical to its
safety.
It is recommended to use...
Notes are enclosed in frames. Notes contain additional and reference
information.
Example:
...
Examples are given by section, on a yellow background, and under the heading
"Example".
Update means...
New terms are marked by italics.
ALT+F4
Names of keyboard keys appear in a bold typeface and are capitalized.
Names of the keys followed by a "plus" sign indicate the use of a key
combination.
Enable
Names of interface elements, for example, input fields, menu commands,
buttons, etc., are marked in a bold typeface.
To configure a task schedule:
Instructions' introductory phrases are in italics.
help
Texts in the command line or texts of messages displayed on the screen have a
special font.
<IP address of your computer>
Variables are enclosed in angle brackets. The corresponding values are placed
in each case instead of variables, angle brackets are omitted.
DOCUMENT CONVENTIONS
Document conventions used in this guide are described in the table below.
Table 1. Document conventions
18
ADDITIONAL SOURCES OF INFORMATION
IN THIS SECTION:
Sources of information for independent research ............................................................................................................ 18
Discussing Kaspersky Lab applications on the web forum .............................................................................................. 19
Contacting the Sales Department ................................................................................................................................... 19
Contacting the Documentation development group ........................................................................................................ 19
If you have any questions regarding choosing, purchasing, installing or using Kaspersky Anti-Virus, various sources of
information are available at your convenience. You can choose the most suitable information source, depending on the
question level of importance and urgency.
SOURCES OF INFORMATION FOR INDEPENDENT RESEARCH
Kaspersky Lab provides the following sources of information about the application:
application page on the Kaspersky Lab website;
application page on the Technical Support Service website (in the Knowledge Base);
FastTrack Support service page;
help system.
Application page on the Kaspersky Lab website
This page (http://www.kaspersky.com/kaspersky_anti-virus) provides you with general information on the
application, its features and options.
Application page on the Technical Support Service website (Knowledge Base)
On this page (http://support.kaspersky.com/kav2011) you will find the articles created by Technical Support Service
specialists.
These articles contain useful information, advice and FAQs on purchasing, installing and using the application. They
are sorted by subject, for example, Managing the product license, Configuring Update, or Eliminating operation
failures. The articles may provide answers to the questions that concern not only this application but other
Kaspersky Lab products as well. The articles may also contain news from the Technical Support Service.
FastTrack Support service
On this service page, you can find the database of FAQs with answers regarding the application's operation. To use
this service, you need an Internet connection.
To go to the service page, in the main application window, click the Support link and in the window that opens click
the FastTrack Support button.
Help system
The application installation package includes the full and context help file. It contains information about how to
manage computer protection (view protection status, scan various computer areas for viruses, and execute other
A D D I T I O N A L S O U R C E S O F I N F O R M A T I ON
19
tasks). The full help and context help file provides you with information about all of the application's, listing and
describing the settings and tasks related to each of them.
To open the help file, click the Help button in the required window, or press the F1 key.
DISCUSSING KASPERSKY LAB APPLICATIONS ON THE
WEB FORUM
If your question does not require an urgent answer, you can discuss it with Kaspersky Lab specialists and other users in
our forum at http://forum.kaspersky.com.
In this forum you can view existing topics, leave your comments, create new topics or use the search engine.
CONTACTING THE SALES DEPARTMENT
If you have any questions about selecting or purchasing Kaspersky Anti-Virus or extending your license, you can contact
the Sales Department http://www.kaspersky.com/contacts.
You can also send your questions to the Sales Department by email at sales@kaspersky.com.
CONTACTING THE DOCUMENTATION DEVELOPMENT
GROUP
If you have any questions regarding documentation, have found an error or you would like to leave feedback, you can
contact the Documentation development group. To contact the Documentation development group, send an email to
docfeedback@kaspersky.com. Please use "Kaspersky Help Feedback: Kaspersky Anti-Virus" as the subject of your
message.
20
KASPERSKY ANTI-VIRUS 2011
IN THIS SECTION:
What's new ...................................................................................................................................................................... 20
Ensuring your computer protection ................................................................................................................................. 20
Distribution kit .................................................................................................................................................................. 22
Service for registered users ............................................................................................................................................ 22
Hardware and software requirements ............................................................................................................................. 22
This section describes the application's new features, and gives brief information about its individual components and
basic functions. It reveals the function of each part of the package supplied and a range of services available to
registered users of the application. The section contains hardware and software requirements which the computer should
meet to have Kaspersky Anti-Virus installed on it.
WHAT'S NEW
The following innovations have been introduced in Kaspersky Anti-Virus:
New protection component of the System Monitor (see page 109) provides monitoring of applications activity in
the system and provides detailed information to other protection components. Due to the recoverable history of
the applications' activity, the component can roll back the results of a malicious application's actions when such
malicious activity is detected by various protection components.
With the help of the Idle Scan (see page 118) module the computer may be scanned for viruses while you are
not working on it, then scanning will stop when you return to work. This allows you to perform a scan regularly
and at the same time prevents a reduction in the computer running speed when you need it.
When Kaspersky Anti-Virus is installed on your computer, you can temporarily switch to Kaspersky Internet
Security to assess its features. You can also purchase a license. You will not have to install Kaspersky Internet
Security apart from Kaspersky Anti-Virus.
When using Kaspersky Anti-Virus on a computer running under Microsoft Windows Vista or Microsoft
Windows 7, you can also use the Kaspersky Gadget (hereinafter gadget). Kaspersky Gadget is designed for
quick access to the main features of the application: protection status indication, virus scan of objects,
application operation reports, etc.
ENSURING YOUR COMPUTER PROTECTION
Kaspersky Anti-Virus provides comprehensive protection of your computer against known and unknown threats, network
and intruder attacks, spam and other unwanted information.
Every type of threat is handled by an individual protection component (see the description of components in this section).
Components can be enabled or disabled independently of one another and configured accordingly.
In addition to the constant protection provided by the security components, we recommend that you regularly scan your
computer for viruses. This is necessary in order to rule out the possibility of spreading malicious programs that have not
been discovered by protection components, for example, because of a low security level set, or for other reasons.
K A S P E R S K Y A N TI -V I R U S 20 1 1
21
To keep Kaspersky Anti-Virus up-to-date, you should update the databases and application modules used by the
application. The application is updated automatically by default. However, you can always update the databases and
software modules manually, if necessary.
Certain specific tasks that need to be performed occasionally can be performed with the help of advanced tools and
wizards (see section "Additional tools for better protection of your computer" on page 124), such as configuring Microsoft
Internet Explorer or erasing the traces of user activity in the system.
Protection components
The following protection components provide protection for your computer in real time:
File Anti-Virus
File Anti-Virus prevents infection of the computer's file system. The component starts upon startup of the operating
system, continuously remains in the computer's RAM, and scans all files being opened, saved, or launched on your
computer and all connected drives. Kaspersky Anti-Virus intercepts each attempt to access a file and scans the file
for known viruses. The file can only be processed further if the file is not infected or is successfully treated by the
application. If a file cannot be disinfected for any reason, it will be deleted. A copy of the file will be saved in Backup,
or moved to Quarantine.
Mail Anti-Virus
Mail Anti-Virus scans incoming and outgoing email messages on your computer. The email is available to the
addressee only if it does not contain dangerous objects.
Web Anti-Virus
Web Anti-Virus intercepts and blocks scripts on websites if they pose a threat. All web traffic is also subject to a
thorough monitoring. Additionally, the component blocks access to malicious websites.
IM Anti-Virus
IM Anti-Virus ensures the safe use of instant messengers. The component protects information that comes to your
computer via IM protocols. IM Anti-Virus ensures safe operation of various applications for instant messaging.
Proactive Defense
Proactive Defense allows detection of a new malicious program before it can perform its malicious activity. The
component's operation is based on monitoring and analyzing the behavior of all applications installed on your
computer. Depending on the actions being performed, Kaspersky Anti-Virus makes a decision whether an
application is potentially dangerous or not. So your computer is protected not only from known viruses, but also from
new ones that have not yet been discovered.
Anti-Phishing
A component integrated in Web Anti-Virus and IM Anti-Virus, which allows checking web addresses if they are
included in the list of phishing and suspicious web addresses.
There are three groups of objects protected by the application components:
Files, identity data, user names and passwords, information about bank cards, etc. These files are protected by
File Anti-Virus and Proactive Defense.
Applications installed on your computer and operating system objects. These files are protected by Mail Anti-
Virus, Web Anti-Virus, IM Anti-Virus, and Proactive Defense.
Online activity: using e-payment systems, email protection against spam, viruses etc. These files are protected
by Mail Anti-Virus, Web Anti-Virus, IM Anti-Virus, and Anti-Phishing.
Grouping of components depending on the objects that they protect is graphically illustrated in the Protection Center
section of the main application window (see section "Kaspersky Anti-Virus main window" on page 41).
U S E R G U I DE
22
DISTRIBUTION KIT
You can purchase the boxed version of Kaspersky Anti-Virus from our resellers, or purchase it online from Internet
shops, such as the eStore section of http://www.kaspersky.com.
If you buy the boxed version of the program, the package will include:
A sealed envelope with the installation CD containing the program files and documentation in PDF format.
Brief User Guide with an activation code.
License Agreement (depending on the region).
Read the EULA through carefully (see section "About End User License Agreement" on page 36)!
If you buy Kaspersky Anti-Virus from eStore, you will download the product from the Kaspersky Lab website; the present
User Guide is included with the installation package. You will be sent an activation code by email after your payment has
been received.
SERVICE FOR REGISTERED USERS
Kaspersky Lab offers legal users a set of services that allow increased efficiency of the application use.
When you purchase the license, you become a registered user, which entitles you to benefit from the following services:
hourly updated application database and new product versions;
advice on how to install, configure, and use the product - by phone or in the Personal Cabinet;
notification of new software products released by Kaspersky Lab and new viruses emerging all over the world.
This service is provided to users who have subscribed to Kaspersky Lab's news delivery on the Technical
Support Service website (http://support.kaspersky.com/subscribe).
Advice on issues related to the functioning and use of operating systems, third-party software, and various technologies
are not provided.
HARDWARE AND SOFTWARE REQUIREMENTS
For a proper functioning of Kaspersky Anti-Virus, a computer should meet certain requirements.
General requirements:
480 MB of free disk space.
CD / DVD-ROM (to install Kaspersky Anti-Virus from the installation CD).
Internet connection (to update databases and application modules).
Microsoft Internet Explorer 6.0 or higher.
Microsoft Windows Installer 2.0.
K A S P E R S K Y A N TI -V I R U S 20 1 1
23
Requirements for Microsoft Windows XP Home Edition (Service Pack 2 or higher), Microsoft Windows XP Professional
(Service Pack 2 or higher), Microsoft Windows XP Professional x64 Edition (Service Pack 2 or higher):
Intel Pentium 800 MHz 32-bit (x86) / 64-bit (x64) processor or higher (or a compatible equivalent);
512 MB free RAM.
Requirements for Microsoft Windows Vista Home Basic, Microsoft Windows Vista Home Premium, Microsoft Windows
Vista Business, Microsoft Windows Vista Enterprise, Microsoft Windows Vista Ultimate, Microsoft Windows 7 Starter,
Microsoft Windows 7 Home Basic, Microsoft Windows 7 Home Premium, Microsoft Windows 7 Professional, Microsoft
Windows 7 Ultimate:
Intel Pentium 1 GHz 32-bit (x86) / 64-bit (x64) processor or higher (or a compatible equivalent);
1GB free RAM (32-bit); 2 GB free RAM (64-bit).
Requirements for netbooks:
Intel Atom 1.33 MHz (Z520) processor or a compatible equivalent.
Intel GMA950 video card with video RAM of more than 64 MB (or a compatible equivalent).
Screen size not less than 10.1".
24
INSTALLING AND REMOVING THE
IN THIS SECTION:
Standard installation procedure ....................................................................................................................................... 24
Updating the previous version of Kaspersky Anti-Virus ................................................................................................... 29
Getting started ................................................................................................................................................................. 34
Removing the application ................................................................................................................................................ 34
APPLICATION
This section contains instructions that help you install the application on your computer or update the previous version.
This section also describes the application's uninstall procedure.
STANDARD INSTALLATION PROCEDURE
Kaspersky Anti-Virus installation is performed on your computer in interactive mode using the Installation Wizard.
The Wizard consists of a series of screens (steps) navigated using the Back and Next buttons. To close the Wizard once
it has completed its task, click the Finish button. To stop the Wizard at any stage, click the Cancel button. When
Kaspersky Anti-Virus is installed on your computer, you can temporarily switch to Kaspersky Internet Security to assess
its features. You can also purchase a license for further use of the application. You will not have to install Kaspersky
Internet Security apart from Kaspersky Anti-Virus.
If the application will be used to protect more than one computer, it should be installed on all computers in the same way.
Note that in this case, according to the license agreement, the license term begins from the date of the first activation.
To install Kaspersky Anti-Virus on your computer,
run the setup file (a file with the *.exe extension) from the CD with the product.
The process of installing Kaspersky Anti-Virus from an installation package downloaded from the Internet is identical to
that from the installation CD.
I N S T A L L I N G A N D R E M O V I N G T H E A P P L I C A T I O N
25
IN THIS SECTION:
Step 1. Finding a newer version of the application .......................................................................................................... 25
Step 2. Making sure the system meets the installation requirements .............................................................................. 25
Step 3. Select installation type ........................................................................................................................................ 26
Step 4. Reviewing the license agreement ....................................................................................................................... 26
Step 5. Kaspersky Security Network Data Collection Statement ..................................................................................... 26
Step 6. Searching for incompatible applications .............................................................................................................. 26
Step 7. Selecting the destination folder ........................................................................................................................... 27
Step 10. Activating the application .................................................................................................................................. 28
Step 11. Registering a user ................................ ................................ ............................................................................. 28
Step 12. Completing the activation .................................................................................................................................. 29
Before setup, the installer checks Kaspersky Lab update servers for a newer version of Kaspersky Anti-Virus.
If it does not find a newer product version on the Kaspersky Lab update servers, the Setup Wizard for the current version
will be started.
If the update servers offer a newer version of Kaspersky Anti-Virus, you will see a prompt to download and install it on
the computer. It is recommended that you install the new version of the application, because newer versions include
more enhancements that allow you to ensure a more reliable protection of your computer. If you cancel the new version
download, the Setup Wizard for the current version will be started. If you decide to install the newer version, product
distribution files will be downloaded to your computer and the Setup Wizard for that new version will be started
automatically. For a further description of the installation procedure for the newer version, please refer to its
corresponding documentation.
STEP 2.MAKING SURE THE SYSTEM MEETS THE INSTALLATION
REQUIREMENTS
Before installing Kaspersky Anti-Virus on your computer, the installer checks the operating system and service packs to
make sure they meet the software requirements for product installation (see section "Hardware and software
requirements" on page 22). In addition, the installer checks the presence of required software and the credentials
necessary to install applications. If any of the above-listed requirements is not met, the corresponding notification will be
displayed on the screen.
If the computer meets all the requirements, the Wizard searches for Kaspersky Lab applications, which, when run
together with Kaspersky Anti-Virus, may result in conflicts. If such applications are found, you are asked to remove them
manually.
U S E R G U I DE
26
If an earlier version of Kaspersky Anti-Virus or Kaspersky Internet Security is found, all data that can be used by
Kaspersky Anti-Virus 2011 (activation information, application settings, etc.) will be saved and used when installing the
new application while the one installed earlier will be automatically removed.
STEP 3.SELECT INSTALLATION TYPE
At this stage, you can select the most suitable way of installing Kaspersky Anti-Virus:
Standard installation. If you choose this option (the Change installation settings box is unchecked), the
application will be fully installed on your computer with protection settings recommended by Kaspersky Lab
experts.
Custom installation. In this case (the Change installation settings box is checked) you will be asked to specify
the destination folder to which the application will be installed (see section "Step 7. Selecting the destination
folder" on page 27), and disable the installation process protection, if required (see section "Step 8. Preparing
installation" on page 27).
To proceed with the installation, click the Next button.
STEP 4.REVIEWING THE LICENSE AGREEMENT
At this stage, you should review the license agreement made between you and Kaspersky Lab.
Read the agreement carefully and give your consent by clicking the I agree button. The installation will continue.
If you cannot accept the license agreement, cancel the application installation by clicking the Cancel button.
STEP 5.KASPERSKY SECURITY NETWORK DATA COLLECTION
STATEMENT
At this stage, you will be invited to participate in the Kaspersky Security Network. Participation in the program involves
sending information about new threats detected on your computer, running applications, downloaded signed applications
to Kaspersky Lab and your system information. We guarantee that none of your personal data will be sent.
Review the Kaspersky Security Network Data Collection Statement. To read the complete version of the Statement, click
the Full KSN agreement button. If you agree with all terms of the Statement, check the I accept the terms of participation in Kaspersky Security Network box in the Wizard window.
Click the Next button when carrying out the custom installation (see section "Step 3. Select installation type" on
page 26). When performing the standard installation, click the Install button. The installation will continue.
STEP 6.SEARCHING FOR INCOMPATIBLE APPLICATIONS
At this step, the applications checks if any applications incompatible with Kaspersky Anti-Virus are installed on your
computer.
If no such applications are found, the Wizard automatically proceeds to the next step.
If any incompatible applications are detected, they are displayed in a list on the screen, and you are offered to remove
them. Applications that Kaspersky Anti-Virus cannot remove automatically should be removed manually. While removing
incompatible applications, you will need to reboot your operating system, after which installation of Kaspersky Anti-Virus
will continue automatically.
To proceed with the installation, click the Next button.
I N S T A L L I N G A N D R E M O V I N G T H E A P P L I C A T I O N
27
STEP 7.SELECTING THE DESTINATION FOLDER
This step of the Setup Wizard is only available if the custom installation is selected (see section "Step 3. Select
installation type" on page 26). When carrying out the standard installation, this step is skipped and the application is
installed to the default folder.
At this stage, you are offered to select the folder into which Kaspersky Anti-Virus should be installed. The following path
is set by default:
<disk>\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2011 – for 32-bit systems;
<disk>\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 2011 – for 64-bit systems.
To install Kaspersky Anti-Virus into a different folder, specify the path to it in the entry field, or click the Browse button
and select a folder in the window that opens.
Keep in mind the following restrictions:
The application cannot be installed on network or removable drives, or on virtual drives (drives created using the
SUBST command).
We recommend that you avoid installing the application in a folder that already contain files or other folders,
because access to that folder for editing will soon be blocked.
The path to the installation folder cannot be longer than 160 characters or contain special characters
/, ?, :, *, ", >, < and |.
To find out if there is enough disk space on your computer to install the application, click the Volume button. In the
window that opens you can view the disk space information. To close the window, click OK.
To proceed with the installation, click the Next button in the Wizard window.
STEP 8.PREPARING INSTALLATION
This step of the Setup Wizard is only available if the custom installation is selected (see section "Step 3. Select
installation type" on page 26). In the case of the standard installation, this step is skipped.
Since your computer may be infected with malicious programs that may impact installation of Kaspersky Anti-Virus, the
installation process should be protected.
By default, installation process protection is enabled – the Protect the installation process box is checked in the
Wizard window.
You are advised to uncheck this box if the application cannot be installed (for example, when performing remote
installation using Windows Remote Desktop). Enabled protection may be the reason.
In this case, you should interrupt the installation, restart it, check the Change installation settings box at the Select
installation type step (see section "Step 3. Select installation type" on page 26), and, when reaching the Preparing
installation step, uncheck the Protect the installation process box.
To proceed with the installation, click the Install button.
When installing the application on a computer running under Microsoft Windows XP, active network connections are
terminated. The majority of terminated connections are restored after a pause.
U SER G U I D E
28
STEP 9.INSTALLING
Installation of the application can take some time. Wait for it to complete.
Once the installation is complete, the Wizard will automatically proceed to the next step.
If an installation error occurs, due to malicious programs that prevent anti-virus applications from being installed on your
computer, the Setup Wizard will prompt you to download Kaspersky Virus Removal Tool utility, a special tool for
neutralizing an infection.
If you agree to install the utility tool, the Setup Wizard downloads it from Kaspersky Lab servers, after which installation
of the utility starts automatically. If the Wizard cannot download the utility, you will be asked to download it on your own
by clicking the link provided.
After you finish working with the utility, you should delete it and restart installation of Kaspersky Anti-Virus.
STEP 10.ACTIVATING THE APPLICATION
Activation is the procedure of activating a license that allows you to use a fully functional version of the application until
the license expires.
You will need an Internet connection to activate the application.
You can select any of the following options when activating Kaspersky Anti-Virus:
Activate commercial version. Select this option and enter the activation code (see section "About activation
code" on page 37) if you have purchased a commercial version of the application.
If you enter the activation code for Kaspersky Internet Security in the entry field, upon the completion of the
activation a procedure will start that allows to switch to Kaspersky Internet Security.
Activate trial version. Use this activation option if you want to install the trial version of the application before
making the decision to purchase a commercial version. You will be able to use the fully-functional version of the
application for the duration of a term limited by the license for the trial version of the application. When the
license expires, it cannot be activated for a second time.
Activate later. If you choose this option, the Kaspersky Anti-Virus activation stage is skipped. The application
will be installed on your computer with the availability of all its functions, except updates. You will only be able to
update anti-virus databases and modules of Kaspersky Anti-Virus once after installation. The Activate later
option is only available at the first start of the Activation Wizard, immediately after installing the application.
STEP 11.REGISTERING A USER
This step is only available when activating the commercial version of the application. When activating the trial version,
this step is skipped.
You need to register in order to be able to contact Kaspersky Lab Technical Support Service in the future.
If you agree to register, specify your registration data in the corresponding fields and click the Next button.
I N S T A L L I N G A N D R E M O V I N G T H E A P P L I C A T I O N
29
STEP 12.COMPLETING THE ACTIVATION
The Wizard informs you that Kaspersky Anti-Virus has been successfully activated. Additionally, information about the
license is provided: license type (commercial or trial), date of expiry, and number of hosts for the license.
If you have activated the subscription, information about the subscription status (see section "Subscription statuses" on
page 146) is displayed instead of the license expiration date.
Click the Next button to proceed with the Wizard.
STEP 13.WIZARD COMPLETION
The last window of the Wizard informs you of the successful completion of the application installation. To run Kaspersky
Anti-Virus, make sure that the Run Kaspersky Anti-Virus box is checked, and click the Finish button.
In some cases, you may need to reboot your operating system. If the Run Kaspersky Anti-Virus box is checked, the
application will be automatically run after you reboot your operating system.
If you have unchecked the box before closing the Wizard, you should run the application manually (see section "Starting
and stopping the application manually" on page 47).
UPDATING THE PREVIOUS VERSION OF KASPERSKY ANTIVIRUS
If Kaspersky Anti-Virus 2010 is already installed on your computer, you should update the application to Kaspersky AntiVirus 2011. If you have an active license for Kaspersky Anti-Virus 2010, you will not have to activate the application: the
Installation Wizard will automatically receive the information about your license for Kaspersky Anti-Virus 2010 to use it
during the installation process.
Kaspersky Anti-Virus installation is performed on your computer in interactive mode using the Installation Wizard.
The Wizard consists of a series of screens (steps) navigated using the Back and Next buttons. To close the Wizard once
it has completed its task, click the Finish button. To stop the Wizard at any stage, click the Cancel button. When
Kaspersky Anti-Virus is installed on your computer, you can temporarily switch to Kaspersky Internet Security to assess
its features. You can also purchase a license for further use of the application. You will not have to install Kaspersky
Internet Security apart from Kaspersky Anti-Virus.
If the application will be used to protect more than one computer, it should be installed on all computers in the same way.
Note that in this case, according to the license agreement, the license term begins from the date of the first activation.
To install Kaspersky Anti-Virus on your computer,
run the setup file (a file with the *.exe extension) from the CD with the product.
The process of installing Kaspersky Anti-Virus from an installation package downloaded from the Internet is identical
to that from the installation CD.
U S E R G U I DE
30
IN THIS SECTION:
Step 1. Finding a newer version of the application .......................................................................................................... 30
Step 2. Making sure the system meets the installation requirements .............................................................................. 30
Step 3. Select installation type ........................................................................................................................................ 31
Step 4. Reviewing the license agreement ....................................................................................................................... 31
Step 5. Kaspersky Security Network Data Collection Statement ..................................................................................... 31
Step 6. Searching for incompatible applications .............................................................................................................. 31
Step 7. Selecting the destination folder ........................................................................................................................... 32
Before setup, the installer checks Kaspersky Lab update servers for a newer version of Kaspersky Anti-Virus.
If it does not find a newer product version on the Kaspersky Lab update servers, the Setup Wizard for the current version
will be started.
If the update servers offer a newer version of Kaspersky Anti-Virus, you will see a prompt to download and install it on
the computer. It is recommended that you install the new version of the application, because newer versions include
more enhancements that allow you to ensure a more reliable protection of your computer. If you cancel the new version
download, the Setup Wizard for the current version will be started. If you decide to install the newer version, product
distribution files will be downloaded to your computer and the Setup Wizard for that new version will be started
automatically. For a further description of the installation procedure for the newer version, please refer to its
corresponding documentation.
STEP 2.MAKING SURE THE SYSTEM MEETS THE INSTALLATION
REQUIREMENTS
Before installing Kaspersky Anti-Virus on your computer, the installer checks the operating system and service packs to
make sure they meet the software requirements for product installation (see section "Hardware and software
requirements" on page 22). In addition, the installer checks the presence of required software and the credentials
necessary to install applications. If any of the above-listed requirements is not met, the corresponding notification will be
displayed on the screen.
If the computer meets all the requirements, the Wizard searches for Kaspersky Lab applications, which, when run
together with Kaspersky Anti-Virus, may result in conflicts. If such applications are found, you are asked to remove them
manually.
If an earlier version of Kaspersky Anti-Virus or Kaspersky Internet Security is found, all data that can be used by
Kaspersky Anti-Virus 2011 (activation information, application settings, etc.) will be saved and used when installing the
new application while the one installed earlier will be automatically removed.
I N S T A L L I N G A N D R E M O V I N G T H E A P P L I C A T I O N
31
STEP 3.SELECT INSTALLATION TYPE
At this stage, you can select the most suitable way of installing Kaspersky Anti-Virus:
Standard installation. If you choose this option (the Change installation settings box is unchecked), the
application will be fully installed on your computer with protection settings recommended by Kaspersky Lab
experts.
Custom installation. In this case (the Change installation settings box is checked) you will be asked to specify
the destination folder to which the application will be installed (see section "Step 7. Selecting the destination
folder" on page 27), and disable the installation process protection, if required (see section "Step 8. Preparing
installation" on page 27).
To proceed with the installation, click the Next button.
STEP 4.REVIEWING THE LICENSE AGREEMENT
At this stage, you should review the license agreement made between you and Kaspersky Lab.
Read the agreement carefully and give your consent by clicking the I agree button. The installation will continue.
If you cannot accept the license agreement, cancel the application installation by clicking the Cancel button.
STEP 5.KASPERSKY SECURITY NETWORK DATA COLLECTION
STATEMENT
At this stage, you will be invited to participate in the Kaspersky Security Network. Participation in the program involves
sending information about new threats detected on your computer, running applications, downloaded signed applications
to Kaspersky Lab and your system information. We guarantee that none of your personal data will be sent.
Review the Kaspersky Security Network Data Collection Statement. To read the complete version of the Statement, click
the Full KSN agreement button. If you agree with all terms of the Statement, check the I accept the terms of participation in Kaspersky Security Network box in the Wizard window.
Click the Next button when carrying out the custom installation (see section "Step 3. Select installation type" on
page 26). When performing the standard installation, click the Install button. The installation will continue.
STEP 6.SEARCHING FOR INCOMPATIBLE APPLICATIONS
At this step, the applications checks if any applications incompatible with Kaspersky Anti-Virus are installed on your
computer.
If no such applications are found, the Wizard automatically proceeds to the next step.
If any incompatible applications are detected, they are displayed in a list on the screen, and you are offered to remove
them. Applications that Kaspersky Anti-Virus cannot remove automatically should be removed manually. While removing
incompatible applications, you will need to reboot your operating system, after which installation of Kaspersky Anti-Virus
will continue automatically.
To proceed with the installation, click the Next button.
U S E R G U I DE
32
STEP 7.SELECTING THE DESTINATION FOLDER
This step of the Setup Wizard is only available if the custom installation is selected (see section "Step 3. Select
installation type" on page 26). When carrying out the standard installation, this step is skipped and the application is
installed to the default folder.
At this stage, you are offered to select the folder into which Kaspersky Anti-Virus should be installed. The following path
is set by default:
<disk>\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2011 – for 32-bit systems;
<disk>\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 2011 – for 64-bit systems.
To install Kaspersky Anti-Virus into a different folder, specify the path to it in the entry field, or click the Browse button
and select a folder in the window that opens.
Keep in mind the following restrictions:
The application cannot be installed on network or removable drives, or on virtual drives (drives created using the
SUBST command).
We recommend that you avoid installing the application in a folder that already contain files or other folders,
because access to that folder for editing will soon be blocked.
The path to the installation folder cannot be longer than 160 characters or contain special characters
/, ?, :, *, ", >, < and |.
To find out if there is enough disk space on your computer to install the application, click the Volume button. In the
window that opens you can view the disk space information. To close the window, click OK.
To proceed with the installation, click the Next button in the Wizard window.
STEP 8.PREPARING INSTALLATION
This step of the Setup Wizard is only available if the custom installation is selected (see section "Step 3. Select
installation type" on page 26). In the case of the standard installation, this step is skipped.
Since your computer may be infected with malicious programs that may impact installation of Kaspersky Anti-Virus, the
installation process should be protected.
By default, installation process protection is enabled – the Protect the installation process box is checked in the
Wizard window.
You are advised to uncheck this box if the application cannot be installed (for example, when performing remote
installation using Windows Remote Desktop). Enabled protection may be the reason.
In this case, you should interrupt the installation, restart it, check the Change installation settings box at the Select
installation type step (see section "Step 3. Select installation type" on page 26), and, when reaching the Preparing
installation step, uncheck the Protect the installation process box.
To proceed with the installation, click the Install button.
When installing the application on a computer running under Microsoft Windows XP, active network connections are
terminated. The majority of terminated connections are restored after a pause.
I N S T A L L I N G A N D R E M O V I N G T H E A P P L I C A T I O N
33
STEP 9.INSTALLING
Installation of the application can take some time. Wait for it to complete.
Once the installation is complete, the Wizard will automatically proceed to the next step.
If an installation error occurs, due to malicious programs that prevent anti-virus applications from being installed on your
computer, the Setup Wizard will prompt you to download Kaspersky Virus Removal Tool utility, a special tool for
neutralizing an infection.
If you agree to install the utility tool, the Setup Wizard downloads it from Kaspersky Lab servers, after which installation
of the utility starts automatically. If the Wizard cannot download the utility, you will be asked to download it on your own
by clicking the link provided.
After you finish working with the utility, you should delete it and restart installation of Kaspersky Anti-Virus.
STEP 10.COMPLETING THE ACTIVATION
The Wizard informs you that Kaspersky Anti-Virus has been successfully activated. Additionally, information about the
license is provided: license type (commercial or trial), date of expiry, and number of hosts for the license.
If you have activated the subscription, information about the subscription status (see section "Subscription statuses" on
page 146) is displayed instead of the license expiration date.
Click the Next button to proceed with the Wizard.
STEP 11.WIZARD COMPLETION
The last window of the Wizard informs you of the successful completion of the application installation. To run Kaspersky
Anti-Virus, make sure that the Run Kaspersky Anti-Virus box is checked, and click the Finish button.
In some cases, you may need to reboot your operating system. If the Run Kaspersky Anti-Virus box is checked, the
application will be automatically run after you reboot your operating system.
If you have unchecked the box before closing the Wizard, you should run the application manually (see section "Starting
and stopping the application manually" on page 47).
NON-STANDARD INSTALLATION SCENARIOS
This section describes application installation scenarios which differ from those of standard installation or update from
the previous version.
Installing Kaspersky Anti-Virus with further activation using an activation code of Kaspersky Internet
Security
If, when installing Kaspersky Anti-Virus, at the Activating the application step, you enter an activation code of Kaspersky
Internet Security, the expansion procedure starts, which results in installing Kaspersky Internet Security on your
computer.
If, when installing Kaspersky Anti-Virus, at the Application activation step, you select Activate later and then activate the
application using an activation code of Kaspersky Internet Security, the expansion procedure also starts, which results in
installing Kaspersky Internet Security on your computer.
U S E R G U I DE
34
Installing Kaspersky Anti-Virus 2011 over Kaspersky Internet Security 2010
IN THIS SECTION:
Step 1. Saving data for repeated use .............................................................................................................................. 34
Step 2. Confirmation of application removal ................................ .................................................................................... 35
Step 3. Removing the application. Completing removal .................................................................................................. 35
If you run the installation of Kaspersky Anti-Virus 2011 on a computer on which Kaspersky Internet Security 2010 with an
active license is already installed, the Installation Wizard detects the information about the license and offers you to
select one of the following further actions:
Use the current license of Kaspersky Internet Security 2010. In this case, the expansion procedure starts, which
results in installing Kaspersky Internet Security 2011 on your computer. You will be able to use Kaspersky
Internet Security 2011 still the license for Kaspersky Internet Security 2010 remains valid.
Proceed with installation of Kaspersky Anti-Virus 2011. In this case, the installation procedure will be proceeded
with according to the standard scenario, starting from the Activating the application step.
GETTING STARTED
The application is ready to be used after installation. To ensure proper protection of your computer, we recommend
performing the following immediately after installation and configuration:
Update application databases (see section "How to update application databases and modules" on page 54).
Scan your computer for viruses (see section "How to perform full scan of your computer for viruses" on page 58)
and vulnerabilities (see section "Scanning computer for vulnerabilities" on page 58).
Check the protection status of your computer (on page 48) and eliminate protection problems if necessary (see
section "Diagnostics and elimination of problems in your computer protection" on page 48).
REMOVING THE APPLICATION
After Kaspersky Anti-Virus is uninstalled, your computer and personal data are unprotected.
You can uninstall Kaspersky Anti-Virus using the Installation Wizard.
To start the Wizard:
1. In the Start menu select Programs Kaspersky Anti-Virus 2011 Repair or Remove.
2. In the window that opens, click the Remove button.
I N S T A L L I N G A N D R E M O V I N G T H E A P P L I C A T I O N
35
STEP 1.SAVING DATA FOR REPEATED USE
At this point you can specify which of the data used by the application you want to retain for repeated use during the next
installation of the application (e.g., a newer version of the application).
By default, the application is completely removed from the computer.
To save data for repeated use, perform the following:
1. Select Save application objects.
2. Check the boxes opposite the data types you want to save:
Activation data – data that eliminates the need to activate the application in the future by automatically
using the current license as long as it does not expire by the time of the next installation.
Anti-Spam databases – databases containing signatures of spam messages downloaded and saved by
the application.
Backup and Quarantine files – files checked by the application and placed into backup storage or
quarantine.
Operational settingsof the application – values of the application settings selected during configuration.
iSwift and iChecker data – files which contain information about the objects that have already been
scanned for viruses.
Safe Run shared folder data – files saved by the application working in a safe environment in a special
folder that is also accessible in the normal environment.
STEP 2.CONFIRMATION OF APPLICATION REMOVAL
Since removing the application threatens the security of the computer and your personal data, you will be asked to
confirm your intention to remove the application. To do this, click the Remove button.
To stop removal of the application at any time, you can cancel this operation by clicking the Cancel button.
STEP 3.REMOVING THE APPLICATION.COMPLETING REMOVAL
At this step, the Wizard removes the application from your computer. Wait until removal is complete.
When removing the application, your operating system may require reboot. If you cancel immediate reboot, completion of
the removal procedure will be postponed until the operating system is rebooted, or the computer is turned off and then
restarted.
36
MANAGING THE LICENSE
IN THIS SECTION:
About End User License Agreement ................................................................ ............................................................... 36
About license ................................................................................................................................................................... 36
About activation code ...................................................................................................................................................... 37
Viewing license information ............................................................................................................................................. 37
This section contains information regarding the basic concepts used in the context of the application licensing. In this
section, you will also learn about the automatic renewal of the license and where to view information regarding the
current license.
ABOUT END USER LICENSE AGREEMENT
End User License Agreement – is an agreement between natural or legal person lawfully in possession of a copy of an
application. The EULA is included in each Kaspersky Lab application. It contains a detailed description of rights and
Kaspersky Anti-Virus usage restrictions.
According to the EULA, when you purchase and install a Kaspersky Lab application, you get an unlimited right to own its
copy.
ABOUT LICENSE
License is a right to use Kaspersky Anti-Virus and the related additional services offered by Kaspersky Lab or its
partners.
Each license is defined by its expiry date and a type.
License term – a period during which the additional services are offered:
technical support;
updating databases and application modules.
The services provided depend on the license type.
The following license types are provided:
Trial – a free license with a limited validity period, for example, 30 days, offered to get familiar with Kaspersky
Anti-Virus.
A trial license can only be used once and cannot be used after a commercial license!
A trial license is supplied with the trial version of the application. If you have a trial license, you can only contact
Technical Support Service if your question is about activating the product or purchasing a commercial license.
As soon as the trial license expires, all Kaspersky Anti-Virus features become disabled. To continue using the
application, you should activate it (see section "How to activate the application" on page 52).
M A N A G I N G T H E L I C E N S E
37
Commercial – a commercial license with limited validity period (for example, one year), offered at Kaspersky
Anti-Virus's purchase. Each license is assigned a number of hosts on which you can install Kaspersky AntiVirus with this license.
If a commercial license is activated, all application features and additional services are available.
As soon as a commercial license expires, Kaspersky Anti-Virus remains a full-featured application, but the antivirus databases are not updated. You can still scan your computer for viruses and use the protection
components, but only using the databases that you had when the license expired. Two weeks before the license
expiration date, the application will notify you of this event so you can renew the license in advance (see section
"How to purchase or renew a license" on page 53).
Commercial with an update subscription and commercial with an update and protection subscription – a paid
license with flexible management: you can suspend and resume the subscription, extend its validity period in the
automatic mode and cancel the subscription. A license with subscription is distributed by service providers. You
can manage the subscription from the user's Personal Cabinet on the service provider's website.
The validity period of a subscription can be limited (for example, to one year) or unlimited. If a subscription with
a limited validity period is activated, you should renew it on your own when it expires. A subscription with an
unlimited validity period is extended automatically subject to timely prepayment to the provider.
If the subscription term is limited, when it expires, you will be offered a grace period for subscription renewal,
during which the full functionality of the program will be maintained.
If the subscription is renewed, upon grace period expiration Kaspersky Anti-Virus ceases to update the
application databases (for license with update subscription) and stops performing computer protection or
executing scan tasks (for license with protection subscription).
When using the subscription, you will not be able to use another activation code to renew the license. This is
only possible after the subscription expiry date.
If already have an activated license with a limited term at the time of subscription activation, it is substituted with
the subscription license. To cancel the subscription, contact the service provider from whom you purchased
Kaspersky Anti-Virus.
Depending on the subscription provider, the set of available actions to take on the subscription (see section
"Subscription statuses" on page 146) may vary. Also, the grace period when subscription renewal is available,
is not provided by default.
ABOUT ACTIVATION CODE
Activation code is a code supplied with a Kaspersky Anti-Virus commercial license. This code is required for activation of
the application.
The activation code represents a sequence of Latin characters and digits separated by hyphens into four groups of five
symbols. For example, 11111-11111-11111-11111.
U SER G U I D E
38
VIEWING LICENSE INFORMATION
To view information about the active license:
1. Open the main application window.
2. Click the License button in the bottom part of the window to open the License management window.
In this window, you can start the application activation (see section "How to activate the application" on
page 52), purchase a new license, or renew your current one (see section "How to purchase or renew a license"
on page 53).
Figure 1. The License management window
39
APPLICATION INTERFACE
IN THIS SECTION:
Notification area icon ....................................................................................................................................................... 39
Context menu .................................................................................................................................................................. 40
Kaspersky Anti-Virus main window ................................................................................................................................. 41
Notification windows and pop-up messages ................................................................................................................... 43
Kaspersky Anti-Virus has a fairly simple and easy-to-use interface. This section discusses its basic features in detail.
Kaspersky Anti-Virus includes extension components (plug-ins) for Microsoft Office Outlook, Microsoft Outlook Express,
The Bat!, Thunderbird, Mozilla Firefox, Microsoft Internet Explorer and Microsoft Windows Explorer. The plug-ins expand
the functionality of the host applications, providing access to the configuration of product components within their
interface.
NOTIFICATION AREA ICON
Immediately after installing Kaspersky Anti-Virus, the application icon appears in the Microsoft Windows taskbar
notification area.
In the Microsoft Windows 7 operating system the application icon is hidden by default, but you can display it to access
the application more easily (see the operating system documentation).
The icon has the following basic purposes:
It is an indicator of the application's operation.
It provides access to the context menu, main application window and the news window.
Indication of the application activity
This icon serves as an indicator of the application's operation. It also indicates the protection status and shows a number
of basic functions currently being performed by the application:
– scanning an email message;
– scanning web traffic;
– updating databases and application modules;
– computer needs to be restarted to apply updates;
– a failure occurred in the operation of an application component.
U S E R G U I DE
40
The icon is animated by default: for example, during the email message scan, a tiny letter symbol blinks against the
application icon; when the update is in progress, you can see a revolving globe. You can deactivate animation (see
section "Active interface elements" on page 133).
When the animation is disabled, the icon can take the following form:
(colored symbol) – all or certain protection components are activated;
(black-and-white symbol) – all protection components are disabled.
Access to the context menu and application windows
You can use the icon to open the context menu (on page 40) and the main application window (see section "Kaspersky
Anti-Virus main window" on page 41).
To open the context menu,
hover the cursor over the icon and right-click the area.
To open the main application window,
hover the cursor over the icon and left-click the area.
If news from Kaspersky Lab is available, the icon appears in the Microsoft Windows taskbar notification area. Doubleclick this icon to open News Agent window (see section "News Agent" on page 133).
CONTEXT MENU
You can run basic protection tasks from the context menu.
The Kaspersky Anti-Virus menu contains the following items:
Update – runs the update of application databases and modules.
Virtual Keyboard – displays the Virtual Keyboard.
Kaspersky Anti-Virus – opens the main application window.
Pause protection / Resume protection – temporarily turns off / on the real-time protection components. This
menu item does not affect the application’s updates, or the execution of virus scans.
Settings – opens the application settings window.
About – opens a window containing information about the application.
A P P L I C A T I O N I N T E R F A C E
41
News – opens the news agent window (see section "News Agent" on page 133). This menu item is displayed if
there is unread news.
Exit – closes Kaspersky Anti-Virus (when this item is selected, the application is discarded from the computer’s
RAM).
Figure 2. Context menu
If a virus scan or update task is running at the moment that you open the context menu, its name as well as its progress
status (percentage complete) is displayed in the context menu. When you select a menu item with the name of a task,
you can switch to the main window with a report of current task run results.
To open the context menu,
hover over the application icon in the taskbar notification area with the cursor and right-click it with the mouse.
In the Microsoft Windows 7 operating system the application icon is hidden by default, but you can display it to access
the application more easily (see the operating system documentation).
KASPERSKY ANTI-VIRUS MAIN WINDOW
The main application window contains interface elements that provide access to all the main features of the application.
The main window can be divided into three parts:
The top part of the window contains the protection status indicator which informs you of your current computer
protection status.
Figure 3. Current computer protection status
There are three possible values of protection status: each of them is indicated with a certain color. Green
indicates that your computer’s protection is at the correct level, while yellow and red indicate that there are
various security threats. In addition to malicious programs, threats include obsolete application databases,
disabled protection components, minimum protection settings, etc.
Security threats must be eliminated as they appear (see section "Diagnostics and elimination of problems in
your computer protection" on page 48).
U S E R G U I DE
42
The left part of the window allows you to quickly switch to the main application features: enabling and disabling
protection components, running virus scan tasks, updating databases and program modules, etc.
Figure 4. Left part of the main window
The right part of the window contains information about the application function selected in the left part, and
allows configuration of its settings, provides tools for executing virus scan tasks, retrieving updates etc.
Figure 5. Right part of the main window
You can also use the following buttons and links:
Settings – to open the application settings window.
Quarantine – to start working with quarantined objects.
A P P L I C A T I O N I N T E R F A C E
43
Reports – switch to the application operation report in diagram format.
News – switch to viewing news in the News Agent window (see section "News Agent" on page 133). This link is
displayed after the application receives a piece of news.
Help – to view the Kaspersky Anti-Virus help system.
My Kaspersky Account – to enter the user's personal account on the Technical Support Service website (see
section "My Kaspersky Account" on page 141).
Support – to open the window containing information about the system and links to Kaspersky Lab information
resources (Technical Support Service website, forum).
You can change the appearance of Kaspersky Anti-Virus using alternate skins (see section "Application appearance" on
page 132).
To open the main application window, perform one of the following actions:
Roll the cursor over the application icon in the taskbar notification area and left-click it with the mouse.
In the Microsoft Windows 7 operating system the application icon is hidden by default, but you can display it to
access the application more easily (see the operating system documentation).
Select Kaspersky Anti-Virus from the context menu (see section "Context menu" on page 40).
Click the Kaspersky Anti-Virus icon in the middle part of Kaspersky Gadget (available only for Microsoft
Windows Vista and Microsoft Windows 7).
NOTIFICATION WINDOWS AND POP-UP MESSAGES
Kaspersky Anti-Virus notifies you of important events occurring during its operation, using notification windows and popup messages that appear over the application icon in the taskbar notification area.
U S E R G U I DE
44
Notification windows are displayed by Kaspersky Anti-Virus when various actions can be taken in connection with an
event: for example, if a malicious object is detected, you can block access to it, delete, or try to disinfect it. The
application offers you to select one of the available actions. A notification window only disappears from the screen if you
select one of the actions.
Figure 6. The Notifications window
Pop-up messages are displayed by Kaspersky Anti-Virus in order to inform you of events that do not require selection of
an action. Some pop-up messages contain links that you can use to take an action offered by the application: for
example, run the update of the databases, or initiate the activation of the application). Pop-up messages automatically
disappear from the screen soon after they appear.
Figure 7. Pop-up message
Depending on how critical the event is for computer security, you might receive the following types of notification:
Critical notifications – inform you of events of critical importance from the viewpoint of computer security: for
example, detection of a malicious object or dangerous activity in the system. Notification windows and pop-up
messages of this type are red-colored.
Important notifications – inform you of events which are potentially important from the viewpoint of computer
security: for example, detection of a potentially infected object or suspicious activity in the system. Notification
windows and pop-up messages of this type are yellow-colored.
Information notifications – inform you of events that are non-critical from the viewpoint of security. Notification
windows and pop-up messages of this type are green-colored.
A P P L I C A T I O N I N T E R F A C E
45
APPLICATION SETTINGS WINDOW
The Kaspersky Anti-Virus settings window is designed for configuring the entire application, individual protection
components, scan and update tasks, and for running other advanced configuration tasks (see section "Advanced
application settings" on page 73).
Figure 8. Application settings window
The application settings window consists of two parts:
in the left part of the window you can choose the application component, task or another item that should be
configured;
the right part of the window contains the controls that you can use to configure the item selected in the left part
of the window.
The components, tasks and other parts in the left part of the window are combined in the following sections:
– Protection Center;
– Scan;
– Update Center;
– Advanced Settings.
U S E R G U I DE
46
To open the settings window, perform one of the following actions:
click the Settings link in the top part of the main application window (see section "Kaspersky Anti-Virus main
window" on page 41);
select Settings from the context menu (see section "Context menu" on page 40);
click the button with the Settings icon in the Kaspersky Gadget interface (only for Microsoft Windows Vista
and Microsoft Windows 7 operating systems). The option of option of opening the settings window should be
assigned to the button (see section "How to use Kaspersky Gadget" on page 71).
To select the required section in the configuration window,
click the icon corresponding to the section in the top left part of the window (see the figure above).
KASPERSKY GADGET
When using Kaspersky Anti-Virus on a computer running under Microsoft Windows Vista or Microsoft Windows 7, you
can also use the Kaspersky Gadget (hereinafter gadget).
Kaspersky Gadget is designed for quick access to the main features of the application: protection status indication, virus
scan of objects, application operation reports, etc.
After you install Kaspersky Anti-Virus on a computer running under Microsoft Windows 7, the gadget appears on your
desktop automatically. After you install the application on a computer running under Microsoft Windows Vista, you should
add the gadget to Microsoft Windows Sidebar manually (see the operating system documentation).
Figure 9. Kaspersky Gadget
47
STARTING AND STOPPING THE
IN THIS SECTION:
Enabling and disabling automatic launch ........................................................................................................................ 47
Starting and stopping the application manually ............................................................................................................... 47
APPLICATION
After Kaspersky Anti-Virus is installed, it starts automatically. The application is launched automatically each time the
operating system starts.
ENABLING AND DISABLING AUTOMATIC LAUNCH
Automatic launch of the application means that Kaspersky Anti-Virus launches after the operating system startup. This is
the default start mode.
To disable or enable automatic launch of the application:
1. Open the application settings window.
2. In the left part of the window, in the Protection Center section, select the General Settings subsection.
3. To disable automatic launch of the application, uncheck the Launch Kaspersky Anti-Virus at computer startup box in the Autorun section in the right part of the window. Check this box, to enable automatic launch
of the application.
STARTING AND STOPPING THE APPLICATION MANUALLY
Kaspersky Lab specialists do not recommend you to stop Kaspersky Anti-Virus, as in this case your computer and
personal data's protection will be at risk. If disabling protection is really necessary, you are advised to pause your
computer's protection for a specified period without exiting the application.
Kaspersky Anti-Virus should be started manually if you have disabled automatic launch of the application (see section
"Enabling and disabling automatic launch" on page 47).
To launch the application manually,
in the Start menu select Programs Kaspersky Anti-Virus 2011 Kaspersky Anti-Virus 2011.
To exit the application,
right-click to open the context menu of the application icon in the taskbar notification area and select Exit.
In the Microsoft Windows 7 operating system the application icon is hidden by default, but you can display it to
access the application more easily (see the operating system documentation).
48
COMPUTER PROTECTION STATUS
IN THIS SECTION:
Diagnostics and elimination of problems in your computer protection ............................................................................. 48
Enabling and disabling protection ................................................................................................................................... 50
Pausing and resuming protection .................................................................................................................................... 51
This section contains information about how to find out whether your computer is currently protected, or if its security is
under threat, as well as how to eliminate emerging threats. In this section, you also can find information about enabling,
disabling, and pausing protection when working with Kaspersky Anti-Virus.
DIAGNOSTICS AND ELIMINATION OF PROBLEMS IN YOUR
COMPUTER PROTECTION
Problems with computer protection are indicated by the computer protection status indicator located in the top part of the
main application window (see section "Kaspersky Anti-Virus main window" on page 41). The indicator changes color
depending upon the host protection status: green means that the computer is protected, yellow indicates protectionrelated problems, red alerts of serious threats to computer security. You are advised to fix the problems and security
threats immediately.
C O M P U T E R P R O T E C T I O N S T A T U S
49
Clicking the indicator icon in the main application window opens the Protection state window (see the figure below)
containing detailed information about the status of computer protection and troubleshooting suggestions for the detected
problems and threats.
Figure 10. Resolving security problems
The Status tab of the Protection state window lists the protection-related problems including those caused by
deviations from the normal product operation mode (e.g., outdated databases). To address the issues, the product offers
the following options as further steps:
Remove immediately. Clicking the corresponding buttons will take you to the appropriate problem solution. This
is the recommended action.
Postpone removal. If, for whatever reason, immediate removal of the problem is not possible, you can postpone
this action and return to it later. To do this, click the Hide message button.
Note that postponing the removal is not available for serious problems. Such problems include, for example,
malicious objects that were not disinfected, crashes of one or several components, or corruption of program
files.
To display the notifications hidden earlier in the common list, check the Show hidden messages box, which appears in
the bottom part of the tab when there are hidden messages.
You can use the Detected threats tab to view the list of revealed malware and riskware and select the operation which
will be performed over the objects (e.g., move to Quarantine). To select an operation, use the controls above the list and
the context menu for the listed records.
U S E R G U I DE
50
On the Report tab, you can view the application activity reports (see section "Where to view the report on the
application's operation" on page 67).
ENABLING AND DISABLING PROTECTION
By default, Kaspersky Anti-Virus is launched when the operating system loads and protects your computer until it is
switched off. All protection components are running.
You can completely or partially disable protection provided by Kaspersky Anti-Virus.
Kaspersky Lab specialists strongly recommend that you do not disable protection, since this may lead to an infection of
your computer and data loss. If it is really necessary, we recommend that you pause protection for the required period of
time (see section "Pausing and resuming protection" on page 51).
When protection is disabled, all its components become inactive.
This is indicated as follows:
inactive (gray) application icon in the taskbar notification area (see section "Notification area icon" on page 39);
red security indicator in the upper part of the main application window.
In this case, protection is seen in the context of the protection components. Disabling or pausing protection components
does not effect the performance of virus scan tasks and Kaspersky Anti-Virus updates.
You can completely enable or disable protection in the application settings window (see section "Application settings
window" on page 45). You can enable or disable individual application components either in the settings window, or in
the main application window (see section "Kaspersky Anti-Virus main window" on page 41).
To completely enable or disable protection:
1. Open the application settings window.
2. In the left part of the window, select the Protection Center section, General Settings subsection.
3. Uncheck the Enable protection box if you need to disable protection. Check this box if you need to enable
protection.
To enable or disable a protection component in the settings window:
1. Open the application settings window.
2. In the left part of the window, in the Protection Center section, select the component that should be enabled or
disabled.
3. In the right part of the window, uncheck the Enable <component name> box if you need to disable this
component. Check this box if you need to enable the component.
C O M P U T E R P R O T E C T I O N S T A T U S
51
To enable or disable a protection component in the main application window:
1. Open the main application window and select the Protection Center section.
2. In the right part of the window, left-click the section that comprises the component being enabled or disabled.
3. Open the action selection menu by clicking the button with the name of the component. Select Enable <Component name> if you need to enable this component, or select Disable <Component name> if you need
to disable it.
PAUSING AND RESUMING PROTECTION
Pausing protection means temporarily disabling all protection components for a certain period of time.
This is indicated as follows:
inactive (gray) application icon in the taskbar notification area (see section "Notification area icon" on page 39);
red security indicator in the upper part of the main application window.
In this case, protection is seen in the context of the protection components. Disabling or pausing protection components
does not effect the performance of virus scan tasks and Kaspersky Anti-Virus updates.
If network connections were established at the same time as protection was paused, a notification about termination of
such connections is displayed.
When working on a computer running under Microsoft Windows Vista or Microsoft Windows 7, you can pause protection
using Kaspersky Gadget. To do this, Kaspersky Gadget should be configured so that the option of opening the reports
window would be assigned to one of its buttons (see section "How to use Kaspersky Gadget" on page 71).
To pause the protection of your computer:
1. Open the Pause protection window using one of the following methods:
When enabling a component, the icon on its left turns green and when disabling it, the icon turns grey.
select Pause protection from the context menu of the application icon (see section "Context menu" on
page 40);
click the button with the Pause protection icon in the Kaspersky Gadget interface (only for Microsoft
Windows Vista and Microsoft Windows 7 operating systems).
2. In the Pause protection window, select the time interval after which the protection should be resumed:
Pause for the specified time – protection will be enabled after the time interval specified in the field below.
Pause until reboot – protection will be enabled after the application is restarted or the operating system is
rebooted (provided that the automatic application launch is enabled (see section "Enabling and disabling
automatic launch" on page 47)).
Pause – protection will only be enabled when you decide to resume it (please see below).
To resume computer protection,
select Resume protection from the context menu of the application icon (see section "Context menu" on page 40).
You can use this method to resume computer protection when the Pause option has been selected, or when you have
selected Pause for the specified time or Pause until reboot.
52
SOLVING TYPICAL TASKS
IN THIS SECTION:
How to activate the application ........................................................................................................................................ 52
How to purchase or renew a license ............................................................................................................................... 53
What to do when the application's notifications appear ................................................................................................... 54
How to update application databases and modules ........................................................................................................ 54
How to scan critical areas of your computer for viruses .................................................................................................. 55
How to scan a file, folder, disk, or another object for viruses .......................................................................................... 56
How to perform full scan of your computer for viruses .................................................................................................... 58
Scanning computer for vulnerabilities.............................................................................................................................. 58
How to protect your personal data against theft .............................................................................................................. 59
What to do if you suspect an object of being infected with a virus .................................................................................. 61
What to do if you suspect your computer of being infected ............................................................................................. 62
How to restore an object that has been deleted or disinfected by the application ........................................................... 63
How to create and use Rescue Disk ............................................................................................................................... 64
How to view the report on the application's operation ..................................................................................................... 67
How to restore application default settings ...................................................................................................................... 67
How to import the application settings to Kaspersky Anti-Virus installed on another computer....................................... 68
How to switch from Kaspersky Anti-Virus to Kaspersky Internet Security ....................................................................... 69
How to use Kaspersky Gadget ........................................................................................................................................ 71
This section contains instructions on the basic tasks encountered by most users when working with the application.
HOW TO ACTIVATE THE APPLICATION
Activation is the procedure of activating a license that allows you to use a fully functional version of the application until
the license expires.
If you have not activated the application during installation, you can do so later. You are reminded of the need to activate
the application by notifications that Kaspersky Anti-Virus displays in the taskbar notification area.
To run the Kaspersky Anti-Virus Activation Wizard, perform one of the following actions:
Click the Please activate the application link in the Kaspersky Anti-Virus notification window that appears in
the taskbar notification area.
S O L V I N G T Y P I C A L T A S K S
53
Click the License link in the bottom part of the main application window. In the License management window
that opens, click the Activate the application with a new license button.
Let us review the steps of the Wizard in more detail.
Step 1. Selection of the license type and entry of the activation code
Make sure you have selected Activate commercial license in the Activation Wizard window, enter the
activation code (see section "About activation code" on page 37) in the corresponding field, and click the Next
button.
Step 2. Requesting for activation
At the first step, the Wizard sends a request to the activation server to obtain permission for activation of the
commercial version of the application. If the request is sent successfully, the Wizard automatically proceeds to
the next step.
Step 3. Entry of registration data
User registration is necessary for the user to be able to contact the Support Service. Unregistered users only
receive minimal support.
Specify your registration data and click the Next button.
Step 4. Activation
At this step, the Wizard connects with the activation server in order to finish the application activation and user
registration after which the Wizard automatically proceeds to the next window.
Step 5. Wizard completion
This window displays information on the activation results: type of license used and license expiry date.
Click the Finish button to close the Wizard.
HOW TO PURCHASE OR RENEW A LICENSE
If you have installed Kaspersky Anti-Virus without a license, you can purchase one after installation. When your license
expires, you can renew it. You will receive an activation code that you should use to activate the application (see section
"How to activate the application" on page 52).
To purchase a license:
1. Open the main application window.
2. Click the Purchase license button in the bottom part of the window.
The eStore web page opens where you can purchase a license.
To renew a license:
1. Open the main application window and click the License link in the bottom part of the main window.
The License management window opens.
2. Click the Renew license button.
U S E R G U I DE
54
The license renewal center web page opens where you can renew your license.
WHAT TO DO WHEN THE APPLICATION'S NOTIFICATIONS
APPEAR
Notifications that appear in the taskbar notification area inform you of events occurring in the application's operation and
requiring your attention. Depending on how critical the event is, you may receive the following types of notification:
Critical notifications – inform you of events of critical importance from the viewpoint of computer security: for
example, detection of a malicious object or dangerous activity in the system. Notification windows and pop-up
messages of this type are red-colored.
Important notifications – inform you of events which are potentially important from the viewpoint of computer
security: for example, detection of a potentially infected object or suspicious activity in the system. Notification
windows and pop-up messages of this type are yellow-colored.
Information notifications – inform you of events that are non-critical from the viewpoint of security. Notification
windows and pop-up messages of this type are green-colored.
If such a notification is displayed on the screen, you should select one of the suggested options. By default, the optimum
option is the one recommended by Kaspersky Lab experts.
HOW TO UPDATE APPLICATION DATABASES AND
MODULES
By default, Kaspersky Anti-Virus automatically checks for updates on Kaspersky Lab's update servers. If the server
contains new updates, Kaspersky Anti-Virus downloads and installs them in the background. You can start Kaspersky
Anti-Virus update at any time.
To download updates from Kaspersky Lab servers, you should have an established Internet connection.
To start update from the context menu,
select Update from the context menu of the application icon.
S O L V I N G T Y P I C A L T A S K S
55
To start update from the main application window:
1. Openthe main application window and select the Update Center section in the left part of the window.
2. Click the Run Update button in the right part of the window.
Information about the update in progress is displayed:
in the Update section of the main application window, in the Update is in progress subsection;
in the Update window, which opens when clicking the Update is in progress button;
in the context menu of the application icon.
To stop update:
1. Open the main application window and select the Update Center section in the left part of the window.
2. Click the Update is in progress button in the right part of the window.
3. In the Update window that opens, click the Stop button.
4. In the window that prompts the user for confirmation, click the Yes button.
HOW TO SCAN CRITICAL AREAS OF YOUR COMPUTER FOR
VIRUSES
Scan of critical areas consists of scanning the objects which are loaded at startup of the operating system, scanning the
system memory, boot sectors of the disk drive, and the objects that have been added by the user (see section "Creating
a list of objects to scan" on page 78).
You can start the scan of critical areas using one of the following methods:
using the shortcut created earlier (see page 82);
from the main application window (see section "Kaspersky Anti-Virus main window" on page 41).
To start the scan using a shortcut:
1. Open the Microsoft Windows Explorer window and go to the folder where you have created the shortcut.
2. Double-click the shortcut to start the scan.
Information about the scan in progress is displayed:
in the Scan section of the main application window, in the Critical Areas Scan is in progress section;
in the Critical Areas Scan window that opens by clicking the Critical Areas Scan is in progress button;
in the context menu of the application icon.
U S E R G U I DE
56
To start a scan from the main application window:
1. Open the main application window and select the Scan section in the left part of the window.
2. In the right part of the main application window, click the Run Critical Areas Scan button.
Information about the scan in progress is displayed:
in the Scan section of the main application window, in the Critical Areas Scan is in progress section;
in the Critical Areas Scan window that opens by clicking the Critical Areas Scan is in progress button;
in the context menu of the application icon.
To stop the critical areas scan:
1. Open the main application window and in the left part of it select the section named Scan.
2. In the right part of the window, click the Critical Areas Scan is in progress button.
3. In the Critical Areas Scan window that opens, click the Stop button.
4. In the window that prompts the user for confirmation, click the Yes button.
HOW TO SCAN A FILE, FOLDER, DISK, OR ANOTHER
OBJECT FOR VIRUSES
You can use the following methods to scan an object for viruses:
using the context menu of the object;
from the main application window (see section "Kaspersky Anti-Virus main window" on page 41);
using the Kaspersky Anti-Virus gadget (only for Microsoft Windows Vista and Microsoft Windows 7).
To start a virus scan task from the object context menu:
1. Open the Microsoft Windows Explorer window and go to the folder with the object that should be scanned.
2. Right-click to open the context menu of the object (see figure below) and select Scan for Viruses.
S O L V I N G T Y P I C A L T A S K S
57
The process and the results of the task will be displayed in the Virus Scan window that opens.
Figure 11. Context menu of an object in Microsoft Windows
To start scanning an object from the main application window:
1. Open the main application window and select the Scan section in the left part of the window.
2. Specify the object to scan, using one of the following methods:
Click the select link in the right part of the window to open the Custom Scan window, and check the boxes
next to the folders and drives that you need to scan. If the window displays no objects to scan, open the
Select object to scan window by clicking the Add link, and select objects to scan.
Drag an object to scan into the dedicated area of the main window (see figure below).
Task run progress is displayed in the Virus Scan window that opens.
Figure 12. Window area into which you should drag an object to scan
To scan an object for viruses using the gadget,
drag the object to scan onto the gadget.
Task run progress is displayed in the Virus Scan window that opens.
To stop objects scan:
1. In the Virus Scan window that opens after the scan of objects starts, click the Stop button or close the window.
2. In the Virus Scan window that opens, prompting the user for confirmation of scan stop, click the Yes button.
U S E R G U I DE
58
HOW TO PERFORM FULL SCAN OF YOUR COMPUTER FOR
VIRUSES
You can start a full scan for viruses using one of the following methods:
using the shortcut created earlier (see page 82);
from the main application window (see section "Kaspersky Anti-Virus main window" on page 41).
To start the full scan using a shortcut:
1. Open the Microsoft Windows Explorer window and go to the folder where you have created the shortcut.
2. Double-click the shortcut to start the scan.
Information about the scan in progress is displayed:
in the Scan section of the main application window, in the Full Scan is in progress section;
in the Full Scan window that opens by clicking the Full Scan is in progress section;
in the context menu of the application icon.
To start a full scan from the main application window:
1. Open the main application window and select the Scan section in the left part of the window.
2. In the right part of the window, click the Run Full Scan button.
Information about the scan in progress is displayed:
in the Scan section of the main application window, in the Full Scan is in progress section;
in the Full Scan window that opens by clicking the Full Scan is in progress section;
in the context menu of the application icon.
To stop the full scan:
1. Open the main application window and select the Scan section in the left part of the window.
2. In the right part of the window, click the Full Scan is in progress button.
3. In the Full Scan window that opens, click the Stop button.
4. In the window that prompts the user for confirmation, click the Yes button.
SCANNING COMPUTER FOR VULNERABILITIES
Vulnerabilities are unprotected portions of software code which intruders may deliberately use for their purposes, for
example, to copy data used in unprotected applications. Scanning your computer for vulnerabilities helps you to reveal
any such weak points in your computer. You are advised to remove the detected vulnerabilities.
S O L V I N G T Y P I C A L T A S K S
59
IN THIS SECTION:
Protection against phishing ............................................................................................................................................. 60
You can use the following methods to scan the system for vulnerabilities:
from the main application window (see section "Kaspersky Anti-Virus main window" on page 41);
using the shortcut created earlier.
To start the task using a shortcut:
1. Open the Microsoft Windows Explorer window and go to the folder where you have created the shortcut.
2. Double-click the shortcut to start scanning the system for vulnerabilities.
Progress of the task will be displayed in the Vulnerability Scan window that opens.
To start the task from the main application window:
1. Open the main application window and select the Tools section in the left part of the window.
2. Click the Vulnerability Scan button in the right part of the window.
Progress of the task will be displayed in the Vulnerability Scan window that opens.
To stop the vulnerability scan:
1. Open the main application window and select the Tools section in the left part of the window.
2. Click the Vulnerability Scan button in the right part of the window.
3. In the Vulnerability Scan window that opens, click the Stop button.
4. In the window that prompts the user for confirmation of the scan stop, click the Yes button.
HOW TO PROTECT YOUR PERSONAL DATA AGAINST THEFT
With Kaspersky Anti-Virus, you can protect your personal data against theft, such as:
passwords, usernames, and other registration data;
account numbers and bank cards.
Kaspersky Anti-Virus includes components and tools that allow you to protect your personal data against theft attempts
committed by hackers using such methods as phishing and interception of data entered at the keyboard.
Protection against phishing is ensured by Anti-Phishing implemented in the Web Anti-Virus and IM Anti-Virus
components.
Protection against the interception of data entered at the keyboard is ensured by the use of Virtual Keyboard.
U S E R G U I DE
60
PROTECTION AGAINST PHISHING
Phishing is a type of online fraud that involves tricking users into disclosing their credit card numbers, PIN codes and
other privacy data with the objective of stealing funds.
Phishing often targets online banking users. Criminals create an exact copy of the website of a chosen bank and send
emails to customers on behalf of this bank. They claim that a malfunction or replacement of online banking system
software has resulted in the loss of user details, necessitating the user to confirm or modify such details on the bank's
website. Users click the link that takes them to the fake website and enter their details, which then end up in the hands of
criminals.
Protection against phishing is ensured by Anti-Phishing implemented in the Web Anti-Virus and IM Anti-Virus
components. Enable these components to ensure comprehensive protection against phishing.
To enable components providing protection against phishing:
1. Open the main application window and select the Protection Center section in the left part of the window.
2. In the right part of the window, left-click to open the Online Security section.
3. Open the menu for selecting an action on the component by clicking the Anti-Phishing button and select
Enable Anti-Phishing item from the menu.
VIRTUAL KEYBOARD
When working on your computer, there are occasions when entering of your personal data, or username and password
are required. That happens, for example, during account registration on web sites, web shopping or Internet banking.
There is a risk that this personal information is intercepted using hardware keyboard interceptors or keyloggers, which
are programs that register keystrokes.
The Virtual Keyboard tool prevents the interception of data entered via the keyboard.
The Virtual Keyboard cannot protect your personal data if the website requiring the entry of such data has been hacked,
because in this case the information is obtained directly by the intruders.
Many of the applications classified as spyware have the function of making screenshots which are then transferred to an
intruder for further analysis and for stealing the user's personal data. Virtual Keyboard prevents the personal data being
entered from being intercepted with the use of screenshots.
The Virtual Keyboard only prevents the interception of privacy data when working with Microsoft Internet Explorer and
Mozilla Firefox browsers.
Before you start using the Virtual Keyboard, please learn its peculiarities:
This action enables Anti-Phishing and all components that it makes part of.
Before entering data from the Virtual Keyboard, using the cursor, make sure that the appropriate entry field is
selected.
You can click the Virtual Keyboard buttons using the mouse.
Unlike real keyboards, there is no way of clicking two keys simultaneously on a Virtual Keyboard. Therefore, to
use combinations of keys (e.g., ALT+F4), you have to click the first key (e.g., ALT), then the next key (e.g., F4),
and then click the first key again. The second click of the key acts in the same way as the key release on a real
keyboard.
S O L V I N G T Y P I C A L T A S K S
61
Input language for the Virtual Keyboard is toggled using the CTRL+SHIFT key combination (the SHIFT key
should be clicked using the right mouse button) or CTRL+LEFTALT (the LEFTALT key should be clicked
using the right mouse button) depending upon the specified settings.
You can open the Virtual Keyboard in the following ways:
from the context menu of the application icon;
from the Microsoft Internet Explorer or Mozilla Firefox browser windows;
using the keyboard shortcuts.
To open the Virtual Keyboard from the context menu of the application icon,
select Virtual Keyboard from the context menu of the application icon.
To open the Virtual Keyboard from the browser window,
click the Virtual Keyboard button in the toolbar of Microsoft Internet Explorer or Mozilla Firefox.
To open the Virtual Keyboard using the computer keyboard,
press the CTRL+ALT+SHIFT+P shortcut.
WHAT TO DO IF YOU SUSPECT AN OBJECT OF BEING
INFECTED WITH A VIRUS
If you suspect an object of being infected, first scan it using Kaspersky Anti-Virus (see section "How to scan a file, folder,
disk, or another object for viruses" on page 56).
After the scan, if the application reports that the object is not infected, but you think that it is, you can do the following:
Move the object to Quarantine. Objects moved to Quarantine do not pose any threat to your computer. After the
databases are updated, Kaspersky Anti-Virus will probably be able to clearly identify and eliminate the threat.
Send the object to Virus Lab. Virus Lab specialists scan the object. If it turns out to be infected with a virus, they
immediately add the description of the new virus in the databases that will be downloaded by the application
with an update (see section "How to update application databases and modules" on page 54).
You can move an object to Quarantine using one of the two methods:
using the Move to Quarantine link in the Protection state window;
using the context menu of the object.
To move an object to Quarantine from the Protection state window:
1. Open the main application window.
2. Click the Quarantine link in the top part of the main window to open the Protection state window on the
Detected threats tab.
3. Click the Move to Quarantine button.
4. In the window that opens, select the object that you want to move to Quarantine.
U S E R G U I DE
62
To move an object to Quarantine using the context menu:
1. Open Microsoft Windows Explorer and go to the folder that contains the object that you want to move to
Quarantine.
2. Right-click to open the context menu of the object and select Move to Quarantine.
To send an object to the Virus Lab:
1. Go to the Virus Lab request page (http://support.kaspersky.com/virlab/helpdesk.html).
2. Follow the instructions on this page to send your request.
WHAT TO DO IF YOU SUSPECT YOUR COMPUTER OF BEING
INFECTED
If you suspect that your computer has been infected, use the System Restore Wizard to neutralize the consequences of
malicious activity in the system. Kaspersky Lab recommends that you run the Wizard after the computer has been
disinfected to make sure that all threats and damage caused by infections have been fixed.
The Wizard checks whether there are any changes to the system, such as the following: access to the network being
blocked, known file format extensions have been changed, the toolbar is locked, etc. Such damage can have various
causes. The latter may include the activity of malicious programs, incorrect system configuration, system failures or even
incorrect operation of system optimization applications.
After the review is complete, the Wizard analyzes the information to evaluate whether there is system damage which
requires immediate attention. Based on the review, a list of actions necessary to eliminate the problems is generated.
The Wizard groups these actions by category based on the severity of the problems detected.
The Wizard consists of a series of screens (steps) navigated using the Back and Next buttons. To close the Wizard once
it has completed its task, click the Finish button. To stop the Wizard at any stage, click the Cancel button.
To start the System Restore Wizard:
1. Open the main application window and select the Tools section in the left part of the window.
2. In the right part of the window, click the System Restore button.
The Wizard steps in detail.
Step 1. Starting system restore
Make sure that the Wizard option to Search for problems caused by malware activity is selected and click
the Next button.
Step 2. Problem search
The Wizard will search for problems and damage, which should be fixed. Once the search is complete, the
Wizard will automatically proceed to the next step.
S O L V I N G T Y P I C A L T A S K S
63
Step 3. Selecting troubleshooting actions
All damage found during the previous step is grouped on the basis of the type of danger it poses. For each
damage group, Kaspersky Lab recommends a sequence of actions to repair the damage. There are three
groups of actions:
Strongly recommended actions eliminate problems posing a serious security threat. You are advised to
perform all actions in this group.
Recommended actions eliminate problems presenting a potential threat. You are also advised to perform all
actions in this group.
Additional actions repair system damage which does not pose a current threat, but may pose a danger to
the computer's security in the future.
To view the actions within a group, click the + icon to the left of the group name.
To make the Wizard perform a certain action, check the box to the left of the corresponding action description.
By default, the Wizard performs all recommended and strongly recommended actions. If you do not wish to
perform a certain action, uncheck the box next to it.
It is strongly recommended not to uncheck the boxes selected by default because doing so will leave your
computer vulnerable to threats.
Having defined the set of actions, which the Wizard will perform, click the Next button.
Step 4. Problems elimination
The Wizard will perform the actions selected during the previous step. The elimination of problems may take
some time. Once the troubleshooting is complete, the Wizard will automatically proceed to the next step.
Step 5. Wizard completion
Click the Finish button to close the Wizard.
HOW TO RESTORE AN OBJECT THAT HAS BEEN DELETED
OR DISINFECTED BY THE APPLICATION
Kaspersky Lab recommends that you avoid restoring deleted and disinfected objects since they may pose a threat to
your computer.
If you want to restore a deleted or disinfected object, you can use a backup copy of it which was created by the
application when scanning the object.
To restore an object that has been deleted or disinfected by the application:
1. Open the main application window.
2. Click the Quarantine link in the top part of the main window to open the Protection state window on the
Detected threats tab.
U S E R G U I DE
64
3. From the dropdown list located over the list of threats, select Neutralized.
IN THIS SECTION:
Create Rescue Disk ........................................................................................................................................................ 64
Starting the computer from the Rescue Disk ................................................................................................................... 66
The list of disinfected and deleted objects is displayed on the Detected threats tab. Objects are grouped
according to their status. To display the list of objects in a group, click the + icon located to the left of the group
header.
4. Right-click to open the context menu of the object that you want to restore, and select Restore.
HOW TO CREATE AND USE RESCUE DISK
We recommend that you create Rescue Disk after you have installed and configured Kaspersky Anti-Virus, scanned your
computer, and made sure that it was not infected. You will further be able to use Rescue Disk for scanning and
disinfecting infected computers that cannot be disinfected using other methods (e.g., with anti-virus applications).
CREATE RESCUE DISK
Creating the Rescue Disk means the creation of a disk image (ISO file) with up-to-date anti-virus databases and
configuration files.
The source disk image serving as a base for new file creation can be downloaded from the Kaspersky Lab server or
copied from a local source.
You can create Rescue Disk using the Rescue Disk Creation Wizard. The rescuecd.iso file created by the Wizard is
saved on your computer's hard drive:
in Microsoft Windows XP – in the following folder: Documents and Settings\All Users\Application
Data\Kaspersky Lab\AVP11\Data\Rdisk\;
in Microsoft Windows Vista and Microsoft Windows 7 operating systems – in the following folder:
ProgramData\Kaspersky Lab\AVP11\Data\Rdisk\.
The Wizard consists of a series of screens (steps) navigated using the Back and Next buttons. To close the Wizard once
it has completed its task, click the Finish button. To stop the Wizard at any stage, click the Cancel button.
To start the Rescue Disk Creation Wizard:
1. Open the main application window and select the Tools section in the left part of the window.
2. In the right part of the window, click the button named Rescue Disk.
The Wizard steps in detail.
S O L V I N G T Y P I C A L T A S K S
65
Step 1. Starting the Wizard. Searching for an existing disk image
The first window of the Wizard contains information about the Rescue Disk that will be created by the Wizard.
If the Wizard detects an existing Rescue Disk ISO file in the dedicated folder (see above), the Use existing ISO
image box will be displayed in the first window of the Wizard. Check the box to use the detected file as original
ISO image and go directly to the Updating disk image step (see below). Uncheck this box if you do not want to
use the disk image that has been found, and the Wizard proceeds to the Select disk image source window.
Step 2. Select disk image source
If you have checked the Use existing ISO image box in the first Wizard window, then this step will be skipped.
At this step, you should select the image file source from the list of options:
Select Copy ISO image from local or network drive if you already have a Rescue Disk or an image
prepared for it and stored on your computer or on a local network resource.
Select the Download ISO image from Kaspersky Lab server option if you do not have an image file, and
you want to download it from the Kaspersky Lab server (file size is about 100 MB).
Step 3. Copying (downloading) disk image
If you have checked the Use existing ISO image box in the first Wizard window, then this step will be skipped.
If you have selected the option to copy the image from a local source at the previous step (Copy ISO image from local or network drive), you should specify the path to the ISO file at this current step. To do this, click
the Browse button. After you have specified the path to the file, click the Next button. The disk image copying
progress is displayed in the Wizard window.
If you have selected Download ISO image from Kaspersky Lab server, the disk image downloading progress
is displayed immediately.
When copying or downloading the ISO image is complete, the Wizard automatically proceeds to the next step.
Step 4. Updating image file
File update procedure includes:
update of anti-virus databases;
update of configuration files.
Configuration files determine the possibility of starting the computer from a removable disk or CD / DVD written
using a rescue disk image provided by the Wizard.
When updating anti-virus databases, those distributed at the last update of Kaspersky Anti-Virus are used. If the
databases are obsolete, it is recommended to update and restart the Rescue Disk Creation Wizard.
To begin updating the ISO file, click the Next button. The updating progress will be displayed in the Wizard
window.
Step 5. Recording the image on a data medium
In this window, the Wizard informs you of a successful creation of the Rescue Disk and offers you to record it on
a data medium.
U S E R G U I DE
66
Specify a data medium for recording the ISO image:
Select Record to CD / DVD to record the image on a CD / DVD.
You will be prompted to specify the CD / DVD on which the image should be recorded. Then, the ISO
image will be recorded on this CD / DVD. The recording process may take some time so please wait until it
has completed.
Select the Record to USB flash drive option to record the image on a removable drive.
Kaspersky Lab recommends that you do not record the ISO image on devices which are not designed
specifically for data storage, such as smartphones, cellphones, PDAs, and MP3 players. Recording ISO
images on these devices may lead to their incorrect functioning in the future.
You will be prompted to specify the removable drive on which the image should be recorded. Then, the
image will be recorded on this removable drive. The recording process may take some time so please wait
until it has completed.
Select Save the disk image to file on local or network drive to record the ISO image to the hard drive
installed on your computer or another one that you can access over a network.
You will be offered to specify the folder into which the image should be recorded, and the name of the ISO
file, after which it will be recorded on the hard drive. The recording process may take some time so please
wait until it has completed.
Step 6. Wizard completion
To complete the Wizard, click the Finish button. You can use the disk that you have created for further booting
of the computer (see page 66).
STARTING THE COMPUTER FROM THE RESCUE DISK
If the operating system cannot be started as a result of a virus attack, use the Rescue Disk.
To boot the operating system, you should use a CD / DVD or removable drive with a rescue disk image (.iso) file
recorded on it (see section "Creating the Rescue Disk" on page 64).
Loading a computer from a removable drive is not always possible. In particular, this mode is not supported by some
obsolete computer models. Before shutting down your computer for further booting from a removable drive, make sure
that this operation can be performed.
To boot your computer from the Rescue Disk:
1. In the BIOS settings, enable booting from a CD / DVD or removable drive (for detailed information please refer
to the documentation for your computer's motherboard).
2. Insert a CD / DVD with the Rescue Disk image into the CD/DVD drive of an infected computer or connect a
removable drive to it.
3. Restart your computer.
For detailed information about the use of the Rescue Disk, please refer to the Kaspersky Rescue Disk User Guide.
S O L V I N G T Y P I C A L T A S K S
67
HOW TO VIEW THE REPORT ON THE APPLICATION'S
OPERATION
Kaspersky Anti-Virus creates operation reports for each component. Using a report, you can find out, for example, how
many malicious objects (such as viruses and Trojan programs) have been detected and removed by the application
during the specified period, how many times the application has been updated during the same period, how many spam
messages have been detected, and many other characteristics.
When working on a computer running under Microsoft Windows Vista or Microsoft Windows 7, you can open reports
using Kaspersky Gadget. To do this, Kaspersky Gadget should be configured so that the option of opening the reports
window is assigned to one of its buttons (see section "How to use Kaspersky Gadget" on page 71).
To view the application operation report:
1. Open the Protection state window on the Report tab using one of the following methods:
click the Reports link in the top part of the main application window;
click the button with the Reports icon in the Kaspersky Gadget interface (only for Microsoft Windows
Vista and Microsoft Windows 7).
The Report tab displays application operation reports in diagram format.
2. If you want to view a detailed application operation report (for example, a report representing the operation of
each component), click the Detailed report button in the bottom part of the Report tab.
The Detailed report window opens where data are represented in a table. For a convenient view of reports, you
can select various entry sorting options.
HOW TO RESTORE APPLICATION DEFAULT SETTINGS
You can always restore the settings of Kaspersky Anti-Virus which are recommended by Kaspersky Lab and considered
optimal. The settings can be restored using the Application Configuration Wizard.
When the Wizard completes its operations, the Recommended security level is set for all protection components. While
restoring the settings, you will also be prompted to define which settings should or should not be kept for which
components together with restoring the recommended security level.
To restore protection settings:
1. Open the application settings window.
2. Run the Application Configuration Wizard using one of the following methods:
click the Restore link in the bottom part of the window;
in the left part of the window, select the Advanced Settings section, Manage Settings subsection, and
click the Restore button in the Restore default settings section.
The Wizard steps in detail.
U S E R G U I DE
68
Step 1. Starting the Wizard
Click the Next button to proceed with the Wizard.
Step 2. Selecting settings to save
This window of the Wizard shows which Kaspersky Anti-Virus components have settings that are different from
the default value, because they were changed by the user. If special settings have been created for any of the
components, they will also be shown in the window.
Check the boxes for the settings that you want to save and click the Next button.
Step 3. Finishing restoration
To complete the Wizard, click the Finish button.
HOW TO IMPORT THE APPLICATION SETTINGS TO
KASPERSKY ANTI-VIRUS INSTALLED ON ANOTHER
COMPUTER
Having configured the product, you can apply its settings in Kaspersky Anti-Virus installed on another computer.
Consequently, the application will be configured identically on both computers. This is a helpful feature when, for
example, Kaspersky Anti-Virus is installed on your home computer and in your office.
Application settings are stored in a special configuration file, which you can transfer to another computer. To do this:
1. Perform the Export procedure – save the application settings to a configuration file.
2. Move the file you have saved to another computer (for example, send it by email or use a removable data
medium).
3. Perform the Import procedure – apply the settings from the configuration file to the application installed on
another computer.
To export the current settings of Kaspersky Anti-Virus:
1. Open the application settings window.
2. Select the Manage Settings section in the left part of the window.
3. Click the Save button in the right part of the window.
4. In the window that opens enter the name of the configuration file and the path where it should be saved.
To import the application's settings from a saved configuration file:
1. Open the application settings window.
2. Select the Manage Settings section in the left part of the window.
3. Click the Load button in the right part of the window.
4. In the window that opens, select a file that you wish to import the Kaspersky Anti-Virus settings from.
S O L V I N G T Y P I C A L T A S K S
69
IN THIS SECTION:
Switching to the commercial version ............................................................................................................................... 69
Temporarily switching to the trial version ........................................................................................................................ 70
HOW TO SWITCH FROM KASPERSKY ANTI-VIRUS TO
KASPERSKY INTERNET SECURITY
Kaspersky Internet Security is an application designed to ensure comprehensive protection of your computer. It is very
similar to Kaspersky Anti-Virus, however featuring a range of advanced options implemented in the following modules
and features:
Application Control;
Parental Control;
Firewall;
Network Attack Blocker;
Geo Filter;
Blocking access to dangerous websites;
Network Monitor;
Anti-Spam;
Anti-Banner;
Eliminating activity traces;
Safe Run section.
You can temporarily switch to the trial version of Kaspersky Internet Security to get acquainted with its features, or
immediately proceed to using the commercial version of the application.
When using a license with subscription (see section "Subscription statuses" on page 146) or working with the application
in some regions, the application cannot be temporarily switched to the trial version of Kaspersky Internet Security.
SWITCHING TO THE COMMERCIAL VERSION
If you want to switch to the commercial version of Kaspersky Internet Security, you do not have to install the application.
All you need is an activation code for the commercial version of the application that you can use to activate it (see
section "How to activate the application" on page 52). You can obtain an activation code if you already have the
commercial license.
To purchase the commercial license for Kaspersky Internet Security:
1. Open the main application window and select the Upgrade section in the left part of the window.
2. Click the Buy Now button.
U S E R G U I DE
70
When done, you are redirected to the eStore website where you can purchase the commercial license for
Kaspersky Internet Security.
When using a license with subscription (see section "Subscription statuses" on page 146) or working with the
application in some regions, the main window does not contain the Upgrade section.
TEMPORARILY SWITCHING TO THE TRIAL VERSION
You can temporarily switch to Kaspersky Internet Security to assess its features. You can also purchase a license for
further use of the application.
When using a license with subscription (see section "Subscription statuses" on page 146) or working with the application
in some regions, the application cannot be temporarily switched to the trial version of Kaspersky Internet Security. In
these cases, the main application window does not contain the Upgrade section.
To temporarily switch to Kaspersky Internet Security:
1. Open the main application window and select the Upgrade section in the left part of the window.
2. Click the Try Now button.
The Configuration Wizard then starts in protection upgrade mode.
The Wizard steps in detail.
Step 1. Request for activation of the trial version of Kaspersky Internet Security
At the first step, the Wizard sends a request to the activation server to obtain permission for activation of the trial
version of Kaspersky Internet Security. If the request is sent successfully, the Wizard automatically proceeds to
the next step.
Step 2. Starting to deploy protection
At this step, the Wizard displays the message that notifies you of upgrade readiness. To proceed with the
Wizard, click the Next button.
Step 3. Removing incompatible applications
At this step, the Wizard checks if any applications incompatible with Kaspersky Internet Security are installed on
your computer. If no such applications are detected, the Wizard automatically proceeds to the next step. If such
applications are detected, the Wizard groups them in a list, displays it in the window, and offers you to remove
them.
After the incompatible applications are deleted, you may need to restart your operating system. After you restart
the application, the Wizard starts automatically and the protection upgrade will continue.
Step 4. Upgrading protection
At this step, upgrade modules are being connected, which may take some time. Once the process is complete,
the Wizard will proceed automatically to the next step.
Step 5. Restarting the application
At the final step of upgrading application, you need to restart the application. To do this, click the Finish button
on the Wizard window.
S O L V I N G T Y P I C A L T A S K S
71
Step 6. Completing the activation
After you restart the application, the Wizard starts automatically. When the trial version of Kaspersky Internet
Security is successfully activated, the Wizard window displays information about the time period during which
you can use the trial version.
Step 7. System analysis
At this stage, information about Microsoft Windows applications is collected. These applications are added to
the list of trusted applications which have no restrictions imposed on the actions they perform in respect of the
system.
Once the analysis is complete, the Wizard will automatically proceed to the next step.
Step 8. Completing upgrade
To complete the Wizard, click the Finish button.
Expiration of the trial period of Kaspersky Internet Security
When the trial period of Kaspersky Internet Security expires, all protection components stop functioning. The application
notifies you of this event.
Click the Fix it button in the main application window to select a scenario of further actions in the Activation Wizard
window that opens:
Return to the use of Kaspersky Anti-Virus in standard mode if you have a valid commercial license.
Purchase the commercial license for Kaspersky Internet Security or Kaspersky Anti-Virus and then activate the
application (see section "How to activate the application" on page 52).
You cannot temporarily switch to Kaspersky Internet Security for a second time.
HOW TO USE KASPERSKY GADGET
When using Kaspersky Anti-Virus on a computer running under Microsoft Windows Vista or Microsoft Windows 7, you
can also use the Kaspersky Gadget (hereinafter gadget).
After you install Kaspersky Anti-Virus on a computer running under Microsoft Windows 7, the gadget appears on your
desktop automatically. After you install the application on a computer running under Microsoft Windows Vista, you should
add the gadget to Microsoft Windows Sidebar manually (see the operating system documentation).
Gadget color indicator displays your computer protection status in the same manner as the protection status indicator in
the main application window does (see section "Kaspersky Anti-Virus main window" on page 41). Green indicates that
your computer is duly protected, while yellow indicates that there are protection problems, and red indicates that your
computer' security is at serious risk. The gray color indicates that the application is stopped.
The gadget's appearance allows you to monitor update downloads: when the updating of databases and application
modules is in progress, a spinning globe icon appears in the center of the Gadget.
U S E R G U I DE
72
You can use the gadget to perform the following main tasks:
run the application if it has been stopped;
open the main application window;
scan specified objects for viruses;
open the news window.
To run the application using the gadget,
click the Enable icon located in the center of the gadget.
To open the main application window using the gadget,
click the Kaspersky Anti-Virus icon located in the center of the gadget.
To scan an object for viruses using the gadget,
drag the object to scan onto the gadget.
Task run progress is displayed in the Virus Scan window that opens.
To open the news window using the gadget,
click the icon which is displayed in the center of the gadget when a piece of news is released.
Configuring the gadget
You can configure gadget so that you can use its buttons to initiate the following actions:
edit the application settings;
view application reports;
pause protection.
Additionally, you can change the gadget's appearance by selecting another skin for it.
To configure the gadget:
1. Open the gadget settings window by clicking the icon that appears in the right top corner of the gadget block if
you roll over it with the mouse cursor.
2. From the Left icon and Right icon dropdown lists, select the actions that should be performed when clicking
the left and right buttons of the gadget.
3. Select a skin for the gadget by clicking the buttons.
4. Click the OK button to save the changes that you have made.
73
ADVANCED APPLICATION SETTINGS
IN THIS SECTION:
General protection settings ............................................................................................................................................. 74
Mail Anti-Virus ................................................................................................................................................................. 93
Web Anti-Virus ................................................................................................................................................................ 98
IM Anti-Virus .................................................................................................................................................................. 105
System Watcher ............................................................................................................................................................ 109
Trusted zone ................................................................................................................................................................. 115
Performance and compatibility with other applications .................................................................................................. 117
Quarantine and Backup................................................................................................................................................. 121
Additional tools for better protection of your computer .................................................................................................. 124
Participating in the Kaspersky Security Network ........................................................................................................... 136
This section provides detailed information about each application component and describes the operation and
configuration algorithms for each component.
To adjust the advanced application settings, open the settings window using one of the following methods:
click the Settings link in the top part of the main application window;
select Settings from the context menu of the application icon.
U S E R G U I DE
74
GENERAL PROTECTION SETTINGS
IN THIS SECTION:
Restricting access to Kaspersky Anti-Virus ..................................................................................................................... 74
In the application settings window, in the General Settings subsection of the Protection Center section, you can
perform the following operations:
disable all protection components (see section "Enabling and disabling protection" on page 50);
select the interactive or automatic protection mode (see section "Selecting protection mode" on page 75);
restrict users' access to the application by setting a password (see section "Restricting access to Kaspersky
Anti-Virus" on page 74);
disable or enable automatic launch of the application at the startup of the operating system (see section
"Enabling and disabling automatic launch" on page 47);
enable a custom key combination to display the virtual keyboard on the screen (see section "Virtual Keyboard"
on page 60).
RESTRICTING ACCESS TO KASPERSKY ANTI-VIRUS
A computer may be used by several users with various levels of computer literacy. Unrestricted access to Kaspersky
Anti-Virus and its settings granted to users may lead to reduced level of computer protection.
To restrict access to the application, you can set a password and specify which actions should require entering the
password:
changing application settings;
closing the application;
removing the application.
Use a password for restricting access to the application removal with care. If you forget the password, the application will
be hard to remove from your computer.
To restrict access to Kaspersky Anti-Virus with a password:
1. Open the application settings window.
2. In the left part of the window, select the Protection Center section, General Settings subsection.
3. In the right part of the window, in the Password protection section, check the Enable password protection
box and click the Settings button.
4. In the Password protection window that opens, enter the password and specify the area to be covered by the
access restriction.
A D V A N C E D A P P L I C A T I O N S E T T I N G S
By default, Kaspersky Anti-Virus runs in automatic protection mode. In this mode the application automatically applies
actions recommended by Kaspersky Lab in response to dangerous events. If you wish Kaspersky Anti-Virus to notify you
of all hazardous and suspicious events in the system and to allow to decide which of the actions offered by the
application should be applied, you can enable interactive protection mode.
To select protection mode:
1. Open the application settings window.
2. In the left part of the window, in the Protection Center section, select the General Settings subsection.
3. In the Interactive protection section check or uncheck the boxes depending on the selected protection mode:
to enable interactive protection mode, uncheck the Select action automatically;
to enable automatic protection mode, check the Select action automatically.
If you do not want Kaspersky Anti-Virus to delete suspicious objects when running in automatic mode,
check the Do not delete suspicious objects box.
SCAN
Scanning the computer for viruses and vulnerabilities is one of the most important tasks in ensuring the computer's
security. It is necessary to scan your computer for viruses on a regular basis in order to rule out the possibility of
spreading malicious programs that have not been discovered by protection components, for example, because of a low
security level set, or for other reasons.
Vulnerability scan performs the diagnostics of operating system and detects software features that can be used by
intruders to spread malicious objects and obtain access to personal information.
The following sections contain detailed information about scan tasks features and configuration, security levels, scan
methods, and scan technologies.
VIRUS SCAN
Kaspersky Anti-Virus comprises the following tasks to scan objects for viruses:
Custom Scan. Scan of objects selected by the user. You can scan any object of the computer's file system
from the following list: system memory, objects loaded on startup, system backup, email databases, hard drives,
removable storage media and network drives.
Full Scan. A thorough scan of the entire system. The following objects are scanned by default: system memory,
objects loaded on startup, system backup, email databases, hard drives, removable storage media and network
drives.
Critical Areas Scan. Virus scan of operating system startup objects.
U S E R G U I DE
76
The Full Scan and the Critical Areas Scan tasks have their peculiarities. For these tasks, it is not recommended to edit
IN THIS SECTION:
Changing and restoring security level ............................................................................................................................. 77
Creating the scan startup schedule ................................................................................................................................. 77
Creating a list of objects to scan ..................................................................................................................................... 78
Selecting the scan method .............................................................................................................................................. 78
Selecting the scan technology ......................................................................................................................................... 79
Changing actions to be performed on detected objects .................................................................................................. 79
Running scan under a different user account .................................................................................................................. 79
Changing the type of objects to scan .............................................................................................................................. 80
Scan of compound files ................................................................................................................................................... 80
Scanning removable drives on connection ...................................................................................................................... 81
Creating a task shortcut .................................................................................................................................................. 82
the lists of objects to scan.
Each scan task is performed in the specified area and can be started according to the schedule created. Each scan task
is characterized with a security level (combination of settings that impact the depth of the scan). By default, the mode of
using records from application databases to search for threats is always enabled. You can also apply various scan
methods and technologies (see page 79).
After you run the full scan task or critical areas scan task, the progress of task run is displayed in the Scan section of the
Kaspersky Anti-Virus main window, in the field under the name of the task being run.
If a threat is detected, Kaspersky Anti-Virus assigns one of the following statuses to the found object:
malicious program (such as a virus or Trojan);
potentially infected (suspicious) status if the scan cannot determine whether the object is infected or not. The file
may contain a sequence of code appropriate for viruses, or modified code from a known virus.
The application displays a notification about detected threat and performs the assigned action. You can change actions
to be performed on detected threat.
If you work in automatic mode (see section "Selecting protection mode" on page 75), Kaspersky Anti-Virus will
automatically apply the action recommended by Kaspersky Lab specialists when dangerous objects are detected. For
malicious objects this action is Disinfect. Delete if disinfection fails, for suspicious objects – Move to Quarantine.
Before attempting to disinfect or delete an infected object, Kaspersky Anti-Virus creates a backup copy for subsequent
restoration or disinfection. Suspicious (potentially infected) objects are quarantined. You can enable the automatic scan
of quarantined objects after each update.
Information on the scan results and events, which have occurred during the execution of the task, is logged in a
Kaspersky Anti-Virus report.
A D V A N C E D A P P L I C A T I O N S E T T I N G S
77
CHANGING AND RESTORING SECURITY LEVEL
Depending on your current needs, you can select one of the preset security levels, or modify the scan settings manually.
When configuring scan task settings, you can always restore the recommended ones. They are considered optimal,
recommended by Kaspersky Lab, and grouped in the Recommended security level.
To change the defined security level, perform the following actions:
1. Open the application settings window.
2. In the left part of the window, in the Scan section, select the required task (Full Scan, Critical Areas Scan, or
Custom Scan).
3. In the Security level section, set the required security level for the task selected, or click the Settings button to
modify scan settings manually.
If you modify the settings manually, the name of the security level will change to Custom.
To restore the default scan settings:
1. Open the application settings window.
2. In the left part of the window, in the Scan section, select the required task (Full Scan, Critical Areas Scan, or
Custom Scan).
3. In the Security level section, click the Default level button for the task selected.
CREATING THE SCAN STARTUP SCHEDULE
You can create a schedule to automatically start virus scan tasks: specify task run frequency, start time (if necessary),
and advanced settings.
If it is not possible to start the task for any reason (for example, the computer was not on at that time), you can configure
the skipped task to start automatically as soon as it becomes possible. You can automatically pause the scan when a
screensaver is inactive or the computer is unlocked. This functionality postpones the launch until the user has finished
working on the computer. The scan will then not take up system resources during the work.
Special Idle Scan mode (see section "Running tasks in background mode" on page 118) allows you to start scan of the
system memory, system partition, and startup objects when your computer is idle.
To modify a schedule for scan tasks:
1. Open the application settings window.
2. In the left part of the window, in the Scan section, select the required task (Full Scan, Critical Areas Scan, or
Vulnerability Scan).
3. Click the Run mode button in the right part of the window.
4. In the window that opens, on the Run mode tab, in the Schedule section, select By schedule and configure
the scan run mode.
To enable automatic launch of skipped task:
1. Open the application settings window.
2. In the left part of the window, in the Scan section, select the required task (Full Scan, Critical Areas Scan, or
Vulnerability Scan).
U S E R G U I DE
78
3. Click the Run mode button in the right part of the window.
4. In the window that opens, on the Run mode tab, in the Schedule section, select By schedule and check the
Run skipped tasks box.
To launch scans only when the computer is not being used:
1. Open the application settings window.
2. In the left part of the window, in the Scan section, select the required task (Full Scan, Critical Areas Scan, or
Vulnerability Scan).
3. Click the Run mode button in the right part of the window.
4. In the window that opens, on the Run mode tab, in the Schedule section, select By schedule and check the
Pause scheduled scan when screensaver is inactive and computer is unlocked box.
CREATING A LIST OF OBJECTS TO SCAN
Each virus scan task has its own default list of objects. These objects may include items in the computer's file system,
such as logical drives and email databases, or other types of objects such as network drives. You can edit this list.
If the scan scope is empty, or it contains no selected objects, a scan task cannot be started.
To create a list of objects for an object scan task:
1. Open the main application window.
2. In the left part of the window, select the Scan section.
3. In the right part of the window click the select link to open the list of objects for scanning.
4. In the Custom Scan window that opens, click the Add button.
5. In the Select object to scan window that opens, select the required object and click the Add button. Click the
OK button after you have added all the objects you need. To exclude any objects from the list of objects to be
scanned, uncheck the boxes next to them.
You can also drag files to be scanned directly into a marked area located in the Scan section.
To create the list of objects for Full Scan, Critical Areas Scan or Vulnerability Scan tasks:
1. Open the application settings window.
2. In the left part of the window, in the Scan section, select the required scan task (Full Scan, Critical Areas Scan, or Vulnerability Scan).
3. In the right part of the window, click the Scan scope button.
4. In the Scan scope window that opens, use the Add, Edit, and Delete buttons to create a list. To exclude any
objects from the list of objects to be scanned, uncheck the boxes next to them.
SELECTING THE SCAN METHOD
During virus scan, signature analysis is always used: Kaspersky Anti-Virus compares the object found with the database
records.
Objects which appear on the list by default cannot be edited or deleted.
A D V A N C E D A P P L I C A T I O N S E T T I N G S
79
You can use the additional scan methods to increase the scan efficiency: heuristic analysis (analysis of the actions an
object performs within the system) and rootkit scan (tools that can hide malicious programs in your operating system).
To specify which scan method to use:
1. Open the application settings window.
2. In the left part of the window, in the Scan section, select the required task (Full Scan, Critical Areas Scan, or
Custom Scan).
3. In the Security level section, click the Settings button for the task selected.
4. In the window that opens, on the Additional tab, in the Scan methods section, select the required values for
the settings.
SELECTING THE SCAN TECHNOLOGY
In addition to the scan methods you can use special technologies, allowing you to increase the virus scan speed by
excluding the files that have not been modified since they were last scanned.
To enable the object scan technologies:
1. Open the application settings window.
2. In the left part of the window, in the Scan section, select the required task (Full Scan, Critical Areas Scan, or
Custom Scan).
3. In the Security level section, click the Settings button for the task selected.
4. In the window that opens, on the Additional tab, in the Scan technologies section, select the required values.
CHANGING ACTIONS TO BE PERFORMED ON DETECTED OBJECTS
If infected or potentially infected objects are detected, the application performs the specified action.
To change the action to be performed on detected objects:
1. Open the application settings window.
2. In the left part of the window, in the Scan section, select the required task (Full Scan, Critical Areas Scan, or
Custom Scan).
3. In the right part of the window, select the required option in the Action on threat detection section.
RUNNING SCAN UNDER A DIFFERENT USER ACCOUNT
By default, the scan tasks are run under your system account. However, you may need to run task under a different user
account. You can specify an account to be used by the application when performing a scan task.
To start the scan under a different user's account:
1. Open the application settings window.
2. In the left part of the window, select the required task in the Scan (Full Scan, Critical Areas Scan, Custom Scan, or Vulnerability Scan) section.
U S E R G U I DE
80
3. Click the Run mode button in the right part of the window.
4. In the window that opens, on the Run mode tab, in the User account section, check the Run task as box.
Specify the user name and password.
CHANGING THE TYPE OF OBJECTS TO SCAN
When specifying the type of objects to scan, you establish which file formats and sizes will be scanned for viruses when
the selected scan task runs.
When selecting file types please remember the following:
Probability of malicious code penetrating several file formats (such as .txt) and its further activation is quite low.
At the same time, there are formats that contain or may contain an executable code (such as .exe, .dll, .doc).
The risk of penetrating and activating malicious code in such files is quite high.
The intruder can send a virus to your computer in an executable file renamed as txt file. If you have selected the
scan of files by extension, such a file is skipped by the scan. If the scan of files by format is selected, then,
regardless of the extension, File Anti-Virus will analyze the file header, and reveal that the file is an .exe file.
Such a file would be thoroughly scanned for viruses.
To change the type of scanned objects:
1. Open the application settings window.
2. In the left part of the window, in the Scan section, select the required task (Full Scan, Critical Areas Scan, or
Custom Scan).
3. In the Security level section, click the Settings button for the task selected.
4. In the window that opens, on the Scope tab, in the File types section, select the required option.
SCAN OF COMPOUND FILES
A common method of concealing viruses is to embed them into compound files: archives, databases, etc. To detect
viruses that are hidden in this way a compound file should be unpacked, which can significantly lower the scan speed.
For each type of compound file, you can select to scan either all files or only new ones. To make your selection, click the
link next to the name of the object. It changes its value when you left-click it. If you select the scan new and changed files
only scan mode (see page 81), you will not be able to select the links allowing you to scan all or new only files.
You can restrict the maximum size of the compound file being scanned. Compound files larger than the specified value
will not be scanned.
When large files are extracted from archives, they will be scanned even if the Do not unpack large compound files box
is checked.
To modify the list of scanned compound files:
1. Open the application settings window.
2. In the left part of the window, in the Scan section, select the required task (Full Scan, Critical Areas Scan, or
Custom Scan).
A D V A N C E D A P P L I C A T I O N S E T T I N G S
81
3. In the Security level section, click the Settings button for the task selected.
4. In the window that opens, on the Scope tab, in the Scan of compound files section, select the required types
of compound files to be scanned.
In order to set the maximum size of compound files to be scanned:
1. Open the application settings window.
2. In the left part of the window, in the Scan section, select the required task (Full Scan, Critical Areas Scan, or
Custom Scan).
3. In the Security level section, click the Settings button for the task selected.
4. In the window that opens, on the Scope tab, in the Scan of compound files section, click the Additional
button.
5. In the Compound files window that opens, check the Do not unpack large compound files box and specify
the maximum file size.
SCAN OPTIMIZATION
You can reduce the scan time and speed up Kaspersky Anti-Virus. This can be achieved by scanning only new files and
those files that have altered since the last time they were scanned. This mode applies both to simple and compound
files.
You can also set a restriction on scan duration for an object. When the specified time interval expires, the object will be
excluded from the current scan (except for archives and files comprised of several objects).
To scan only new and changed files:
1. Open the application settings window.
2. In the left part of the window, in the Scan section, select the required task (Full Scan, Critical Areas Scan, or
Custom Scan).
3. In the Security level section, click the Settings button for the task selected.
4. In the window that opens, on the Scope tab, in the Scan optimization section, check the Scan only new and changed files box.
To set a restriction on scan duration:
1. Open the application settings window.
2. In the left part of the window, in the Scan section, select the required task (Full Scan, Critical Areas Scan, or
Custom Scan).
3. In the Security level section, click the Settings button for the task selected.
4. In the window that opens, on the Scope tab, in the Scan optimization section, check the Skip objects scanned longer than box and specify the scan duration for a single file.
SCANNING REMOVABLE DRIVES ON CONNECTION
Nowadays, malicious objects using operating systems' vulnerabilities to replicate via networks and removable media
have become increasingly widespread. Kaspersky Anti-Virus allows to scan removable drives when connecting them to
the computer.
U S E R G U I DE
82
To configure scanning of removable media at connection:
1. Open the application settings window.
2. In the left part of the window, in the Scan section, select General Settings.
3. In the Scan removable drives on connection section, select the action and define the maximum size of a
drive to scan in the field below, if necessary.
CREATING A TASK SHORTCUT
The application provides the option of creating shortcuts for a quick start of full, quick and vulnerability scan tasks. This
can start the required scan without opening the main application window or the context menu.
To create a shortcut to start a scan:
1. Open the application settings window.
2. In the left part of the window, in the Scan section, select General Settings.
3. In the right part of the window, in the Scan tasks quick run section, click the Create shortcut button next to
the name of the required task (Critical Areas Scan, Full Scan, or Vulnerability Scan).
4. Specify the path for saving a shortcut and its name in the window that opens. By default, the shortcut is created
with the name of a task in the My Computer folder of the current computer user.
VULNERABILITY SCAN
Vulnerabilities of the operating system may be caused by errors in programming or design, unreliable passwords,
malware activity, and so on. When scanning for vulnerabilities, the application analyzes the system, searches for
anomalies and damaged settings of the operating system and web browser, looks for vulnerable services and takes
other security-related precautions.
The diagnostics may take some time. When it is complete, found problems are analyzed from the perspective of a
possible threat to the system.
After the vulnerability scan task start (see page 58), its progress is displayed in the Vulnerability Scan window, in the
Finish field. Vulnerabilities detected when scanning the system and applications, are displayed in the same window, on
the System vulnerabilities and Vulnerable applications tabs.
When searching for threats, information on the results is logged in a Kaspersky Anti-Virus report.
As with virus scan tasks, you can set a start schedule for a vulnerability scan task, create a list of objects to scan (see
page 78), specify an account (see section "Running scan under a different user account" on page 79) and create a
shortcut for quick start of a task. By default, the applications already installed on the computer are selected as scan
objects.
UPDATE
Updating databases and program modules of Kaspersky Anti-Virus ensures the up-to-date protection status to your
computer. New viruses, Trojans, and other types of malware appear worldwide on a daily basis. Kaspersky Anti-Virus
databases contain information about threats and ways of eliminating them so regular application update is required for
ensuring your computer's security and timely detecting new threats.
Regular update requires an active license for application usage. Without a license, you will only be able to update the
application once.
A D V A N C E D A P P L I C A T I O N S E T T I N G S
83
IN THIS SECTION:
Selecting an update source ................................ ................................ ................................................................ ............. 84
Creating the update startup schedule ............................................................................................................................. 85
Rolling back the last update ............................................................................................................................................ 86
Scanning Quarantine after update .................................................................................................................................. 86
Using the proxy server .................................................................................................................................................... 87
Running updates under a different user account ............................................................................................................. 87
Application update downloads and installs the following updates on your computer:
Kaspersky Anti-Virus databases.
The protection of information is based on databases which contain signatures of threats and network attacks,
and the methods used to fight them. Protection components use these databases to search for and disinfect
dangerous objects on your computer. The databases are supplemented every hour with records of new threats.
Therefore, you are advised to update them on a regular basis.
In addition to the Kaspersky Anti-Virus databases, the network drivers that enable the application's components
to intercept network traffic are updated.
Application modules.
In addition to the Kaspersky Anti-Virus databases, you can also update the program modules. The update
packages fix Kaspersky Anti-Virus's vulnerabilities, and supplement or improve the existing functionality.
The main update source of Kaspersky Anti-Virus are special Kaspersky Lab update servers. While updating Kaspersky
Anti-Virus, you can copy database and program module updates received from Kaspersky Lab servers into a local folder,
providing access to other networked computers. This saves Internet traffic.
You can also modify automatic update startup settings.
Your computer should be connected to the Internet for successful downloading of updates from our servers. By default,
the Internet connection settings are determined automatically. If you use a proxy server, you may need to adjust the
connection settings.
When performing updates (see page 114), the application modules and databases on your computer are compared with
the up-to-date version at the update source. If your current databases and modules differ from those in the actual version
of the application, the lacking portion of updates will be installed on your computer.
If the databases are outdated, the update package may be large, which may cause additional Internet traffic (up to
several dozen MB).
Prior to updating the databases, Kaspersky Anti-Virus creates backup copies of them if you want to roll back to the
previous version of databases.
Information about the current condition of Kaspersky Anti-Virus databases is displayed in the Update section of the main
application window.
Information on the update results and events, which have occurred during the execution of the update task, is logged in a
Kaspersky Anti-Virus report.
U S E R G U I DE
84
SELECTING AN UPDATE SOURCE
The update source is a resource containing updates for databases and application modules of Kaspersky Anti-Virus. You
can specify HTTP/FTP servers, local and network folders as update sources.
The main update sources are Kaspersky Lab update servers where database updates and application module updates
for all Kaspersky Lab products are stored.
If you do not have access to Kaspersky Lab's update servers (for example, the access to the Internet is restricted), you
can call the Kaspersky Lab headquarters (http://www.kaspersky.ru/contacts) to request contact information of Kaspersky
Lab partners who can provide you with updates on removable media.
When ordering updates on removable media, please specify whether you also require updates for the application
modules.
By default, the list of update sources contains only Kaspersky Lab's update servers. If several resources are selected as
update sources, Kaspersky Anti-Virus tries to connect to them one after another, starting from the top of the list, and
retrieves the updates from the first available source.
If you select a resource outside the LAN as an update source, you must have an Internet connection to update.
To choose an update source:
1. Open the application settings window.
2. In the left part of the window, in the Update Center section, select the Update Settings component.
3. Click the Update source button in the right part of the window.
4. In the window that opens, on the Source tab, open the selection window by clicking the Add button.
5. In the Select update source window that opens, select the folder that contains the updates, or enter an
address in the Source field to specify the server from which the updates should be downloaded.
SELECTING THE UPDATE SERVER REGION
If you use Kaspersky Lab servers as the update source, you can select the optimal server location when downloading
updates. Kaspersky Lab servers are located in several countries.
Using the closest Kaspersky Lab update server allows you to reduce the time period required for receiving updates and
increase the operation performance speed. By default, the application uses information about the current region from the
operating system's registry. You can select the region manually.
To select the server region:
1. Open the application settings window.
2. In the left part of the window, in the Update Center section, select the Update Settings component.
3. Click the Update source button in the right part of the window.
4. In the window that opens, on the Source tab, in the Regional settings section, select the Select from the list
option, and then select the country nearest to your current location from the dropdown list.
A D V A N C E D A P P L I C A T I O N S E T T I N G S
85
UPDATING THE APPLICATION FROM A SHARED FOLDER
To save Internet traffic, you can configure update of Kaspersky Anti-Virus from a shared folder when updating the
application on networked computers. If done, one of the networked computers receives an update package from
Kaspersky Lab servers or from another web resource that contains the required set of updates. The received updates
are copied into a shared folder. Other networked computers access this folder to receive updates for Kaspersky AntiVirus.
To enable updates distribution mode:
1. Open the application settings window.
2. In the left part of the window, in the Update Center section, select the Update Settings component.
3. Check the Copy updates to folder box in the Additional section and specify the path to a public folder where
all downloaded updates are copied in the field below. You can also select a folder by clicking the Browse
button.
To enable updating the application on a specified computer from the shared folder you have selected:
1. Open the application settings window.
2. In the left part of the window, in the Update Center section, select the Update Settings component.
3. Click the Update source button in the right part of the window.
4. In the window that opens, on the Source tab, open the selection window by clicking the Add button.
5. In the Select update source window that opens, select a folder or enter the full path to it in the Source field.
6. Uncheck the Kaspersky Lab update servers box on the Source tab.
CREATING THE UPDATE STARTUP SCHEDULE
You can create a schedule to automatically start an update task: specify task run frequency, start time (if necessary), and
advanced settings.
If it is not possible to start the task for any reason (for example, the computer was not on at that time), you can configure
the skipped task to start automatically as soon as it becomes possible.
You can also postpone automatic startup of the task after the application is started. Note that all scheduled tasks will be
run only after the specified time interval elapses since the startup of Kaspersky Anti-Virus.
Special Idle Scan mode (see section "Running tasks in background mode" on page 118) allows you to start automatic
update keeping your computer idle.
To configure the update task startup schedule:
1. Open the application settings window.
2. In the left part of the window, in the Update Center section, select the Update Settings component.
3. Click the Run mode button in the right part of the window.
4. In the window that opens, on the Run mode tab, in the Schedule section, select the By schedule option and
configure the update run mode.
U S E R G U I DE
86
To enable automatic launch of skipped task:
1. Open the application settings window.
2. In the left part of the window, in the Update Center section, select the Update Settings component.
3. Click the Run mode button in the right part of the window.
4. In the window that opens, on the Run mode tab, in the Schedule section, select By schedule and check the
Run skipped tasks box.
To postpone task run after the application startup:
1. Open the application settings window.
2. In the left part of the window, in the Update Center section, select the Update Settings component.
3. Click the Run mode button in the right part of the window.
4. In the window that opens, on the Run mode tab, in the Schedule section, select the By schedule option and fill
in the Postpone running after application startup for field to specify the time to which the task run should be
postponed.
ROLLING BACK THE LAST UPDATE
After first update of Kaspersky Anti-Virus databases and program modules, the option of rolling back to the previous
databases becomes available.
At the start of the update process, Kaspersky Anti-Virus creates a backup copy of the current databases and application
modules. If necessary, you can restore the previous databases. Update rollback feature may be useful in case a new
version of the databases contain an invalid signature that makes Kaspersky Anti-Virus block a safe application.
In the event of Kaspersky Anti-Virus database corruption, it is recommended to run the update task to download a valid
set of databases for up-to-date protection.
To roll back to the previous database version:
1. Open the main application window.
2. Select the Update Center section in the left part of the window.
3. Click the Roll back to the previous databases button in the right part of the window.
SCANNING QUARANTINE AFTER UPDATE
If the application has scanned an object and has not found out what malicious programs have infected it, the object is
quarantined. After the next database update, the product may be able to recognize the threat unambiguously and
neutralize it. You can enable the auto scan for quarantined objects after each update.
For this reason, the application scans quarantined objects after each update. Scanning may change their status. Some
objects can then be restored to the previous locations, and you will be able to continue working with them.
A D V A N C E D A P P L I C A T I O N S E T T I N G S
87
To enable scanning quarantined files after update:
1. Open the application settings window.
2. In the left part of the window, in the Update Center section, select the Update Settings component.
3. Check the Rescan Quarantine after update box in the Additional section.
USING THE PROXY SERVER
If you use a proxy server for Internet connection, you should reconfigure it for proper update of Kaspersky Anti-Virus.
To configure the proxy server:
1. Open the application settings window.
2. In the left part of the window, in the Update Center section, select the Update Settings component.
3. Click the Update source button in the right part of the window.
4. In the window that opens, on the Source tab, click the Proxy server button.
5. Configure the proxy server settings in the Proxy server settings window that opens.
RUNNING UPDATES UNDER A DIFFERENT USER ACCOUNT
By default, the update procedure is run under your system account. However, Kaspersky Anti-Virus can update from a
source for which you have no access rights (for example, from a network folder containing updates) or authorized proxy
user credentials. You can run Kaspersky Anti-Virus updates on behalf of the user account that has such rights.
To start the update under a different user's account:
1. Open the application settings window.
2. In the left part of the window, in the Update Center section, select the Update Settings component.
3. Click the Run mode button in the right part of the window.
4. In the window that opens, on the Run mode tab, in the User account section, check the Run task as box.
Specify the user name and password.
FILE ANTI-VIRUS
File Anti-Virus prevents infection of the computer's file system. The component starts upon startup of the operating
system, continuously remains in the computer's RAM, and scans all files being opened, saved, or launched on your
computer and all connected drives.
You can create the protection scope and set the security level (collection of settings that determine the scan's
thoroughness).
When the user or a program attempts to access a protected file, File Anti-Virus checks if the iChecker and iSwift
databases contain information about this file, and makes a decision on whether the file should be scanned or not.
By default, the mode of using records from application databases to search for threats is always enabled. Additionally,
you can apply heuristic analysis (see page 91) and various scan technologies (see page 91).
U S E R G U I DE
88
If a threat is detected, Kaspersky Anti-Virus assigns one of the following statuses to the found object:
IN THIS SECTION:
Enabling and disabling File Anti-Virus ............................................................................................................................. 88
Using heuristic analysis ................................................................................................................................................... 91
Selecting the scan technology ......................................................................................................................................... 91
Changing actions to be performed on detected objects .................................................................................................. 91
Scan of compound files ................................................................................................................................................... 92
potentially infected (suspicious) status if the scan cannot determine whether the object is infected or not. The file
may contain a sequence of code appropriate for viruses, or modified code from a known virus.
The application displays a notification about detected threat and performs the assigned action. You can change actions
to be performed on detected threat.
If you work in automatic mode (see section "Selecting protection mode" on page 75), Kaspersky Anti-Virus will
automatically apply the action recommended by Kaspersky Lab specialists when dangerous objects are detected. For
malicious objects this action is Disinfect. Delete if disinfection fails, for suspicious objects – Move to Quarantine.
Before attempting to disinfect or delete an infected object, Kaspersky Anti-Virus creates a backup copy for subsequent
restoration or disinfection. Suspicious (potentially infected) objects are quarantined. You can enable the automatic scan
of quarantined objects after each update.
ENABLING AND DISABLING FILE ANTI-VIRUS
By default, File Anti-Virus is enabled, functioning in normal mode. You can disable File Anti-Virus, if necessary.
To disable File Anti-Virus:
1. Open the application settings window.
2. In the left part of the window, in the Protection Center section, select the File Anti-Virus component.
3. In the right part of the window, uncheck the Enable File Anti-Virus box.
AUTOMATICALLY PAUSING FILE ANTI-VIRUS
When carrying out resource-intensive works, you can pause File Anti-Virus. To reduce workload and ensure quick
access to objects, you can configure automatic pausing of the component at a specified time or when handling specified
programs.
A D V A N C E D A P P L I C A T I O N S E T T I N G S
89
Pausing File Anti-Virus when it conflicts with some programs is an emergency operation! If any conflicts arise when
working with the component, please contact Kaspersky Lab Technical Support Service (http://support.kaspersky.com).
The support specialists will help you resolve the simultaneous operation of Kaspersky Anti-Virus with other applications
on your computer.
To pause the component at a specified time:
1. Open the application settings window.
2. In the left part of the window, in the Protection Center section, select the File Anti-Virus component.
3. Click the Settings button in the Security level section in the right part of the window.
4. In the window that opens, on the Additional tab, in the Pause task section, check the By schedule box and
click the Schedule button.
5. In the Pause task window, specify the time (in 24-hour hh:mm format) for which protection will be paused
(Pause task at and Resume task at fields).
To pause the component when running specified applications:
1. Open the application settings window.
2. In the left part of the window, in the Protection Center section, select the File Anti-Virus component.
3. Click the Settings button in the Security level section in the right part of the window.
4. In the window that opens, on the Additional tab, in the Pause task section, check the At application startup
box and click the Select button.
5. In the Applications window create a list of applications which pause the component when running.
CREATING A PROTECTION SCOPE
Protection scope is the location of objects being scanned and the types of files to be scanned. By default, Kaspersky
Anti-Virus only scans infectable files stored on any hard, network, or removable drive.
You can expand or restrict the protection scope by adding / removing objects to be scanned or changing the type of files
to be scanned. For example, you can only select EXE files run from network drives to be scanned.
When selecting file types please remember the following:
Probability of malicious code penetrating several file formats (such as .txt) and its further activation is quite low.
At the same time, there are formats that contain or may contain an executable code (such as .exe, .dll, .doc).
The risk of penetrating and activating malicious code in such files is quite high.
The intruder can send a virus to your computer in an executable file renamed as txt file. If you have selected the
scan of files by extension, such a file is skipped by the scan. If the scan of files by format is selected, then,
regardless of the extension, File Anti-Virus will analyze the file header, and reveal that the file is an .exe file.
Such a file would be thoroughly scanned for viruses.
To edit the object scan list:
1. Open the application settings window.
2. In the left part of the window, in the Protection Center section, select the File Anti-Virus component.
3. Click the Settings button in the right part of the window.
U S E R G U I DE
90
4. In the window that opens, on the General tab, in the Protection scope section, open the object selection
window by clicking the Add link.
5. In the Select object to scan window, select an object and click the Add button.
6. After you have added all required objects, click the OK button in the Select object to scan window.
7. To remove an object from the scan list, uncheck the box next to it.
To change the type of scanned objects:
1. Open the application settings window.
2. In the left part of the window, in the Protection Center section, select the File Anti-Virus component.
3. Click the Settings button in the right part of the window.
4. In the window that opens, on the General tab, in the File types section, select the required settings.
CHANGING AND RESTORING SECURITY LEVEL
Depending on your actual needs, you can select one of the preset file/memory security levels or configure File Anti-Virus
on your own.
When configuring File Anti-Virus, you can always roll back to the recommended settings. These settings are considered
optimal, recommended by Kaspersky Lab, and grouped in the Recommended security level.
To change the current file and memory security level:
1. Open the application settings window.
2. In the left part of the window, in the Protection Center section, select the File Anti-Virus component.
3. In the right part of the window, in the Security level section, set the required security level, or click the Settings
button to modify the settings manually.
If you modify the settings manually, the name of the security level will change to Custom.
To restore the default protection settings:
1. Open the application settings window.
2. In the left part of the window, in the Protection Center section, select the File Anti-Virus component.
3. Click the Default level button in the Security level section in the right part of the window.
SELECTING SCAN MODE
The scan mode is the condition which triggers File Anti-Virus into activity. The default setting for Kaspersky Anti-Virus is
smart mode, which determines if the object is subject to scanning on the basis of the actions performed in respect of it.
For example, when working with a Microsoft Office document, Kaspersky Anti-Virus scans the file when it is first opened
and last closed. Intermediate operations that overwrite the file do not cause it to be scanned.
You can change the object scan mode. The scan mode should be selected depending on the files you work with most of
the time.
A D V A N C E D A P P L I C A T I O N S E T T I N G S
91
To change the object scan mode:
1. Open the application settings window.
2. In the left part of the window, in the Protection Center section, select the File Anti-Virus component.
3. Click the Settings button in the Security level section in the right part of the window.
4. In the window that opens on the Additional tab, in the Scan mode section, select the required mode.
USING HEURISTIC ANALYSIS
During File Anti-Virus operation, signature analysis is always used: Kaspersky Anti-Virus compares the object found with
the database records.
To improve protection efficiency, you can use the heuristic analysis (i.e., analysis of activity that an object performs in the
system). This analysis allows detecting new malicious objects which are not yet described in the databases.
To enable the heuristic analysis:
1. Open the application settings window.
2. In the left part of the window, in the Protection Center section, select the File Anti-Virus component.
3. Click the Settings button in the Security level section in the right part of the window.
4. In the window that opens, on the Performance tab, in the Scan methods section, check the Heuristic analysis box and specify the detail level for the scan.
SELECTING THE SCAN TECHNOLOGY
In addition to the heuristic analysis you can use special technologies, allowing an increase in the objects scan speed by
excluding the files that have not been modified since they were last scanned.
To enable the object scan technologies:
1. Open the application settings window.
2. In the left part of the window, in the Protection Center section, select the File Anti-Virus component.
3. Click the Settings button in the Security level section in the right part of the window.
4. In the window that opens, on the Additional tab, in the Scan technologies section, select the required values.
CHANGING ACTIONS TO BE PERFORMED ON DETECTED OBJECTS
If infected or potentially infected objects are detected, the application performs the specified action.
To change the specified action to be performed on detected objects:
1. Open the application settings window.
2. In the left part of the window, in the Protection Center section, select the File Anti-Virus component.
3. In the right part of the window, select the required option in the Action on threat detection section.
U S E R G U I DE
92
SCAN OF COMPOUND FILES
A common method of concealing viruses is to embed them into compound files: archives, databases, etc. To detect
viruses that are hidden in this way a compound file should be unpacked, which can significantly lower the scan speed.
For each type of compound file, you can select to scan either all files or only new ones. To make your selection, click the
link next to the name of the object. It changes its value when you left-click it. If you select the scan new and changed files
only scan mode (see page 93), you will not be able to select the links allowing you to scan all or new only files.
By default, Kaspersky Anti-Virus only scans embedded OLE objects.
When large compound files are scanned, their preliminary unpacking may take a long period of time. This period can be
reduced by enabling unpacking of compound files in background mode if they exceed the specified file size. If a
malicious object is detected while working with such a file, Kaspersky Anti-Virus will notify you about it.
You can restrict the maximum size of the compound file being scanned. Compound files larger than the specified value
will not be scanned.
When large files are extracted from archives, they will be scanned even if the Do not unpack large compound files box
is checked.
To modify the list of scanned compound files:
1. Open the application settings window.
2. In the left part of the window, in the Protection Center section, select the File Anti-Virus component.
3. Click the Settings button in the Security level section in the right part of the window.
4. In the window that opens, on the Performance tab, in the Scan of compound files section, select the required
type of compound files to be scanned.
In order to set the maximum size of compound files to be scanned:
1. Open the application settings window.
2. In the left part of the window, in the Protection Center section, select the File Anti-Virus component.
3. Click the Settings button in the Security level section in the right part of the window.
4. In the window that opens, on the Performance tab, in the Scan of compound files section, click the
Additional button.
5. In the Compound files window, check the Do not unpack large compound files box and specify the
maximum file size.
A D V A N C E D A P P L I C A T I O N S E T T I N G S
93
To unpack large-sized compound files in background mode:
1. Open the application settings window.
2. In the left part of the window, in the Protection Center section, select the File Anti-Virus component.
3. Click the Settings button in the Security level section in the right part of the window.
4. In the window that opens, on the Performance tab, in the Scan of compound files section, click the
Additional button.
5. In the Compound files window, check the Extract compound files in the background box and specify the
minimum file size.
SCAN OPTIMIZATION
You can reduce the scan time and speed up Kaspersky Anti-Virus. This can be achieved by scanning only new files and
those files that have altered since the last time they were scanned. This mode applies both to simple and compound
files.
To scan only new and changed files:
1. Open the application settings window.
2. In the left part of the window, in the Protection Center section, select the File Anti-Virus component.
3. Click the Settings button in the right part of the window.
4. In the window that opens, on the Performance tab, in the Scan optimization section, check the Scan only new and changed files box.
MAIL ANTI-VIRUS
Mail Anti-Virus scans incoming and outgoing messages for malicious objects. It starts when the operating system boots
and runs continually, scanning all email messages sent or received via the POP3, SMTP, IMAP, MAPI, and NNTP
protocols, as well as over encrypted connections (SSL) via POP3 and IMAP (see section "Scanning encrypted
connections" on page 111).
The indicator of the component's operation is the application icon in the taskbar notification area, which looks like
whenever an email message is being scanned.
You can specify the types of messages which should be scanned and select the security level (see page 95)
(configuration settings affecting the scan intensity).
The application intercepts each message that the user sends or receives and parses it into basic components: message
header, body, attachments. Message body and attachments (including attached OLE objects) are scanned for the
presence of threats.
By default, the mode of using records from application databases to search for threats is always enabled. In addition, you
can enable heuristic analysis. Furthermore, you can enable filtering of attachments (see page 96), which allows
automatic renaming or deletion of specified file types.
If a threat is detected, Kaspersky Anti-Virus assigns one of the following statuses to the found object:
malicious program (such as a virus or Trojan);
potentially infected (suspicious) status if the scan cannot determine whether the object is infected or not. The file
may contain a sequence of code appropriate for viruses, or modified code from a known virus.
U S E R G U I DE
94
The application blocks a message, displays a notification about detected threat and performs the assigned action. You
IN THIS SECTION:
Enabling and disabling Mail Anti-Virus ............................................................................................................................ 94
Creating a protection scope ............................................................................................................................................ 95
Changing and restoring security level ............................................................................................................................. 95
Using heuristic analysis ................................................................................................................................................... 96
Changing actions to be performed on detected objects .................................................................................................. 96
Scan of compound files ................................................................................................................................................... 97
Email scanning in Microsoft Office Outlook ..................................................................................................................... 97
Email scanning in The Bat! .............................................................................................................................................. 97
can change actions to be performed on detected threat (see section "Changing actions to be performed on detected
objects" on page 96).
If you work in automatic mode (see section "Selecting protection mode" on page 75), Kaspersky Anti-Virus will
automatically apply the action recommended by Kaspersky Lab specialists when dangerous objects are detected. For
malicious objects this action is Disinfect. Delete if disinfection fails, for suspicious objects – Move to Quarantine.
Before attempting to disinfect or delete an infected object, Kaspersky Anti-Virus creates a backup copy for subsequent
restoration or disinfection. Suspicious (potentially infected) objects are quarantined. You can enable the automatic scan
for quarantined objects after each update.
After the email message is successfully disinfected, it returns to the user. If the disinfection fails, the infected object is
deleted from the message. After the virus scan, a special text is inserted in the subject line of the email, stating that the
email was processed by Kaspersky Anti-Virus.
An integrated plug-in is provided for Microsoft Office Outlook (see section "Email scanning in Microsoft Office Outlook"
on page 97) that allows you to fine-tune the email client.
If you use The Bat!, Kaspersky Anti-Virus can be used in conjunction with other anti-virus applications. At that, the email
traffic processing rules (see section "Email scanning in The Bat!" on page 97) are configured directly in The Bat! and
override the application’s email protection settings.
When working with other mail programs, including Microsoft Outlook Express/Windows Mail, Mozilla Thunderbird,
Eudora, and Incredimail, the Mail Anti-Virus component scans email on SMTP, POP3, IMAP, and NNTP protocols.
Note that when working with the Thunderbird mail client, email messages transferred via IMAP will not be scanned for
viruses if any filters moving messages from the Inbox folder are used.
ENABLING AND DISABLING MAIL ANTI-VIRUS
By default, Mail Anti-Virus is enabled, functioning in normal mode. You can disable Mail Anti-Virus, if necessary.
A D V A N C E D A P P L I C A T I O N S E T T I N G S
95
To disable Mail Anti-Virus:
1. Open the application settings window.
2. In the left part of the window, in the Protection Center section, select the Mail Anti-Virus component.
3. In the right part of the window, uncheck the Enable Mail Anti-Virus box.
CREATING A PROTECTION SCOPE
Protection scope is understood as the type of messages to be scanned. By default, Kaspersky Anti-Virus scans both
incoming and outgoing emails.
If you have selected scan only incoming messages, you are advised to scan outgoing email when you first begin using
Kaspersky Anti-Virus since it is likely that there are worms on your computer which will distribute themselves via email.
This will avoid unpleasant situations caused by unmonitored mass emailing of infected emails from your computer.
The protection scope also includes the settings used to integrate the Mail Anti-Virus component into the system, and the
protocols to be scanned. By default, the Mail Anti-Virus component is integrated into the Microsoft Office Outlook and
The Bat! email client applications.
To disable scans of outgoing emails:
1. Open the application settings window.
2. In the left part of the window, in the Protection Center section, select the Mail Anti-Virus component.
3. Click the Settings button in the right part of the window.
4. Use the General tab of the displayed window to select in the Protection scope section the option Incoming messages only.
To select the protocols to scan and the settings to integrate Mail Anti-Virus into the system:
1. Open the application settings window.
2. In the left part of the window, in the Protection Center section, select the Mail Anti-Virus component.
3. Click the Settings button in the right part of the window.
4. In the window that opens, on the Additional tab, in the Connectivity section select the required settings.
CHANGING AND RESTORING SECURITY LEVEL
Depending on your actual needs, you can select one of the preset email security levels or configure Mail Anti-Virus on
your own.
Kaspersky Lab advises you not to configure Mail Anti-Virus settings on your own. In most cases, it is enough to select a
different security level.
When configuring Mail Anti-Virus, you can always roll back to the recommended values. These settings are considered
optimal, recommended by Kaspersky Lab, and grouped in the Recommended security level.
U S E R G U I DE
96
To change the preset email security level:
1. Open the application settings window.
2. In the left part of the window, in the Protection Center section, select the Mail Anti-Virus component.
3. In the right part of the window, in the Security level section, set the required security level, or click the Settings
button to modify the settings manually.
If you modify the settings manually, the name of the security level will change to Custom.
To restore default mail protection settings:
1. Open the application settings window.
2. In the left part of the window, in the Protection Center section, select the Mail Anti-Virus component.
3. Click the Default level button in the Security level section in the right part of the window.
USING HEURISTIC ANALYSIS
During Mail Anti-Virus operation, signature analysis is always used: Kaspersky Anti-Virus compares the object found with
the database records.
To improve protection efficiency, you can use the heuristic analysis (i.e., analysis of activity that an object performs in the
system). This analysis allows detecting new malicious objects which are not yet described in the databases.
To enable the heuristic analysis:
1. Open the application settings window.
2. In the left part of the window, in the Protection Center section, select the Mail Anti-Virus component.
3. Click the Settings button in the right part of the window.
4. In the window that opens, on the General tab, in the Scan methods section, check the Heuristic analysis box
and specify the detail level for the scan.
CHANGING ACTIONS TO BE PERFORMED ON DETECTED OBJECTS
If infected or potentially infected objects are detected, the application performs the specified action.
To change the specified action to be performed on detected objects:
1. Open the application settings window.
2. In the left part of the window, in the Protection Center section, select the Mail Anti-Virus component.
3. In the right part of the window, select the required option in the Action on threat detection section.
ATTACHMENT FILTERING
Malware is most often distributed in mail as objects attached to messages. To protect your computer, for example, from
automatic launch of attached files, you can enable filtering of attachments, which can automatically rename or delete files
of specified types.
A D V A N C E D A P P L I C A T I O N S E T T I N G S
97
To enable filtering of attachments:
1. Open the application settings window.
2. In the left part of the window, in the Protection Center section, select the Mail Anti-Virus component.
3. Click the Settings button in the right part of the window.
4. Use the Attachment filter tab of the displayed window to select the filtering mode for attachments. When you
select either of the last two modes, the list of file types (extensions) will become enabled; there you can select
the required types or add a mask to select a new type.
To add a new type mask to the list, click the Add link to open the Input file name mask window and enter the
necessary information.
SCAN OF COMPOUND FILES
A common method of concealing viruses is to embed them into compound files: archives, databases, etc. To detect
viruses that are hidden in this way a compound file should be unpacked, which can significantly lower the scan speed.
You can enable or disable the scan of attached archives and limit the maximum size of archives to be scanned.
If your computer is not protected by any local network software (you access the Internet directly without a proxy server or
a firewall), it is not recommended to disable the scanning of attached archives.
To configure the settings for the scan of compound files:
1. Open the application settings window.
2. In the left part of the window, in the Protection Center section, select the Mail Anti-Virus component.
3. Click the Settings button in the right part of the window.
4. Use the General tab in the displayed window to define necessary settings.
EMAIL SCANNING IN MICROSOFT OFFICE OUTLOOK
If you are using Microsoft Office Outlook as your mail client, you may modify additional settings for scanning your mail for
viruses.
When installing Kaspersky Anti-Virus, a special plug-in is installed in Microsoft Office Outlook. It allows you to configure
Mail Anti-Virus settings quickly, and determine when email messages are scanned for dangerous objects.
The plug-in comes in the form of Email protection tab located in the Tools Options menu.
To define the proper time for mail scanning, perform the following steps:
1. Open the main Microsoft Outlook application window.
2. Select Tools Options from the application menu.
3. Use the Email protection tab to select necessary settings.
EMAIL SCANNING IN THE BAT!
Actions in respect of infected email objects in The Bat! are defined using the application's own tools.
U S E R G U I DE
98
Mail Anti-Virus settings determining if incoming and outgoing messages should be scanned, which actions should be
performed in respect of dangerous objects in email, and which exclusions should apply, are ignored. The only thing that
The Bat! takes into account is the scanning of attached archives.
The email protection settings extend to all the anti-virus components installed on the computer that support working with
the Bat!.
Note that incoming email messages are first scanned by Mail Anti-Virus and only after that – by the plug-in of The Bat!. If
a malicious object is detected, you will receive a notification from Kaspersky Anti-Virus. If you select the Disinfect
(Delete) action in the notification window of Mail Anti-Virus, actions aimed at eliminating the threat are performed by Mail
Anti-Virus. If you select the Ignore option in the notification window, the object will be disinfected by the plug-in of The
Bat!. When sending email messages, they are first scanned by the plug-in and then - by Mail Anti-Virus.
You have to define the following criteria:
which mail stream (incoming, outgoing) should be scanned;
when the mail objects should be scanned (when opening a message, before saving to disk);
what actions are performed by the mail client if dangerous objects are detected in email messages. For
example, you could select:
Attempt to disinfect infected parts – if this option is selected, the attempt is made to disinfect the infected
object; if it cannot be disinfected, the object remains in the message.
Delete infected parts – if this option is selected, the dangerous object in the message is deleted
regardless of whether it is infected or suspected to be infected.
By default, The Bat! places all infected email objects in Quarantine without attempting to disinfect them.
The Bat! does not give special headers to emails containing dangerous objects.
To set up email protection rules in The Bat!:
1. Open the main The Bat! window.
2. Select the Settings item from the Properties menu of the mail client.
3. Select the Virus protection object from the settings tree.
WEB ANTI-VIRUS
Whenever you use the Internet, the information stored on your computer becomes subject to the risk of infection from
dangerous programs. These can infiltrate your computer while you are downloading free software, or browsing known
safe websites, which have been subject to hacker attacks before you have gone on them. Moreover, network worms can
penetrate your computer before you open a webpage or download a file just because your computer is connected to the
Internet.
The Web Anti-Virus component is designed to ensure security while using the Internet. It protects your computer against
data coming in via the HTTP, HTTPS and FTP protocols, and also prevents dangerous scripts from being executed on
the computer.
Web protection monitors the data stream that passes only through the ports included in the monitored port list. A list of
ports that are most commonly used for data transfer is included in the Kaspersky Anti-Virus distribution kit. If you use any
ports that are not included in this list, add them into the list of monitored ports (see section "Creating a list of monitored
ports" on page 114) to ensure protection of data streams being directed via them.
A D V A N C E D A P P L I C A T I O N S E T T I N G S
99
A collection of settings called the security level defines how the data stream will be scanned (see section "Selecting the
Web Anti-Virus security level" on page 101). If Web Anti-Virus detects a threat, it will perform the assigned action.
Kaspersky Lab advises you not to configure Web Anti-Virus settings on your own. In most cases, it is enough to select an
appropriate security level.
Component operation algorithm
Web Anti-Virus protects the data reaching your computer and transferred from it over HTTP, HTTPS and FTP, and
prevents hazardous scripts from running on the computer. By default, scan of secure connections (via HTTPS) is
disabled, you can enable and configure it (see section "Scanning encrypted connections" on page 111).
Data is protected using the following algorithm:
1. Each web page or file that is accessed by the user or an application via the HTTP, HTTPS or FTP protocols, is
intercepted and analyzed for malicious code by Web Anti-Virus. Malicious objects are detected using both
Kaspersky Anti-Virus databases and the heuristic algorithm. The database contains descriptions of all the
malicious programs known to date and methods for neutralizing them. The heuristic algorithm can detect new
viruses that have not yet been entered in the database.
2. After the analysis, you have the following courses of action available:
If a web page or an object accessed by the user contains malicious code, access to them is blocked. A
notification is displayed that the object or page being requested is infected.
If the file or web page does not contain malicious code, the program immediately grants the user access to
it.
Scripts are scanned according to the following algorithm:
1. Each script run is intercepted by Web Anti-Virus and is analyzed for malicious code.
2. If the script contains malicious code, Web Anti-Virus blocks this script and informs the user of it with a special
pop-up message.
3. If no malicious code is discovered in the script, it is run.
Web Anti-Virus intercepts only scripts using the Microsoft Windows Script Host functionality.
U S E R G U I DE
100
IN THIS SECTION:
Enabling and disabling Web Anti-Virus ......................................................................................................................... 100
Selecting the Web Anti-Virus security level ................................................................................................................... 101
Changing actions to be performed on dangerous objects ............................................................................................. 101
Checking URLs using the databases of suspicious and phishing addresses ................................................................ 101
Using heuristic analysis ................................................................................................................................................. 102
Creating a list of trusted addresses ............................................................................................................................... 104
Restoring Web Anti-Virus default settings ..................................................................................................................... 105
ENABLING AND DISABLING WEB ANTI-VIRUS
There are two ways to enable or disable the component:
from the main application window (see section "Kaspersky Anti-Virus main window" on page 41);
from the settings window (see section "Application settings window" on page 45).
To enable or disable Web Anti-Virus in the main window, perform the following steps:
1. Open the main application window and select the Protection Center section in the left part of the window.
2. In the right part of the window, left-click to open the Online Security or the System and Applications Protection section.
3. Open the menu for selecting an action to take on the component by clicking the Web Anti-Virus button and
select Enable Web Anti-Virus (if the component should be enabled) or Disable Web Anti-Virus (if it should be
disabled).
When enabling a component, the icon on its left turns green and when disabling it, the icon turns grey.
To enable or disable Web Anti-Virus in the settings window:
1. Open the application settings window.
2. In the left part of the window, in the Protection Center section, select the Web Anti-Virus component.
3. In the right part of the window, check the Enable Web Anti-Virus box if the component should be enabled.
Uncheck the box if the component should be disabled.
Loading...
+ hidden pages
You need points to download manuals.
1 point = 1 manual.
You can buy points or you can get point for every manual you upload.