KASPERSKY Anti-Virus 2011 User Manual [tr]

Kaspersky Anti-Virus 2011

USER GUIDE
APPLICATION VERSION: 11.0 CRITICAL FIX 2
2

Dear User!

Thank you for choosing our product. We hope that you will find this documentation useful and that it will provide answers to most of your questions that may arise.
Warning! This document is the property of Kaspersky Lab ZAO (herein also referred to as Kaspersky Lab): all rights to this document are reserved by the copyright laws of the Russian Federation, and by international treaties. Illegal reproduction and distribution of this document or parts hereof will result in civil, administrative or criminal liability by applicable law.
Any type of reproduction or distribution of any materials, including translations, is allowed only with the written permission of Kaspersky Lab ZAO.
This document and related graphic images can be used exclusively for informational, non-commercial or personal use.
This document may be amended without additional notification. The latest version of this document can be found on the Kaspersky Lab website, at http://www.kaspersky.com/docs.
Kaspersky Lab ZAO assumes no liability for the content, quality, relevance, or accuracy of any materials used in this document for which the rights are held by third parties, or for any potential damages associated with the use of such documents.
This document uses registered trademarks and service marks, which are the property of their respective owners.
Document revision date: 08.09.2010
© 1997-2010 Kaspersky Lab ZAO. All Rights Reserved.
http://www.kaspersky.com
http://support.kaspersky.com/
3

CONTENT

KASPERSKY LAB END USER LICENSE AGREEMENT ............................................................................................ 10
ABOUT THIS GUIDE ................................................................................................................................................... 15
In this document ..................................................................................................................................................... 15
Document conventions ........................................................................................................................................... 17
ADDITIONAL SOURCES OF INFORMATION ............................................................................................................. 18
Sources of information for independent research ................................................................................................... 18
Discussing Kaspersky Lab applications on the web forum ..................................................................................... 19
Contacting the Sales Department ........................................................................................................................... 19
Contacting the Documentation development group ................................................................................................ 19
KASPERSKY ANTI-VIRUS 2011 ................................................................................................................................. 20
What's new ................................................................................................ ................................ ............................. 20
Ensuring your computer protection ......................................................................................................................... 20
Distribution kit ......................................................................................................................................................... 22
Service for registered users ................................................................................................ .................................... 22
Hardware and software requirements ..................................................................................................................... 22
INSTALLING AND REMOVING THE APPLICATION .................................................................................................. 24
Standard installation procedure .............................................................................................................................. 24
Step 1. Finding a newer version of the application ............................................................................................ 25
Step 2. Making sure the system meets the installation requirements ............................................................... 25
Step 3. Select installation type .......................................................................................................................... 26
Step 4. Reviewing the license agreement ......................................................................................................... 26
Step 5. Kaspersky Security Network Data Collection Statement ...................................................................... 26
Step 6. Searching for incompatible applications ............................................................................................... 26
Step 7. Selecting the destination folder ............................................................................................................. 27
Step 8. Preparing installation ............................................................................................................................ 27
Step 9. Installing ............................................................................................................................................... 28
Step 10. Activating the application .................................................................................................................... 28
Step 11. Registering a user............................................................................................................................... 28
Step 12. Completing the activation ................................................................................................................... 29
Step 13. Wizard completion .............................................................................................................................. 29
Updating the previous version of Kaspersky Anti-Virus .......................................................................................... 29
Step 1. Finding a newer version of the application ............................................................................................ 30
Step 2. Making sure the system meets the installation requirements ............................................................... 30
Step 3. Select installation type .......................................................................................................................... 31
Step 4. Reviewing the license agreement ......................................................................................................... 31
Step 5. Kaspersky Security Network Data Collection Statement ...................................................................... 31
Step 6. Searching for incompatible applications ............................................................................................... 31
Step 7. Selecting the destination folder ............................................................................................................. 32
Step 8. Preparing installation ............................................................................................................................ 32
Step 9. Installing ............................................................................................................................................... 33
Step 10. Completing the activation ................................................................................................................... 33
Step 11. Wizard completion .............................................................................................................................. 33
Non-standard installation scenarios ........................................................................................................................ 33
Getting started ........................................................................................................................................................ 34
U S E R G U I DE
4
Removing the application ....................................................................................................................................... 34
Step 1. Saving data for repeated use ................................................................................................................ 35
Step 2. Confirmation of application removal...................................................................................................... 35
Step 3. Removing the application. Completing removal .................................................................................... 35
MANAGING THE LICENSE ......................................................................................................................................... 36
About End User License Agreement ...................................................................................................................... 36
About license .......................................................................................................................................................... 36
About activation code ............................................................................................................................................. 37
Viewing license information .................................................................................................................................... 38
APPLICATION INTERFACE ........................................................................................................................................ 39
Notification area icon ................................................................ ................................................................ .............. 39
Context menu ......................................................................................................................................................... 40
Kaspersky Anti-Virus main window ......................................................................................................................... 41
Notification windows and pop-up messages ........................................................................................................... 43
Application settings window ................................................................................................ .................................... 45
Kaspersky Gadget .................................................................................................................................................. 46
STARTING AND STOPPING THE APPLICATION ...................................................................................................... 47
Enabling and disabling automatic launch ............................................................................................................... 47
Starting and stopping the application manually ...................................................................................................... 47
COMPUTER PROTECTION STATUS ......................................................................................................................... 48
Diagnostics and elimination of problems in your computer protection .................................................................... 48
Enabling and disabling protection ........................................................................................................................... 50
Pausing and resuming protection ........................................................................................................................... 51
SOLVING TYPICAL TASKS ......................................................................................................................................... 52
How to activate the application ............................................................................................................................... 52
How to purchase or renew a license ....................................................................................................................... 53
What to do when the application's notifications appear .......................................................................................... 54
How to update application databases and modules ............................................................................................... 54
How to scan critical areas of your computer for viruses ......................................................................................... 55
How to scan a file, folder, disk, or another object for viruses .................................................................................. 56
How to perform full scan of your computer for viruses ............................................................................................ 58
Scanning computer for vulnerabilities ..................................................................................................................... 58
How to protect your personal data against theft ..................................................................................................... 59
Protection against phishing ............................................................................................................................... 60
Virtual Keyboard ............................................................................................................................................... 60
What to do if you suspect an object of being infected with a virus .......................................................................... 61
What to do if you suspect your computer of being infected .................................................................................... 62
How to restore an object that has been deleted or disinfected by the application .................................................. 63
How to create and use Rescue Disk ....................................................................................................................... 64
Create Rescue Disk .......................................................................................................................................... 64
Starting the computer from the Rescue Disk..................................................................................................... 66
How to view the report on the application's operation ............................................................................................. 67
How to restore application default settings ............................................................................................................. 67
How to import the application settings to Kaspersky Anti-Virus installed on another computer .............................. 68
How to switch from Kaspersky Anti-Virus to Kaspersky Internet Security .............................................................. 69
Switching to the commercial version ................................................................................................................. 69
Temporarily switching to the trial version .......................................................................................................... 70
C O N T E N T
5
How to use Kaspersky Gadget ............................................................................................................................... 71
ADVANCED APPLICATION SETTINGS ...................................................................................................................... 73
General protection settings ..................................................................................................................................... 74
Restricting access to Kaspersky Anti-Virus ....................................................................................................... 74
Selecting protection mode................................................................................................................................. 75
Scan ....................................................................................................................................................................... 75
Virus scan ......................................................................................................................................................... 75
Changing and restoring security level ......................................................................................................... 77
Creating the scan startup schedule ............................................................................................................. 77
Creating a list of objects to scan.................................................................................................................. 78
Selecting the scan method .......................................................................................................................... 78
Selecting the scan technology ..................................................................................................................... 79
Changing actions to be performed on detected objects .............................................................................. 79
Running scan under a different user account .............................................................................................. 79
Changing the type of objects to scan .......................................................................................................... 80
Scan of compound files ............................................................................................................................... 80
Scan optimization ........................................................................................................................................ 81
Scanning removable drives on connection .................................................................................................. 81
Creating a task shortcut .............................................................................................................................. 82
Vulnerability Scan ............................................................................................................................................. 82
Update .................................................................................................................................................................... 82
Selecting an update source............................................................................................................................... 84
Selecting the update server region .............................................................................................................. 84
Updating the application from a shared folder ............................................................................................. 85
Creating the update startup schedule ............................................................................................................... 85
Rolling back the last update .............................................................................................................................. 86
Scanning Quarantine after update .................................................................................................................... 86
Using the proxy server ................................................................ ...................................................................... 87
Running updates under a different user account .............................................................................................. 87
File Anti-Virus ......................................................................................................................................................... 87
Enabling and disabling File Anti-Virus ............................................................................................................... 88
Automatically pausing File Anti-Virus ................................................................................................................ 88
Creating a protection scope .............................................................................................................................. 89
Changing and restoring security level ............................................................................................................... 90
Selecting scan mode ......................................................................................................................................... 90
Using heuristic analysis .................................................................................................................................... 91
Selecting the scan technology .......................................................................................................................... 91
Changing actions to be performed on detected objects .................................................................................... 91
Scan of compound files ..................................................................................................................................... 92
Scan optimization .............................................................................................................................................. 93
Mail Anti-Virus ........................................................................................................................................................ 93
Enabling and disabling Mail Anti-Virus .............................................................................................................. 94
Creating a protection scope .............................................................................................................................. 95
Changing and restoring security level ............................................................................................................... 95
Using heuristic analysis .................................................................................................................................... 96
Changing actions to be performed on detected objects .................................................................................... 96
Attachment filtering ........................................................................................................................................... 96
Scan of compound files ..................................................................................................................................... 97
U S E R G U I DE
6
Email scanning in Microsoft Office Outlook ....................................................................................................... 97
Email scanning in The Bat! ............................................................................................................................... 97
Web Anti-Virus ........................................................................................................................................................ 98
Enabling and disabling Web Anti-Virus ................................................................................................ ........... 100
Selecting the Web Anti-Virus security level ..................................................................................................... 101
Changing actions to be performed on dangerous objects ............................................................................... 101
Checking URLs using the databases of suspicious and phishing addresses .................................................. 101
Using heuristic analysis .................................................................................................................................. 102
Blocking dangerous scripts ............................................................................................................................. 103
Scan optimization ............................................................................................................................................ 103
Kaspersky URL Advisor .................................................................................................................................. 103
Creating a list of trusted addresses ................................................................................................................. 104
Restoring Web Anti-Virus default settings ....................................................................................................... 105
IM Anti-Virus ......................................................................................................................................................... 105
Enabling and disabling IM Anti-Virus .............................................................................................................. 106
Creating a protection scope ............................................................................................................................ 106
Selecting the scan method .............................................................................................................................. 106
Proactive Defense ................................................................................................................................................ 107
Enabling and disabling Proactive Defense ...................................................................................................... 108
Creating a group of trusted applications ......................................................................................................... 108
Using the dangerous activity list ...................................................................................................................... 108
Changing the dangerous activity monitoring rule ............................................................................................ 109
System Watcher ................................................................................................................................................... 109
Enabling and disabling System Watcher ......................................................................................................... 110
Using patterns of dangerous activity (BSS)..................................................................................................... 110
Rolling back a malicious program's actions .................................................................................................... 111
Network protection ................................................................................................................................................ 111
Encrypted connections scan ........................................................................................................................... 111
Scanning encrypted connections in Mozilla Firefox ................................................................................... 112
Scanning encrypted connections in Opera ................................................................................................ 113
Configuring the proxy server ........................................................................................................................... 114
Creating a list of monitored ports .................................................................................................................... 114
Trusted zone ......................................................................................................................................................... 115
Creating a list of trusted applications .............................................................................................................. 116
Creating the exclusion rules ............................................................................................................................ 116
Performance and compatibility with other applications ................................................................ ......................... 117
Selecting detectable threat categories ............................................................................................................ 117
Advanced disinfection technology ................................................................................................................... 118
Distributing computer resources when scanning for viruses ........................................................................... 118
Running tasks in background mode ................................................................................................................ 119
Application settings in full-screen mode. Gaming Profile ................................................................................ 119
Battery saving ................................................................................................................................................. 120
Kaspersky Anti-Virus Self-Defense ....................................................................................................................... 120
Enabling and disabling self-protection ............................................................................................................ 121
Protection against external control .................................................................................................................. 121
Quarantine and Backup ........................................................................................................................................ 121
Storing quarantine and backup objects ........................................................................................................... 122
Working with quarantined objects ................................................................................................................... 122
Additional tools for better protection of your computer ......................................................................................... 124
C O N T E N T
7
Privacy Cleaner ............................................................................................................................................... 125
Browser Configuration .................................................................................................................................... 126
Rolling back the changes, made by the wizards ............................................................................................. 127
Reports ................................................................................................................................................................. 128
Creating a report for the selected component ................................................................................................. 129
Data filtering ................................................................................................................................ .................... 129
Events search ................................................................................................................................................. 130
Saving a report to file ...................................................................................................................................... 131
Storing reports ................................................................................................................................................ 131
Clearing application reports ............................................................................................................................ 132
Logging non-critical events ............................................................................................................................. 132
Configuring the reminder of report availability ................................................................................................. 132
Application appearance ........................................................................................................................................ 132
Application skin ............................................................................................................................................... 133
Active interface elements ................................................................................................................................ 133
News Agent ..................................................................................................................................................... 133
Notifications .......................................................................................................................................................... 134
Enabling and disabling notifications ................................................................................................................ 134
Configuring the notification method ................................................................................................................. 135
Participating in the Kaspersky Security Network .................................................................................................. 136
VALIDATING KASPERSKY ANTI-VIRUS SETTINGS ............................................................................................... 137
Test "virus" EICAR and its modifications .............................................................................................................. 137
Testing the HTTP traffic protection ....................................................................................................................... 138
Testing the SMTP traffic protection ...................................................................................................................... 139
Validating File Anti-Virus settings ......................................................................................................................... 139
Validating virus scan task settings ........................................................................................................................ 139
Validating Anti-Spam settings ............................................................................................................................... 140
CONTACTING THE TECHNICAL SUPPORT SERVICE ........................................................................................... 141
My Kaspersky Account ......................................................................................................................................... 141
Technical support by phone .................................................................................................................................. 142
Creating a system state report .............................................................................................................................. 142
Creating a trace file .............................................................................................................................................. 143
Sending data files ................................................................................................................................................. 143
AVZ script execution ............................................................................................................................................. 144
APPENDIX ................................................................................................................................................................. 146
Subscription statuses ........................................................................................................................................... 146
Kaspersky Anti-Virus notification list ..................................................................................................................... 148
Notifications in any protection mode ............................................................................................................... 148
Special treatment required ........................................................................................................................ 148
Removable drive connected ...................................................................................................................... 149
New network detected ............................................................................................................................... 149
Untrusted certificate detected .................................................................................................................... 150
Potentially dangerous application detected ............................................................................................... 150
Quarantined file not infected ..................................................................................................................... 151
New product version released ................................................................................................................... 151
Technical update released ........................................................................................................................ 152
Technical update downloaded ................................................................................................................... 152
Downloaded technical update not installed ............................................................................................... 152
U S E R G U I DE
8
License expired ......................................................................................................................................... 153
Notifications in interactive protection mode ..................................................................................................... 153
Network activity of an application has been detected ................................................................ ................ 155
Malicious object detected .......................................................................................................................... 155
Vulnerability detected ................................................................................................................................ 156
Dangerous activity detected in the system ................................................................................................ 157
Rolling back the changes made by a dangerous application ..................................................................... 157
Malicious application detected .................................................................................................................. 158
Malicious application or legal application that may be used by intruders detected .................................... 158
Suspicious / malicious link detected .......................................................................................................... 159
Dangerous object detected in traffic .......................................................................................................... 160
Attempt to access a phishing website detected ......................................................................................... 160
Attempt to access the system registry detected ........................................................................................ 160
Object cannot be disinfected ..................................................................................................................... 161
Hidden process detected ........................................................................................................................... 161
Working with the application from the command line ............................................................................................ 162
Activating the application ................................................................................................................................ 164
Starting the application ................................................................................................................................... 164
Stopping the application .................................................................................................................................. 164
Managing application components and tasks ................................................................................................. 165
Virus scan ....................................................................................................................................................... 166
Updating the application ................................................................................................................................. 169
Rolling back the last update ............................................................................................................................ 170
Exporting protection settings ........................................................................................................................... 170
Importing protection settings ........................................................................................................................... 170
Creating a trace file ......................................................................................................................................... 171
Viewing Help ................................................................................................................................................... 171
Return codes of the command line ................................................................................................................. 172
GLOSSARY ............................................................................................................................................................... 173
KASPERSKY LAB ZAO ............................................................................................................................................. 182
INFORMATION ABOUT THIRD-PARTY CODE ........................................................................................................ 183
Program code ....................................................................................................................................................... 183
AGG 2.4 .......................................................................................................................................................... 185
ADOBE ABI-SAFE CONTAINERS 1.0 ............................................................................................................ 186
BOOST 1.39.0 ................................................................................................................................................ 186
BZIP2/LIBBZIP2 1.0.5 ..................................................................................................................................... 186
CONVERTUTF ............................................................................................................................................... 186
CURL 7.19.4 ................................................................................................................................................... 187
DEELX - REGULAR EXPRESSION ENGINE 1.2 ........................................................................................... 187
EXPAT 1.2, 2.0.1 ............................................................................................................................................ 187
FASTSCRIPT 1.90 .......................................................................................................................................... 188
FDLIBM 5.3 ..................................................................................................................................................... 188
FLEX: THE FAST LEXICAL ANALYZER 2.5.4 ............................................................................................... 188
FMT.H ............................................................................................................................................................. 188
GDTOA ........................................................................................................................................................... 188
GECKO SDK 1.8, 1.9, 1.9.1 ............................................................................................................................ 189
ICU4C 4.0.1 .................................................................................................................................................... 197
INFO-ZIP 5.51 ................................................................................................................................................. 197
C O N T E N T
9
JSON4LUA 0.9.30 .......................................................................................................................................... 198
LIBGD 2.0.35 .................................................................................................................................................. 198
LIBJPEG 6B ................................................................................................................................ .................... 199
LIBM (lrint.c v 1.4, lrintf.c,v 1.5) ....................................................................................................................... 200
LIBPNG 1.2.8, 1.2.9, 1.2.42 ............................................................................................................................ 201
LIBUNGIF 3.0 ................................................................................................................................................. 201
LIBXDR ........................................................................................................................................................... 201
LREXLIB 2.4 ................................................................................................................................................... 202
LUA 5.1.4 ........................................................................................................................................................ 202
LZMALIB 4.43 ................................................................................................................................................. 203
MD5.H ............................................................................................................................................................. 203
MD5.H ............................................................................................................................................................. 203
MD5-CC 1.02 .................................................................................................................................................. 203
OPENSSL 0.9.8K ............................................................................................................................................ 204
PCRE 7.7, 7.9 ................................................................................................................................................. 205
SHA1.C 1.2 ..................................................................................................................................................... 207
STLPORT 5.2.1 .............................................................................................................................................. 207
SVCCTL.IDL ................................................................................................................................................... 207
TINYXML 2.5.3 ............................................................................................................................................... 207
VISUAL STUDIO CRT SOURCE CODE 8.0 ................................................................................................... 207
WINDOWS TEMPLATE LIBRARY 8.0 ............................................................................................................ 208
ZLIB 1.0.4, 1.0.8, 1.2.2, 1.2.3.......................................................................................................................... 212
Development tools ................................................................................................................................................ 212
MS DDK 4.0, 2000 .......................................................................................................................................... 212
MS WDK 6000, 6001, 6002 ............................................................................................................................ 212
WINDOWS INSTALLER XML (WIX) TOOLSET 3.0 ....................................................................................... 212
Distributed program code ..................................................................................................................................... 216
GRUB4DOS 0.4.4-2009-10-16 (FILE GRUB.EXE) ......................................................................................... 217
SYSLINUX 3.86 (FILE SYSLINUX.EXE) ........................................................................................................ 221
Other information .................................................................................................................................................. 225
INDEX ........................................................................................................................................................................ 226
10

KASPERSKY LAB END USER LICENSE AGREEMENT

IMPORTANT LEGAL NOTICE TO ALL USERS: CAREFULLY READ THE FOLLOWING LEGAL AGREEMENT BEFORE YOU START USING THE SOFTWARE.
BY CLICKING THE ACCEPT BUTTON IN THE LICENSE AGREEMENT WINDOW OR BY ENTERING CORRESPONDING SYMBOL(-S) YOU CONSENT TO BE BOUND BY THE TERMS AND CONDITIONS OF THIS AGREEMENT. SUCH ACTION IS A SYMBOL OF YOUR SIGNATURE AND YOU ARE CONSENTING TO BE BOUND
BY AND ARE BECOMING A PARTY TO THIS AGREEMENT AND AGREE THAT THIS AGREEMENT IS ENFORCEABLE LIKE ANY WRITTEN NEGOTIATED AGREEMENT SIGNED BY YOU. IF YOU DO NOT AGREE TO
ALL OF THE TERMS AND CONDITIONS OF THIS AGREEMENT, CANCEL THE INSTALLATION OF THE SOFTWARE AND DO NOT INSTALL THE SOFTWARE.
AFTER CLICKING THE ACCEPT BUTTON IN THE LICENSE AGREEMENT WINDOW OR AFTER ENTERING CORRESPONDING SYMBOL(-S) YOU HAVE THE RIGHT TO USE THE SOFTWARE IN ACCORDANCE WITH THE TERMS AND CONDITIONS OF THIS AGREEMENT.
1. Definitions
1.1. Software means software including any Updates and related materials.
1.2. Rightholder (owner of all rights, whether exclusive or otherwise to the Software) means Kaspersky Lab ZAO, a company incorporated according to the laws of the Russian Federation.
1.3. Computer(s) means hardware(s), including personal computers, laptops, workstations, personal digital assistants, ‘smart phones’, hand-held devices, or other electronic devices for which the Software was designed where the Software will be installed and/or used.
1.4. End User (You/Your) means individual(s) installing or using the Software on his or her own behalf or who is legally using a copy of the Software; or, if the Software is being downloaded or installed on behalf of an organization, such as an employer, "You" further means the organization for which the Software is downloaded or installed and it is represented hereby that such organization has authorized the person accepting this agreement to do so on its behalf. For purposes hereof the term "organization," without limitation, includes any partnership, limited liability company, corporation, association, joint stock company, trust, joint venture, labor organization, unincorporated organization, or governmental authority.
1.5. Partner(s) means organizations or individual(s), who distributes the Software based on an agreement and license with the Rightholder.
1.6. Update(s) means all upgrades, revisions, patches, enhancements, fixes, modifications, copies, additions or maintenance packs etc.
1.7. User Manual means user manual, administrator guide, reference book and related explanatory or other materials.
2. Grant of License
2.1. The Rightholder hereby grants You a non-exclusive license to store, load, install, execute, and display (to "use") the Software on a specified number of Computers in order to assist in protecting Your Computer on which the Software is installed, from threats described in the User Manual, according to the all technical requirements described in the User Manual and according to the terms and conditions of this Agreement (the "License") and you accept this License: Trial Version. If you have received, downloaded and/or installed a trial version of the Software and are hereby granted an evaluation license for the Software, you may use the Software only for evaluation purposes and only during the single applicable evaluation period, unless otherwise indicated, from the date of the initial installation. Any use of the Software for other purposes or beyond the applicable evaluation period is strictly prohibited.
Multiple Environment Software; Multiple Language Software; Dual Media Software; Multiple Copies; Bundles. If you use different versions of the Software or different language editions of the Software, if you receive the Software on multiple media, if you otherwise receive multiple copies of the Software, or if you received the Software bundled with other software, the total permitted number of your Computers on which all versions of the Software are installed shall correspond to the number of licenses you have obtained from the Rightholder provided that unless the licensing terms provide otherwise, each purchased license entitles you to install and use the Software on such a number of Computer(s) as is specified in Clauses 2.2 and 2.3.
K A S P E R S K Y L AB E N D U S E R L I C E N S E A G R E E M E N T
11
2.2. If the Software was purchased on a physical medium You have the right to use the Software for protection of such a number of Computer(s) as is specified on the Software package.
2.3. If the Software was purchased via the Internet You have the right to use the Software for protection of such a number of Computers that was specified when You purchased the License to the Software.
2.4. You have the right to make a copy of the Software solely for back-up purposes and only to replace the legally owned copy if such copy is lost, destroyed or becomes unusable. This back-up copy cannot be used for other purposes and must be destroyed when you lose the right to use the Software or when Your license expires or is terminated for any other reason according to the legislation in force in the country of your principal residence or in the country where You are using the Software.
2.5. You can transfer the non-exclusive license to use the Software to other individuals or legal entities within the scope of the license granted from the Rightholder to You provided that the recipient agrees to be bound by all the terms and conditions of this Agreement and substitute you in full in the license granted from the Rightholder. In case You fully transfer the rights granted from the Rightholder to use the Software You must destroy all copies of the Software including the back-up copy. If You are a recipient of a transferred license You must agree to abide by all the terms and conditions of this Agreement. If You do not agree to be bound by all the terms and conditions of this Agreement, You may not install and/or use the Software. You also agree as the recipient of a transferred license that You do not have any additional or better rights than what the original End User who purchased the Software from the Rightholder, did.
2.6. From the time of the Software activation or after license key file installation (with the exception of a trial version of the Software) You have the right to receive the following services for the defined period specified on the Software package (if the Software was purchased on a physical medium) or specified during purchase (if the Software was purchased via the Internet):
- Updates of the Software via the Internet when and as the Rightholder publishes them on its website or
through other online services. Аny Updates that you may receive become part of the Software and the
terms and conditions of this Agreement apply to them;
- Technical Support via the Internet and Technical Support telephone hotline.
3. Activation and Term
3.1. If You modify Your Computer or make changes to other vendors’ software installed on it, You may be required by the Rightholder to repeat activation of the Software or license key file installation. The Rightholder reserves the right to use any means and verification procedures to verify the validity of the License and/or legality of a copy of the Software installed and/or used on Your Computer.
3.2. If the Software was purchased on a physical medium, the Software can be used, upon your acceptance of this Agreement, for the period that is specified on the package commencing upon acceptance of this Agreement.
3.3. If the Software was purchased via the Internet, the Software can be used, upon your acceptance of this Agreement, for the period that was specified during purchase.
3.4. You have the right to use a trial version of the Software as provided in Clause 2.1 without any charge for the single applicable evaluation period (30 days) from the time of the Software activation according to this Agreement provided that the trial version does not entitle You Updates and Technical support via the Internet and Technical support telephone hotline.
3.5. Your License to Use the Software is limited to the period of time as specified in Clauses 3.2 or 3.3 (as applicable) and the remaining period can be viewed via means described in User Manual.
3.6. If You have purchased the Software that is intended to be used on more than one Computer then Your License to Use the Software is limited to the period of time starting from the date of activation of the Software or license key file installation on the first Computer.
3.7. Without prejudice to any other remedy in law or in equity that the Rightholder may have, in the event of any breach by You of any of the terms and conditions of this Agreement, the Rightholder shall at any time without notice to You be entitled to terminate this License to use the Software without refunding the purchase price or any part thereof.
3.8. You agree that in using the Software and in using any report or information derived as a result of using this Software, you will comply with all applicable international, national, state, regional and local laws and regulations, including, without limitation, privacy, copyright, export control and obscenity law.
3.9. Except as otherwise specifically provided herein, you may not transfer or assign any of the rights granted to you under this Agreement or any of your obligations pursuant hereto.
4. Technical Support
The Technical Support described in Clause 2.6 of this Agreement is provided to You when the latest Update of the Software is installed (except for a trial version of the Software). Technical support service: http://support.kaspersky.com
5. Information Collection
5.1. Having agreed with the terms and conditions of this Agreement You consent to provide information to the Rightholder about executable files and their checksums to improve Your security protection level.
U S E R G U I DE
12
5.2. In order to improve security awareness about new threats and their sources and in order to improve Your security protection level the Rightholder, with your consent, that has been explicitly confirmed in the Kaspersky Security Network Data Collection Statement, is expressly entitled to receives such information. You can deactivate the Kaspersky Security Network service during installation. Also, You can activate and deactivate the Kaspersky Security Network service at any time in the Software options page.
You further acknowledge and agree that any information gathered by Rightholder can be used to track and publish reports on security risk trends in the Rightholder’s sole and exclusive discretion.
5.3. The Software does not process any personally identifiable data and does not combine the processing data with any personal information.
5.4. If you do not wish for the information collected by the Software to be sent to the Rightholder, You should not activate and/or de-activate the Kaspersky Security Network service.
6. Limitations
6.1. You shall not emulate, clone, rent, lend, lease, sell, modify, decompile, or reverse engineer the Software or disassemble or create derivative works based on the Software or any portion thereof with the sole exception of a non-waivable right granted to You by applicable legislation, and you shall not otherwise reduce any part of the Software to human readable form or transfer the licensed Software, or any subset of the licensed Software, nor permit any third party to do so, except to the extent the foregoing restriction is expressly prohibited by applicable law. Neither Software’s binary code nor source may be used or reverse engineered to re-create the program algorithm, which is proprietary. All rights not expressly granted herein are reserved by Rightholder and/or its suppliers, as applicable. Any such unauthorized use of the Software shall result in immediate and automatic termination of this Agreement and the License granted hereunder and may result in criminal and/or civil prosecution against You.
6.2. You shall not transfer the rights to use the Software to any third party except as set forth in Clause 2.5 of this Agreement.
6.3. You shall not provide the activation code and/or license key file to third parties or allow third parties access to the activation code and/or license key which are deemed confidential data of Rightholder and you shall exercise reasonable care in protecting the activation code and/or license key in confidence provided that you can transfer the activation code and/or license key to third parties as set forth in Clause 2.5 of this Agreement.
6.4. You shall not rent, lease or lend the Software to any third party.
6.5. You shall not use the Software in the creation of data or software used for detection, blocking or treating threats described in the User Manual.
6.6. The Rightholder has the right to block the key file or to terminate Your License to use the Software in the event You breach any of the terms and conditions of this Agreement and without any refund to You.
6.7. If You are using the trial version of the Software You do not have the right to receive the Technical Support
specified in Clause 4 of this Agreement and You don’t have the right to transfer the license or the rights to use
the Software to any third party.
7. Limited Warranty and Disclaimer
7.1. The Rightholder guarantees that the Software will substantially perform according to the specifications and descriptions set forth in the User Manual provided however that such limited warranty shall not apply to the following: (w) Your Computer’s deficiencies and related infringement for which Rightholder’s expressly disclaims any warranty responsibility; (x) malfunctions, defects, or failures resulting from misuse; abuse; accident; neglect; improper installation, operation or maintenance; theft; vandalism; acts of God; acts of terrorism; power failures or surges; casualty; alteration, non-permitted modification, or repairs by any party other than Rightholder; or any other third parties’ or Your actions or causes beyond Rightholder’s reasonable control; (y) any defect not made known by You to Rightholder as soon as practical after the defect first appears; and (z) incompatibility caused by hardware and/or software components installed on Your Computer.
7.2. You acknowledge, accept and agree that no software is error free and You are advised to back-up the Computer, with frequency and reliability suitable for You.
7.3. The Rightholder does not provide any guarantee that the Software will work correctly in case of violations of the terms described in the User Manual or in this Agreement.
7.4. The Rightholder does not guarantee that the Software will work correctly if You do not regularly download Updates specified in Clause 2.6 of this Agreement.
7.5. The Rightholder does not guarantee protection from the threats described in the User Manual after the expiration of the period specified in Clauses 3.2 or 3.3 of this Agreement or after the License to use the Software is terminated for any reason.
7.6. THE SOFTWARE IS PROVIDED "AS IS" AND THE RIGHTHOLDER MAKES NO REPRESENTATION AND GIVES NO WARRANTY AS TO ITS USE OR PERFORMANCE. EXCEPT FOR ANY WARRANTY, CONDITION, REPRESENTATION OR TERM THE EXTENT TO WHICH CANNOT BE EXCLUDED OR LIMITED BY APPLICABLE LAW THE RIGHTHOLDER AND ITS PARTNERS MAKE NO WARRANTY, CONDITION, REPRESENTATION, OR TERM (EXPRESSED OR IMPLIED, WHETHER BY STATUTE, COMMON LAW, CUSTOM, USAGE OR OTHERWISE) AS TO ANY MATTER INCLUDING, WITHOUT LIMITATION, NONINFRINGEMENT OF THIRD PARTY RIGHTS, MERCHANTABILITY, SATISFACTORY
K A S P E R S K Y L AB E N D U S E R L I C E N S E A G R E E M E N T
13
QUALITY, INTEGRATION, OR APPLICABILITY FOR A PARTICULAR PURPOSE. YOU ASSUME ALL FAULTS, AND THE ENTIRE RISK AS TO PERFORMANCE AND RESPONSIBILITY FOR SELECTING THE SOFTWARE TO ACHIEVE YOUR INTENDED RESULTS, AND FOR THE INSTALLATION OF, USE OF, AND RESULTS OBTAINED FROM THE SOFTWARE. WITHOUT LIMITING THE FOREGOING PROVISIONS, THE RIGHTHOLDER MAKES NO REPRESENTATION AND GIVES NO WARRANTY THAT THE SOFTWARE WILL BE ERROR-FREE OR FREE FROM INTERRUPTIONS OR OTHER FAILURES OR THAT THE SOFTWARE WILL MEET ANY OR ALL YOUR REQUIREMENTS WHETHER OR NOT DISCLOSED TO THE RIGHTHOLDER .
8. Exclusion and Limitation of Liability
TO THE MAXIMUM EXTENT PERMITTED BY APPLICABLE LAW, IN NO EVENT SHALL THE RIGHTHOLDER OR ITS PARTNERS BE LIABLE FOR ANY SPECIAL, INCIDENTAL, PUNITIVE, INDIRECT, OR CONSEQUENTIAL DAMAGES WHATSOEVER (INCLUDING, BUT NOT LIMITED TO, DAMAGES FOR LOSS OF PROFITS OR CONFIDENTIAL OR OTHER INFORMATION, FOR BUSINESS INTERRUPTION, FOR LOSS OF PRIVACY, FOR CORRUPTION, DAMAGE AND LOSS OF DATA OR PROGRAMS, FOR FAILURE TO MEET ANY DUTY INCLUDING ANY STATUTORY DUTY, DUTY OF GOOD FAITH OR DUTY OF REASONABLE CARE, FOR NEGLIGENCE, FOR ECONOMIC LOSS, AND FOR ANY OTHER PECUNIARY OR OTHER LOSS WHATSOEVER) ARISING OUT OF OR IN ANY WAY RELATED TO THE USE OF OR INABILITY TO USE THE SOFTWARE, THE PROVISION OF OR FAILURE TO PROVIDE SUPPORT OR OTHER SERVICES, INFORMATON, SOFTWARE, AND RELATED CONTENT THROUGH THE SOFTWARE OR OTHERWISE ARISING OUT OF THE USE OF THE SOFTWARE, OR OTHERWISE UNDER OR IN CONNECTION WITH ANY PROVISION OF THIS AGREEMENT, OR ARISING OUT OF ANY BREACH OF CONTRACT OR ANY TORT (INCLUDING NEGLIGENCE, MISREPRESENTATION, ANY STRICT LIABILITY OBLIGATION OR DUTY), OR ANY BREACH OF STATUTORY DUTY, OR ANY BREACH OF WARRANTY OF THE RIGHTHOLDER OR ANY OF ITS PARTNERS, EVEN IF THE RIGHTHOLDER OR ANY PARTNER HAS BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES.
YOU AGREE THAT IN THE EVENT THE RIGHTHOLDER AND/OR ITS PARTNERS ARE FOUND LIABILE, THE LIABILITY OF THE RIGHTHOLDER AND/OR ITS PARTNERS SHALL BE LIMITED BY THE COSTS OF THE SOFTWARE. IN NO CASE SHALL THE LIABILITY OF THE RIGHTHOLDER AND/OR ITS PARTNERS EXCEED THE FEES PAID FOR THE SOFTWARE TO THE RIGHTHOLDER OR THE PARTNER (AS MAY BE APPLICABLE).
NOTHING IN THIS AGREEMENT EXCLUDES OR LIMITS ANY CLAIM FOR DEATH AND PERSONAL INJURY. FURTHER IN THE EVENT ANY DISCLAIMER, EXCLUSION OR LIMITATION IN THIS AGREEMENT CANNOT BE EXLUDED OR LIMITED ACCORDING TO APPLICABLE LAW THEN ONLY SUCH DISCLAIMER, EXCLUSION OR LIMITATION SHALL NOT APPLY TO YOU AND YOU CONTINUE TO BE BOUND BY ALL THE REMAINING DISCLAIMERS, EXCLUSIONS AND LIMITATIONS.
9. GNU and Other Third Party Licenses
The Software may include some software programs that are licensed (or sublicensed) to the user under the GNU General Public License (GPL) or other similar free software licenses which, among other rights, permit the user to copy, modify and redistribute certain programs, or portions thereof, and have access to the source code ("Open Source Software"). If such licenses require that for any software, which is distributed to someone in an executable binary format, that the source code also be made available to those users, then the source code should be made available by sending the request to source@kaspersky.com or the source code is supplied with the Software. If any Open Source Software licenses require that the Rightholder provide rights to use, copy or modify an Open Source Software program that are broader than the rights granted in this Agreement, then such rights shall take precedence over the rights and restrictions herein.
10. Intellectual Property Ownership
10.1 You agree that the Software and the authorship, systems, ideas, methods of operation, documentation and other information contained in the Software, are proprietary intellectual property and/or the valuable trade secrets of the Rightholder or its partners and that the Rightholder and its partners, as applicable, are protected by civil and criminal law, and by the law of copyright, trade secret, trademark and patent of the Russian Federation, European Union and the United States, as well as other countries and international treaties. This Agreement does not grant to You any rights to the intellectual property including any the Trademarks or Service Marks of the Rightholder and/or its partners ("Trademarks"). You may use the Trademarks only insofar as to identify printed output produced by the Software in accordance with accepted trademark practice, including identification of the Trademark owner’s name. Such use of any Trademark does not give you any rights of ownership in that Trademark. The Rightholder and/or its partners own and retain all right, title, and interest in and to the Software, including without limitation any error corrections, enhancements, Updates or other modifications to the Software, whether made by the Rightholder or any third party, and all copyrights, patents, trade secret rights, trademarks, and other intellectual property rights therein. Your possession, installation or use of the Software does not transfer to you any title to the intellectual property in the Software, and you will not acquire any rights to the Software except as expressly set forth in this Agreement. All copies of the Software
U S E R G U I DE
14
made hereunder must contain the same proprietary notices that appear on and in the Software. Except as stated herein, this Agreement does not grant you any intellectual property rights in the Software and you acknowledge that the License, as further defined herein, granted under this Agreement only provides you with a right of limited use under the terms and conditions of this Agreement. Rightholder reserves all rights not expressly granted to you in this Agreement.
10.2 You acknowledge that the source code, activation code and/or license key file for the Software are proprietary to the Rightholder and constitutes trade secrets of the Rightholder. You agree not to modify, adapt, translate, reverse engineer, decompile, disassemble or otherwise attempt to discover the source code of the Software in any way.
10.3 You agree not to modify or alter the Software in any way. You may not remove or alter any copyright notices or other proprietary notices on any copies of the Software.
11. Governing Law; Arbitration
This Agreement will be governed by and construed in accordance with the laws of the Russian Federation without reference to conflicts of law rules and principles. This Agreement shall not be governed by the United Nations Convention on Contracts for the International Sale of Goods, the application of which is expressly excluded. Any dispute arising out of the interpretation or application of the terms of this Agreement or any breach thereof shall, unless it is settled by direct negotiation, be settled by in the Tribunal of International Commercial Arbitration at the Russian Federation Chamber of Commerce and Industry in Moscow, the Russian Federation. Any award rendered by the arbitrator shall be final and binding on the parties and any judgment on such arbitration award may be enforced in any court of competent jurisdiction. Nothing in this Section 11 shall prevent a Party from seeking or obtaining equitable relief from a court of competent jurisdiction, whether before, during or after arbitration proceedings.
12. Period for Bringing Actions
No action, regardless of form, arising out of the transactions under this Agreement, may be brought by either party hereto more than one (1) year after the cause of action has occurred, or was discovered to have occurred, except that an action for infringement of intellectual property rights may be brought within the maximum applicable statutory period.
13. Entire Agreement; Severability; No Waiver
This Agreement is the entire agreement between you and Rightholder and supersedes any other prior agreements, proposals, communications or advertising, oral or written, with respect to the Software or to subject matter of this Agreement. You acknowledge that you have read this Agreement, understand it and agree to be bound by its terms. If any provision of this Agreement is found by a court of competent jurisdiction to be invalid, void, or unenforceable for any reason, in whole or in part, such provision will be more narrowly construed so that it becomes legal and enforceable, and the entire Agreement will not fail on account thereof and the balance of the Agreement will continue in full force and effect to the maximum extent permitted by law or equity while preserving, to the fullest extent possible, its original intent. No waiver of any provision or condition herein shall be valid unless in writing and signed by you and an authorized representative of Rightholder provided that no waiver of any breach of any provisions of this Agreement will constitute a waiver of any prior, concurrent or subsequent breach. Rightholder’s failure to insist upon or enforce strict performance of any provision of this Agreement or any right shall not be construed as a waiver of any such provision or right.
14. Contact Information
Should you have any questions concerning this Agreement, or if you desire to contact the Rightholder for any reason, please contact our Customer Service Department at:
Kaspersky Lab ZAO, 10 build. 1, 1st Volokolamsky Proezd Moscow, 123060 Russian Federation Tel: +7-495-797-8700 Fax: +7-495-645-7939 E-mail: info@kaspersky.com Web site: www.kaspersky.com
© 1997-2009 Kaspersky Lab ZAO. All Rights Reserved. The Software and any accompanying documentation are copyrighted and protected by copyright laws and international copyright treaties, as well as other intellectual property laws and treaties.
15

ABOUT THIS GUIDE

IN THIS SECTION:
In this document .............................................................................................................................................................. 15
Document conventions .................................................................................................................................................... 16
This document is the Guide on installing, configuring and operating Kaspersky Anti-Virus 2011 application (hereinafter referred to as Kaspersky Anti-Virus). The document is designed for a wide audience. Users of the application should be able to operate a personal computer at a basic level: to be familiar with the Microsoft Windows operating system interface and navigation within it, and to know how to use popular email and Internet programs, such as Microsoft Office Outlook and Microsoft Internet Explorer.
The aim of the document:
to help users to install the application on the computer on their own, and activate and configure it with regard to
user's required tasks;
to provide a readily available source of information on application related issues;
to provide alternative sources of information about the application and the means of getting technical support.

IN THIS DOCUMENT

This document contains the following sections:

Additional sources of information

This section contains a description of the data on the sources of additional information regarding the application and an Internet-resource where you can discuss the application, share ideas, ask questions and receive answers.

Kaspersky Anti-Virus 2011

This section describes the application's new features, and gives brief information about its individual components and basic functions. It reveals the function of each part of the package supplied and a range of services available to registered users of the application. The section contains hardware and software requirements which the computer should meet to have Kaspersky Anti-Virus installed on it.

Installing and removing the application

This section contains instructions that help you install the application on your computer or update the previous version. This section also describes the application's uninstall procedure.

Managing the license

This section contains information regarding the basic concepts used in the context of the application licensing. In this section, you will also learn about the automatic renewal of the license and where to view information regarding the current license.
U S E R G U I DE
16

Application interface

This section contains a description of the basic GUI components of the application: icon and context menu, main application window, settings window, and notification windows.

Starting and stopping the application

This section contains information regarding the application's startup and shutdown.

Computer protection status

This section contains information about how to find out whether your computer is currently protected, or if its security is under threat, as well as how to eliminate emerging threats. In this section, you also can find information about enabling, disabling, and pausing protection when working with Kaspersky Anti-Virus.

Solving typical tasks

This section contains instructions on the basic tasks encountered by most users when working with the application.

Advanced application settings

This section provides detailed information about each application component and describes the operation and configuration algorithms for each component.

Checking the consistency of the application settings

This section contains recommendations in how to check if the application components run correctly.

Contacting the Technical Support Service

This section contains recommendations with respect for making contact with Kaspersky Lab from My Kaspersky Account on the Technical Support Service website and by phone.

Appendix

This section includes reference information which complements the document text.

Glossary

This section contains the list of terms used in the document and their definitions.

A B O U T T H I S G U I D E
17
SAMPLE TEXT
DOCUMENT CONVENTIONS DESCRIPTION
Note that...
Warnings are highlighted in red and enclosed in frames. Warnings contain important information, for example, related to computer operations critical to its safety.
It is recommended to use...
Notes are enclosed in frames. Notes contain additional and reference information.
Example:
...
Examples are given by section, on a yellow background, and under the heading "Example".
Update means...
New terms are marked by italics.
ALT+F4
Names of keyboard keys appear in a bold typeface and are capitalized. Names of the keys followed by a "plus" sign indicate the use of a key
combination.
Enable
Names of interface elements, for example, input fields, menu commands, buttons, etc., are marked in a bold typeface.
To configure a task schedule:
Instructions' introductory phrases are in italics.
help
Texts in the command line or texts of messages displayed on the screen have a special font.
<IP address of your computer>
Variables are enclosed in angle brackets. The corresponding values are placed in each case instead of variables, angle brackets are omitted.

DOCUMENT CONVENTIONS

Document conventions used in this guide are described in the table below.
Table 1. Document conventions
18

ADDITIONAL SOURCES OF INFORMATION

IN THIS SECTION:
Sources of information for independent research ............................................................................................................ 18
Discussing Kaspersky Lab applications on the web forum .............................................................................................. 19
Contacting the Sales Department ................................................................................................................................... 19
Contacting the Documentation development group ........................................................................................................ 19
If you have any questions regarding choosing, purchasing, installing or using Kaspersky Anti-Virus, various sources of information are available at your convenience. You can choose the most suitable information source, depending on the question level of importance and urgency.

SOURCES OF INFORMATION FOR INDEPENDENT RESEARCH

Kaspersky Lab provides the following sources of information about the application:
application page on the Kaspersky Lab website;
application page on the Technical Support Service website (in the Knowledge Base);
FastTrack Support service page;
help system.

Application page on the Kaspersky Lab website

This page (http://www.kaspersky.com/kaspersky_anti-virus) provides you with general information on the application, its features and options.

Application page on the Technical Support Service website (Knowledge Base)

On this page (http://support.kaspersky.com/kav2011) you will find the articles created by Technical Support Service specialists.
These articles contain useful information, advice and FAQs on purchasing, installing and using the application. They are sorted by subject, for example, Managing the product license, Configuring Update, or Eliminating operation failures. The articles may provide answers to the questions that concern not only this application but other Kaspersky Lab products as well. The articles may also contain news from the Technical Support Service.

FastTrack Support service

On this service page, you can find the database of FAQs with answers regarding the application's operation. To use this service, you need an Internet connection.
To go to the service page, in the main application window, click the Support link and in the window that opens click the FastTrack Support button.

Help system

The application installation package includes the full and context help file. It contains information about how to manage computer protection (view protection status, scan various computer areas for viruses, and execute other
A D D I T I O N A L S O U R C E S O F I N F O R M A T I ON
19
tasks). The full help and context help file provides you with information about all of the application's, listing and describing the settings and tasks related to each of them.
To open the help file, click the Help button in the required window, or press the F1 key.
DISCUSSING KASPERSKY LAB APPLICATIONS ON THE
WEB FORUM
If your question does not require an urgent answer, you can discuss it with Kaspersky Lab specialists and other users in our forum at http://forum.kaspersky.com.
In this forum you can view existing topics, leave your comments, create new topics or use the search engine.

CONTACTING THE SALES DEPARTMENT

If you have any questions about selecting or purchasing Kaspersky Anti-Virus or extending your license, you can contact the Sales Department http://www.kaspersky.com/contacts.
You can also send your questions to the Sales Department by email at sales@kaspersky.com.
CONTACTING THE DOCUMENTATION DEVELOPMENT
GROUP
If you have any questions regarding documentation, have found an error or you would like to leave feedback, you can contact the Documentation development group. To contact the Documentation development group, send an email to docfeedback@kaspersky.com. Please use "Kaspersky Help Feedback: Kaspersky Anti-Virus" as the subject of your message.
20

KASPERSKY ANTI-VIRUS 2011

IN THIS SECTION:
What's new ...................................................................................................................................................................... 20
Ensuring your computer protection ................................................................................................................................. 20
Distribution kit .................................................................................................................................................................. 22
Service for registered users ............................................................................................................................................ 22
Hardware and software requirements ............................................................................................................................. 22
This section describes the application's new features, and gives brief information about its individual components and basic functions. It reveals the function of each part of the package supplied and a range of services available to registered users of the application. The section contains hardware and software requirements which the computer should meet to have Kaspersky Anti-Virus installed on it.

WHAT'S NEW

The following innovations have been introduced in Kaspersky Anti-Virus:
New protection component of the System Monitor (see page 109) provides monitoring of applications activity in
the system and provides detailed information to other protection components. Due to the recoverable history of the applications' activity, the component can roll back the results of a malicious application's actions when such malicious activity is detected by various protection components.
With the help of the Idle Scan (see page 118) module the computer may be scanned for viruses while you are
not working on it, then scanning will stop when you return to work. This allows you to perform a scan regularly and at the same time prevents a reduction in the computer running speed when you need it.
When Kaspersky Anti-Virus is installed on your computer, you can temporarily switch to Kaspersky Internet
Security to assess its features. You can also purchase a license. You will not have to install Kaspersky Internet Security apart from Kaspersky Anti-Virus.
When using Kaspersky Anti-Virus on a computer running under Microsoft Windows Vista or Microsoft
Windows 7, you can also use the Kaspersky Gadget (hereinafter gadget). Kaspersky Gadget is designed for quick access to the main features of the application: protection status indication, virus scan of objects, application operation reports, etc.

ENSURING YOUR COMPUTER PROTECTION

Kaspersky Anti-Virus provides comprehensive protection of your computer against known and unknown threats, network and intruder attacks, spam and other unwanted information.
Every type of threat is handled by an individual protection component (see the description of components in this section). Components can be enabled or disabled independently of one another and configured accordingly.
In addition to the constant protection provided by the security components, we recommend that you regularly scan your computer for viruses. This is necessary in order to rule out the possibility of spreading malicious programs that have not been discovered by protection components, for example, because of a low security level set, or for other reasons.
K A S P E R S K Y A N TI -V I R U S 20 1 1
21
To keep Kaspersky Anti-Virus up-to-date, you should update the databases and application modules used by the application. The application is updated automatically by default. However, you can always update the databases and software modules manually, if necessary.
Certain specific tasks that need to be performed occasionally can be performed with the help of advanced tools and wizards (see section "Additional tools for better protection of your computer" on page 124), such as configuring Microsoft Internet Explorer or erasing the traces of user activity in the system.

Protection components

The following protection components provide protection for your computer in real time:

File Anti-Virus

File Anti-Virus prevents infection of the computer's file system. The component starts upon startup of the operating system, continuously remains in the computer's RAM, and scans all files being opened, saved, or launched on your computer and all connected drives. Kaspersky Anti-Virus intercepts each attempt to access a file and scans the file for known viruses. The file can only be processed further if the file is not infected or is successfully treated by the application. If a file cannot be disinfected for any reason, it will be deleted. A copy of the file will be saved in Backup, or moved to Quarantine.

Mail Anti-Virus

Mail Anti-Virus scans incoming and outgoing email messages on your computer. The email is available to the addressee only if it does not contain dangerous objects.

Web Anti-Virus

Web Anti-Virus intercepts and blocks scripts on websites if they pose a threat. All web traffic is also subject to a thorough monitoring. Additionally, the component blocks access to malicious websites.

IM Anti-Virus

IM Anti-Virus ensures the safe use of instant messengers. The component protects information that comes to your computer via IM protocols. IM Anti-Virus ensures safe operation of various applications for instant messaging.

Proactive Defense

Proactive Defense allows detection of a new malicious program before it can perform its malicious activity. The component's operation is based on monitoring and analyzing the behavior of all applications installed on your computer. Depending on the actions being performed, Kaspersky Anti-Virus makes a decision whether an application is potentially dangerous or not. So your computer is protected not only from known viruses, but also from new ones that have not yet been discovered.

Anti-Phishing

A component integrated in Web Anti-Virus and IM Anti-Virus, which allows checking web addresses if they are included in the list of phishing and suspicious web addresses.
There are three groups of objects protected by the application components:
Files, identity data, user names and passwords, information about bank cards, etc. These files are protected by
File Anti-Virus and Proactive Defense.
Applications installed on your computer and operating system objects. These files are protected by Mail Anti-
Virus, Web Anti-Virus, IM Anti-Virus, and Proactive Defense.
Online activity: using e-payment systems, email protection against spam, viruses etc. These files are protected
by Mail Anti-Virus, Web Anti-Virus, IM Anti-Virus, and Anti-Phishing.
Grouping of components depending on the objects that they protect is graphically illustrated in the Protection Center section of the main application window (see section "Kaspersky Anti-Virus main window" on page 41).
U S E R G U I DE
22

DISTRIBUTION KIT

You can purchase the boxed version of Kaspersky Anti-Virus from our resellers, or purchase it online from Internet shops, such as the eStore section of http://www.kaspersky.com.
If you buy the boxed version of the program, the package will include:
A sealed envelope with the installation CD containing the program files and documentation in PDF format.
Brief User Guide with an activation code.
License Agreement (depending on the region).
Read the EULA through carefully (see section "About End User License Agreement" on page 36)!
If you buy Kaspersky Anti-Virus from eStore, you will download the product from the Kaspersky Lab website; the present User Guide is included with the installation package. You will be sent an activation code by email after your payment has been received.

SERVICE FOR REGISTERED USERS

Kaspersky Lab offers legal users a set of services that allow increased efficiency of the application use.
When you purchase the license, you become a registered user, which entitles you to benefit from the following services:
hourly updated application database and new product versions;
advice on how to install, configure, and use the product - by phone or in the Personal Cabinet;
notification of new software products released by Kaspersky Lab and new viruses emerging all over the world.
This service is provided to users who have subscribed to Kaspersky Lab's news delivery on the Technical Support Service website (http://support.kaspersky.com/subscribe).
Advice on issues related to the functioning and use of operating systems, third-party software, and various technologies are not provided.

HARDWARE AND SOFTWARE REQUIREMENTS

For a proper functioning of Kaspersky Anti-Virus, a computer should meet certain requirements.
General requirements:
480 MB of free disk space.
CD / DVD-ROM (to install Kaspersky Anti-Virus from the installation CD).
Internet connection (to update databases and application modules).
Microsoft Internet Explorer 6.0 or higher.
Microsoft Windows Installer 2.0.
K A S P E R S K Y A N TI -V I R U S 20 1 1
23
Requirements for Microsoft Windows XP Home Edition (Service Pack 2 or higher), Microsoft Windows XP Professional (Service Pack 2 or higher), Microsoft Windows XP Professional x64 Edition (Service Pack 2 or higher):
Intel Pentium 800 MHz 32-bit (x86) / 64-bit (x64) processor or higher (or a compatible equivalent);
512 MB free RAM.
Requirements for Microsoft Windows Vista Home Basic, Microsoft Windows Vista Home Premium, Microsoft Windows Vista Business, Microsoft Windows Vista Enterprise, Microsoft Windows Vista Ultimate, Microsoft Windows 7 Starter, Microsoft Windows 7 Home Basic, Microsoft Windows 7 Home Premium, Microsoft Windows 7 Professional, Microsoft Windows 7 Ultimate:
Intel Pentium 1 GHz 32-bit (x86) / 64-bit (x64) processor or higher (or a compatible equivalent);
1GB free RAM (32-bit); 2 GB free RAM (64-bit).
Requirements for netbooks:
Intel Atom 1.33 MHz (Z520) processor or a compatible equivalent.
Intel GMA950 video card with video RAM of more than 64 MB (or a compatible equivalent).
Screen size not less than 10.1".
24
INSTALLING AND REMOVING THE
IN THIS SECTION:
Standard installation procedure ....................................................................................................................................... 24
Updating the previous version of Kaspersky Anti-Virus ................................................................................................... 29
Non-standard installation scenarios ................................................................................................................................ 33
Getting started ................................................................................................................................................................. 34
Removing the application ................................................................................................................................................ 34
APPLICATION
This section contains instructions that help you install the application on your computer or update the previous version. This section also describes the application's uninstall procedure.

STANDARD INSTALLATION PROCEDURE

Kaspersky Anti-Virus installation is performed on your computer in interactive mode using the Installation Wizard. The Wizard consists of a series of screens (steps) navigated using the Back and Next buttons. To close the Wizard once
it has completed its task, click the Finish button. To stop the Wizard at any stage, click the Cancel button. When Kaspersky Anti-Virus is installed on your computer, you can temporarily switch to Kaspersky Internet Security to assess its features. You can also purchase a license for further use of the application. You will not have to install Kaspersky Internet Security apart from Kaspersky Anti-Virus.
If the application will be used to protect more than one computer, it should be installed on all computers in the same way. Note that in this case, according to the license agreement, the license term begins from the date of the first activation.
To install Kaspersky Anti-Virus on your computer,
run the setup file (a file with the *.exe extension) from the CD with the product.
The process of installing Kaspersky Anti-Virus from an installation package downloaded from the Internet is identical to that from the installation CD.
I N S T A L L I N G A N D R E M O V I N G T H E A P P L I C A T I O N
25
IN THIS SECTION:
Step 1. Finding a newer version of the application .......................................................................................................... 25
Step 2. Making sure the system meets the installation requirements .............................................................................. 25
Step 3. Select installation type ........................................................................................................................................ 26
Step 4. Reviewing the license agreement ....................................................................................................................... 26
Step 5. Kaspersky Security Network Data Collection Statement ..................................................................................... 26
Step 6. Searching for incompatible applications .............................................................................................................. 26
Step 7. Selecting the destination folder ........................................................................................................................... 27
Step 8. Preparing installation .......................................................................................................................................... 27
Step 9. Installing .............................................................................................................................................................. 28
Step 10. Activating the application .................................................................................................................................. 28
Step 11. Registering a user ................................ ................................ ............................................................................. 28
Step 12. Completing the activation .................................................................................................................................. 29
Step 13. Wizard completion ............................................................................................................................................ 29

STEP 1. FINDING A NEWER VERSION OF THE APPLICATION

Before setup, the installer checks Kaspersky Lab update servers for a newer version of Kaspersky Anti-Virus.
If it does not find a newer product version on the Kaspersky Lab update servers, the Setup Wizard for the current version will be started.
If the update servers offer a newer version of Kaspersky Anti-Virus, you will see a prompt to download and install it on the computer. It is recommended that you install the new version of the application, because newer versions include more enhancements that allow you to ensure a more reliable protection of your computer. If you cancel the new version download, the Setup Wizard for the current version will be started. If you decide to install the newer version, product distribution files will be downloaded to your computer and the Setup Wizard for that new version will be started automatically. For a further description of the installation procedure for the newer version, please refer to its corresponding documentation.
STEP 2. MAKING SURE THE SYSTEM MEETS THE INSTALLATION
REQUIREMENTS
Before installing Kaspersky Anti-Virus on your computer, the installer checks the operating system and service packs to make sure they meet the software requirements for product installation (see section "Hardware and software requirements" on page 22). In addition, the installer checks the presence of required software and the credentials necessary to install applications. If any of the above-listed requirements is not met, the corresponding notification will be displayed on the screen.
If the computer meets all the requirements, the Wizard searches for Kaspersky Lab applications, which, when run together with Kaspersky Anti-Virus, may result in conflicts. If such applications are found, you are asked to remove them manually.
U S E R G U I DE
26
If an earlier version of Kaspersky Anti-Virus or Kaspersky Internet Security is found, all data that can be used by Kaspersky Anti-Virus 2011 (activation information, application settings, etc.) will be saved and used when installing the new application while the one installed earlier will be automatically removed.

STEP 3. SELECT INSTALLATION TYPE

At this stage, you can select the most suitable way of installing Kaspersky Anti-Virus:
Standard installation. If you choose this option (the Change installation settings box is unchecked), the
application will be fully installed on your computer with protection settings recommended by Kaspersky Lab experts.
Custom installation. In this case (the Change installation settings box is checked) you will be asked to specify
the destination folder to which the application will be installed (see section "Step 7. Selecting the destination folder" on page 27), and disable the installation process protection, if required (see section "Step 8. Preparing installation" on page 27).
To proceed with the installation, click the Next button.

STEP 4. REVIEWING THE LICENSE AGREEMENT

At this stage, you should review the license agreement made between you and Kaspersky Lab. Read the agreement carefully and give your consent by clicking the I agree button. The installation will continue.
If you cannot accept the license agreement, cancel the application installation by clicking the Cancel button.

STEP 5. KASPERSKY SECURITY NETWORK DATA COLLECTION STATEMENT

At this stage, you will be invited to participate in the Kaspersky Security Network. Participation in the program involves sending information about new threats detected on your computer, running applications, downloaded signed applications to Kaspersky Lab and your system information. We guarantee that none of your personal data will be sent.
Review the Kaspersky Security Network Data Collection Statement. To read the complete version of the Statement, click the Full KSN agreement button. If you agree with all terms of the Statement, check the I accept the terms of participation in Kaspersky Security Network box in the Wizard window.
Click the Next button when carrying out the custom installation (see section "Step 3. Select installation type" on page 26). When performing the standard installation, click the Install button. The installation will continue.

STEP 6. SEARCHING FOR INCOMPATIBLE APPLICATIONS

At this step, the applications checks if any applications incompatible with Kaspersky Anti-Virus are installed on your computer.
If no such applications are found, the Wizard automatically proceeds to the next step.
If any incompatible applications are detected, they are displayed in a list on the screen, and you are offered to remove them. Applications that Kaspersky Anti-Virus cannot remove automatically should be removed manually. While removing incompatible applications, you will need to reboot your operating system, after which installation of Kaspersky Anti-Virus will continue automatically.
To proceed with the installation, click the Next button.
I N S T A L L I N G A N D R E M O V I N G T H E A P P L I C A T I O N
27

STEP 7. SELECTING THE DESTINATION FOLDER

This step of the Setup Wizard is only available if the custom installation is selected (see section "Step 3. Select installation type" on page 26). When carrying out the standard installation, this step is skipped and the application is installed to the default folder.
At this stage, you are offered to select the folder into which Kaspersky Anti-Virus should be installed. The following path is set by default:
<disk>\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2011 – for 32-bit systems;
<disk>\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 2011 – for 64-bit systems.
To install Kaspersky Anti-Virus into a different folder, specify the path to it in the entry field, or click the Browse button and select a folder in the window that opens.
Keep in mind the following restrictions:
The application cannot be installed on network or removable drives, or on virtual drives (drives created using the
SUBST command).
We recommend that you avoid installing the application in a folder that already contain files or other folders,
because access to that folder for editing will soon be blocked.
The path to the installation folder cannot be longer than 160 characters or contain special characters
/, ?, :, *, ", >, < and |.
To find out if there is enough disk space on your computer to install the application, click the Volume button. In the window that opens you can view the disk space information. To close the window, click OK.
To proceed with the installation, click the Next button in the Wizard window.

STEP 8. PREPARING INSTALLATION

This step of the Setup Wizard is only available if the custom installation is selected (see section "Step 3. Select installation type" on page 26). In the case of the standard installation, this step is skipped.
Since your computer may be infected with malicious programs that may impact installation of Kaspersky Anti-Virus, the installation process should be protected.
By default, installation process protection is enabled – the Protect the installation process box is checked in the Wizard window.
You are advised to uncheck this box if the application cannot be installed (for example, when performing remote installation using Windows Remote Desktop). Enabled protection may be the reason.
In this case, you should interrupt the installation, restart it, check the Change installation settings box at the Select installation type step (see section "Step 3. Select installation type" on page 26), and, when reaching the Preparing installation step, uncheck the Protect the installation process box.
To proceed with the installation, click the Install button.
When installing the application on a computer running under Microsoft Windows XP, active network connections are terminated. The majority of terminated connections are restored after a pause.
U SER G U I D E
28

STEP 9. INSTALLING

Installation of the application can take some time. Wait for it to complete.
Once the installation is complete, the Wizard will automatically proceed to the next step.
If an installation error occurs, due to malicious programs that prevent anti-virus applications from being installed on your computer, the Setup Wizard will prompt you to download Kaspersky Virus Removal Tool utility, a special tool for neutralizing an infection.
If you agree to install the utility tool, the Setup Wizard downloads it from Kaspersky Lab servers, after which installation of the utility starts automatically. If the Wizard cannot download the utility, you will be asked to download it on your own by clicking the link provided.
After you finish working with the utility, you should delete it and restart installation of Kaspersky Anti-Virus.

STEP 10. ACTIVATING THE APPLICATION

Activation is the procedure of activating a license that allows you to use a fully functional version of the application until the license expires.
You will need an Internet connection to activate the application.
You can select any of the following options when activating Kaspersky Anti-Virus:
Activate commercial version. Select this option and enter the activation code (see section "About activation
code" on page 37) if you have purchased a commercial version of the application.
If you enter the activation code for Kaspersky Internet Security in the entry field, upon the completion of the activation a procedure will start that allows to switch to Kaspersky Internet Security.
Activate trial version. Use this activation option if you want to install the trial version of the application before
making the decision to purchase a commercial version. You will be able to use the fully-functional version of the application for the duration of a term limited by the license for the trial version of the application. When the license expires, it cannot be activated for a second time.
Activate later. If you choose this option, the Kaspersky Anti-Virus activation stage is skipped. The application
will be installed on your computer with the availability of all its functions, except updates. You will only be able to update anti-virus databases and modules of Kaspersky Anti-Virus once after installation. The Activate later option is only available at the first start of the Activation Wizard, immediately after installing the application.

STEP 11. REGISTERING A USER

This step is only available when activating the commercial version of the application. When activating the trial version, this step is skipped.
You need to register in order to be able to contact Kaspersky Lab Technical Support Service in the future. If you agree to register, specify your registration data in the corresponding fields and click the Next button.
I N S T A L L I N G A N D R E M O V I N G T H E A P P L I C A T I O N
29

STEP 12. COMPLETING THE ACTIVATION

The Wizard informs you that Kaspersky Anti-Virus has been successfully activated. Additionally, information about the license is provided: license type (commercial or trial), date of expiry, and number of hosts for the license.
If you have activated the subscription, information about the subscription status (see section "Subscription statuses" on page 146) is displayed instead of the license expiration date.
Click the Next button to proceed with the Wizard.

STEP 13. WIZARD COMPLETION

The last window of the Wizard informs you of the successful completion of the application installation. To run Kaspersky Anti-Virus, make sure that the Run Kaspersky Anti-Virus box is checked, and click the Finish button.
In some cases, you may need to reboot your operating system. If the Run Kaspersky Anti-Virus box is checked, the application will be automatically run after you reboot your operating system.
If you have unchecked the box before closing the Wizard, you should run the application manually (see section "Starting and stopping the application manually" on page 47).
UPDATING THE PREVIOUS VERSION OF KASPERSKY ANTI­VIRUS
If Kaspersky Anti-Virus 2010 is already installed on your computer, you should update the application to Kaspersky Anti­Virus 2011. If you have an active license for Kaspersky Anti-Virus 2010, you will not have to activate the application: the Installation Wizard will automatically receive the information about your license for Kaspersky Anti-Virus 2010 to use it during the installation process.
Kaspersky Anti-Virus installation is performed on your computer in interactive mode using the Installation Wizard. The Wizard consists of a series of screens (steps) navigated using the Back and Next buttons. To close the Wizard once
it has completed its task, click the Finish button. To stop the Wizard at any stage, click the Cancel button. When Kaspersky Anti-Virus is installed on your computer, you can temporarily switch to Kaspersky Internet Security to assess its features. You can also purchase a license for further use of the application. You will not have to install Kaspersky Internet Security apart from Kaspersky Anti-Virus.
If the application will be used to protect more than one computer, it should be installed on all computers in the same way. Note that in this case, according to the license agreement, the license term begins from the date of the first activation.
To install Kaspersky Anti-Virus on your computer,
run the setup file (a file with the *.exe extension) from the CD with the product.
The process of installing Kaspersky Anti-Virus from an installation package downloaded from the Internet is identical to that from the installation CD.
U S E R G U I DE
30
IN THIS SECTION:
Step 1. Finding a newer version of the application .......................................................................................................... 30
Step 2. Making sure the system meets the installation requirements .............................................................................. 30
Step 3. Select installation type ........................................................................................................................................ 31
Step 4. Reviewing the license agreement ....................................................................................................................... 31
Step 5. Kaspersky Security Network Data Collection Statement ..................................................................................... 31
Step 6. Searching for incompatible applications .............................................................................................................. 31
Step 7. Selecting the destination folder ........................................................................................................................... 32
Step 8. Preparing installation .......................................................................................................................................... 32
Step 9. Installing .............................................................................................................................................................. 33
Step 10. Completing the activation .................................................................................................................................. 33
Step 11. Wizard completion ............................................................................................................................................ 33

STEP 1. FINDING A NEWER VERSION OF THE APPLICATION

Before setup, the installer checks Kaspersky Lab update servers for a newer version of Kaspersky Anti-Virus.
If it does not find a newer product version on the Kaspersky Lab update servers, the Setup Wizard for the current version will be started.
If the update servers offer a newer version of Kaspersky Anti-Virus, you will see a prompt to download and install it on the computer. It is recommended that you install the new version of the application, because newer versions include more enhancements that allow you to ensure a more reliable protection of your computer. If you cancel the new version download, the Setup Wizard for the current version will be started. If you decide to install the newer version, product distribution files will be downloaded to your computer and the Setup Wizard for that new version will be started automatically. For a further description of the installation procedure for the newer version, please refer to its corresponding documentation.
STEP 2. MAKING SURE THE SYSTEM MEETS THE INSTALLATION
REQUIREMENTS
Before installing Kaspersky Anti-Virus on your computer, the installer checks the operating system and service packs to make sure they meet the software requirements for product installation (see section "Hardware and software requirements" on page 22). In addition, the installer checks the presence of required software and the credentials necessary to install applications. If any of the above-listed requirements is not met, the corresponding notification will be displayed on the screen.
If the computer meets all the requirements, the Wizard searches for Kaspersky Lab applications, which, when run together with Kaspersky Anti-Virus, may result in conflicts. If such applications are found, you are asked to remove them manually.
If an earlier version of Kaspersky Anti-Virus or Kaspersky Internet Security is found, all data that can be used by Kaspersky Anti-Virus 2011 (activation information, application settings, etc.) will be saved and used when installing the new application while the one installed earlier will be automatically removed.
I N S T A L L I N G A N D R E M O V I N G T H E A P P L I C A T I O N
31

STEP 3. SELECT INSTALLATION TYPE

At this stage, you can select the most suitable way of installing Kaspersky Anti-Virus:
Standard installation. If you choose this option (the Change installation settings box is unchecked), the
application will be fully installed on your computer with protection settings recommended by Kaspersky Lab experts.
Custom installation. In this case (the Change installation settings box is checked) you will be asked to specify
the destination folder to which the application will be installed (see section "Step 7. Selecting the destination folder" on page 27), and disable the installation process protection, if required (see section "Step 8. Preparing installation" on page 27).
To proceed with the installation, click the Next button.

STEP 4. REVIEWING THE LICENSE AGREEMENT

At this stage, you should review the license agreement made between you and Kaspersky Lab.
Read the agreement carefully and give your consent by clicking the I agree button. The installation will continue.
If you cannot accept the license agreement, cancel the application installation by clicking the Cancel button.

STEP 5. KASPERSKY SECURITY NETWORK DATA COLLECTION STATEMENT

At this stage, you will be invited to participate in the Kaspersky Security Network. Participation in the program involves sending information about new threats detected on your computer, running applications, downloaded signed applications to Kaspersky Lab and your system information. We guarantee that none of your personal data will be sent.
Review the Kaspersky Security Network Data Collection Statement. To read the complete version of the Statement, click the Full KSN agreement button. If you agree with all terms of the Statement, check the I accept the terms of participation in Kaspersky Security Network box in the Wizard window.
Click the Next button when carrying out the custom installation (see section "Step 3. Select installation type" on page 26). When performing the standard installation, click the Install button. The installation will continue.

STEP 6. SEARCHING FOR INCOMPATIBLE APPLICATIONS

At this step, the applications checks if any applications incompatible with Kaspersky Anti-Virus are installed on your computer.
If no such applications are found, the Wizard automatically proceeds to the next step.
If any incompatible applications are detected, they are displayed in a list on the screen, and you are offered to remove them. Applications that Kaspersky Anti-Virus cannot remove automatically should be removed manually. While removing incompatible applications, you will need to reboot your operating system, after which installation of Kaspersky Anti-Virus will continue automatically.
To proceed with the installation, click the Next button.
U S E R G U I DE
32

STEP 7. SELECTING THE DESTINATION FOLDER

This step of the Setup Wizard is only available if the custom installation is selected (see section "Step 3. Select installation type" on page 26). When carrying out the standard installation, this step is skipped and the application is installed to the default folder.
At this stage, you are offered to select the folder into which Kaspersky Anti-Virus should be installed. The following path is set by default:
<disk>\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2011 – for 32-bit systems;
<disk>\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 2011 – for 64-bit systems.
To install Kaspersky Anti-Virus into a different folder, specify the path to it in the entry field, or click the Browse button and select a folder in the window that opens.
Keep in mind the following restrictions:
The application cannot be installed on network or removable drives, or on virtual drives (drives created using the
SUBST command).
We recommend that you avoid installing the application in a folder that already contain files or other folders,
because access to that folder for editing will soon be blocked.
The path to the installation folder cannot be longer than 160 characters or contain special characters
/, ?, :, *, ", >, < and |.
To find out if there is enough disk space on your computer to install the application, click the Volume button. In the window that opens you can view the disk space information. To close the window, click OK.
To proceed with the installation, click the Next button in the Wizard window.

STEP 8. PREPARING INSTALLATION

This step of the Setup Wizard is only available if the custom installation is selected (see section "Step 3. Select installation type" on page 26). In the case of the standard installation, this step is skipped.
Since your computer may be infected with malicious programs that may impact installation of Kaspersky Anti-Virus, the installation process should be protected.
By default, installation process protection is enabled – the Protect the installation process box is checked in the Wizard window.
You are advised to uncheck this box if the application cannot be installed (for example, when performing remote installation using Windows Remote Desktop). Enabled protection may be the reason.
In this case, you should interrupt the installation, restart it, check the Change installation settings box at the Select installation type step (see section "Step 3. Select installation type" on page 26), and, when reaching the Preparing installation step, uncheck the Protect the installation process box.
To proceed with the installation, click the Install button.
When installing the application on a computer running under Microsoft Windows XP, active network connections are terminated. The majority of terminated connections are restored after a pause.
I N S T A L L I N G A N D R E M O V I N G T H E A P P L I C A T I O N
33

STEP 9. INSTALLING

Installation of the application can take some time. Wait for it to complete.
Once the installation is complete, the Wizard will automatically proceed to the next step.
If an installation error occurs, due to malicious programs that prevent anti-virus applications from being installed on your computer, the Setup Wizard will prompt you to download Kaspersky Virus Removal Tool utility, a special tool for neutralizing an infection.
If you agree to install the utility tool, the Setup Wizard downloads it from Kaspersky Lab servers, after which installation of the utility starts automatically. If the Wizard cannot download the utility, you will be asked to download it on your own by clicking the link provided.
After you finish working with the utility, you should delete it and restart installation of Kaspersky Anti-Virus.

STEP 10. COMPLETING THE ACTIVATION

The Wizard informs you that Kaspersky Anti-Virus has been successfully activated. Additionally, information about the license is provided: license type (commercial or trial), date of expiry, and number of hosts for the license.
If you have activated the subscription, information about the subscription status (see section "Subscription statuses" on page 146) is displayed instead of the license expiration date.
Click the Next button to proceed with the Wizard.

STEP 11. WIZARD COMPLETION

The last window of the Wizard informs you of the successful completion of the application installation. To run Kaspersky Anti-Virus, make sure that the Run Kaspersky Anti-Virus box is checked, and click the Finish button.
In some cases, you may need to reboot your operating system. If the Run Kaspersky Anti-Virus box is checked, the application will be automatically run after you reboot your operating system.
If you have unchecked the box before closing the Wizard, you should run the application manually (see section "Starting and stopping the application manually" on page 47).

NON-STANDARD INSTALLATION SCENARIOS

This section describes application installation scenarios which differ from those of standard installation or update from the previous version.
Installing Kaspersky Anti-Virus with further activation using an activation code of Kaspersky Internet Security
If, when installing Kaspersky Anti-Virus, at the Activating the application step, you enter an activation code of Kaspersky Internet Security, the expansion procedure starts, which results in installing Kaspersky Internet Security on your computer.
If, when installing Kaspersky Anti-Virus, at the Application activation step, you select Activate later and then activate the application using an activation code of Kaspersky Internet Security, the expansion procedure also starts, which results in installing Kaspersky Internet Security on your computer.
U S E R G U I DE
34

Installing Kaspersky Anti-Virus 2011 over Kaspersky Internet Security 2010

IN THIS SECTION:
Step 1. Saving data for repeated use .............................................................................................................................. 34
Step 2. Confirmation of application removal ................................ .................................................................................... 35
Step 3. Removing the application. Completing removal .................................................................................................. 35
If you run the installation of Kaspersky Anti-Virus 2011 on a computer on which Kaspersky Internet Security 2010 with an active license is already installed, the Installation Wizard detects the information about the license and offers you to select one of the following further actions:
Use the current license of Kaspersky Internet Security 2010. In this case, the expansion procedure starts, which
results in installing Kaspersky Internet Security 2011 on your computer. You will be able to use Kaspersky Internet Security 2011 still the license for Kaspersky Internet Security 2010 remains valid.
Proceed with installation of Kaspersky Anti-Virus 2011. In this case, the installation procedure will be proceeded
with according to the standard scenario, starting from the Activating the application step.

GETTING STARTED

The application is ready to be used after installation. To ensure proper protection of your computer, we recommend performing the following immediately after installation and configuration:
Update application databases (see section "How to update application databases and modules" on page 54).
Scan your computer for viruses (see section "How to perform full scan of your computer for viruses" on page 58)
and vulnerabilities (see section "Scanning computer for vulnerabilities" on page 58).
Check the protection status of your computer (on page 48) and eliminate protection problems if necessary (see
section "Diagnostics and elimination of problems in your computer protection" on page 48).

REMOVING THE APPLICATION

After Kaspersky Anti-Virus is uninstalled, your computer and personal data are unprotected.
You can uninstall Kaspersky Anti-Virus using the Installation Wizard.
To start the Wizard:
1. In the Start menu select Programs Kaspersky Anti-Virus 2011 Repair or Remove.
2. In the window that opens, click the Remove button.
I N S T A L L I N G A N D R E M O V I N G T H E A P P L I C A T I O N
35

STEP 1. SAVING DATA FOR REPEATED USE

At this point you can specify which of the data used by the application you want to retain for repeated use during the next installation of the application (e.g., a newer version of the application).
By default, the application is completely removed from the computer.
To save data for repeated use, perform the following:
1. Select Save application objects.
2. Check the boxes opposite the data types you want to save:
Activation data – data that eliminates the need to activate the application in the future by automatically
using the current license as long as it does not expire by the time of the next installation.
Anti-Spam databases – databases containing signatures of spam messages downloaded and saved by
the application.
Backup and Quarantine files – files checked by the application and placed into backup storage or
quarantine.
Operational settings of the application – values of the application settings selected during configuration.
iSwift and iChecker data – files which contain information about the objects that have already been
scanned for viruses.
Safe Run shared folder data – files saved by the application working in a safe environment in a special
folder that is also accessible in the normal environment.

STEP 2. CONFIRMATION OF APPLICATION REMOVAL

Since removing the application threatens the security of the computer and your personal data, you will be asked to confirm your intention to remove the application. To do this, click the Remove button.
To stop removal of the application at any time, you can cancel this operation by clicking the Cancel button.

STEP 3. REMOVING THE APPLICATION. COMPLETING REMOVAL

At this step, the Wizard removes the application from your computer. Wait until removal is complete.
When removing the application, your operating system may require reboot. If you cancel immediate reboot, completion of the removal procedure will be postponed until the operating system is rebooted, or the computer is turned off and then restarted.
36

MANAGING THE LICENSE

IN THIS SECTION:
About End User License Agreement ................................................................ ............................................................... 36
About license ................................................................................................................................................................... 36
About activation code ...................................................................................................................................................... 37
Viewing license information ............................................................................................................................................. 37
This section contains information regarding the basic concepts used in the context of the application licensing. In this section, you will also learn about the automatic renewal of the license and where to view information regarding the current license.

ABOUT END USER LICENSE AGREEMENT

End User License Agreement – is an agreement between natural or legal person lawfully in possession of a copy of an application. The EULA is included in each Kaspersky Lab application. It contains a detailed description of rights and Kaspersky Anti-Virus usage restrictions.
According to the EULA, when you purchase and install a Kaspersky Lab application, you get an unlimited right to own its copy.

ABOUT LICENSE

License is a right to use Kaspersky Anti-Virus and the related additional services offered by Kaspersky Lab or its partners.
Each license is defined by its expiry date and a type.
License term – a period during which the additional services are offered:
technical support;
updating databases and application modules.
The services provided depend on the license type.
The following license types are provided:
Trial – a free license with a limited validity period, for example, 30 days, offered to get familiar with Kaspersky
Anti-Virus.
A trial license can only be used once and cannot be used after a commercial license!
A trial license is supplied with the trial version of the application. If you have a trial license, you can only contact Technical Support Service if your question is about activating the product or purchasing a commercial license. As soon as the trial license expires, all Kaspersky Anti-Virus features become disabled. To continue using the application, you should activate it (see section "How to activate the application" on page 52).
M A N A G I N G T H E L I C E N S E
37
Commercial – a commercial license with limited validity period (for example, one year), offered at Kaspersky
Anti-Virus's purchase. Each license is assigned a number of hosts on which you can install Kaspersky Anti­Virus with this license.
If a commercial license is activated, all application features and additional services are available.
As soon as a commercial license expires, Kaspersky Anti-Virus remains a full-featured application, but the anti­virus databases are not updated. You can still scan your computer for viruses and use the protection components, but only using the databases that you had when the license expired. Two weeks before the license expiration date, the application will notify you of this event so you can renew the license in advance (see section "How to purchase or renew a license" on page 53).
Commercial with an update subscription and commercial with an update and protection subscription – a paid
license with flexible management: you can suspend and resume the subscription, extend its validity period in the automatic mode and cancel the subscription. A license with subscription is distributed by service providers. You can manage the subscription from the user's Personal Cabinet on the service provider's website.
The validity period of a subscription can be limited (for example, to one year) or unlimited. If a subscription with a limited validity period is activated, you should renew it on your own when it expires. A subscription with an unlimited validity period is extended automatically subject to timely prepayment to the provider.
If the subscription term is limited, when it expires, you will be offered a grace period for subscription renewal, during which the full functionality of the program will be maintained.
If the subscription is renewed, upon grace period expiration Kaspersky Anti-Virus ceases to update the application databases (for license with update subscription) and stops performing computer protection or executing scan tasks (for license with protection subscription).
When using the subscription, you will not be able to use another activation code to renew the license. This is only possible after the subscription expiry date.
If already have an activated license with a limited term at the time of subscription activation, it is substituted with the subscription license. To cancel the subscription, contact the service provider from whom you purchased Kaspersky Anti-Virus.
Depending on the subscription provider, the set of available actions to take on the subscription (see section "Subscription statuses" on page 146) may vary. Also, the grace period when subscription renewal is available, is not provided by default.

ABOUT ACTIVATION CODE

Activation code is a code supplied with a Kaspersky Anti-Virus commercial license. This code is required for activation of the application.
The activation code represents a sequence of Latin characters and digits separated by hyphens into four groups of five symbols. For example, 11111-11111-11111-11111.
U SER G U I D E
38

VIEWING LICENSE INFORMATION

To view information about the active license:
1. Open the main application window.
2. Click the License button in the bottom part of the window to open the License management window.
In this window, you can start the application activation (see section "How to activate the application" on page 52), purchase a new license, or renew your current one (see section "How to purchase or renew a license" on page 53).

Figure 1. The License management window

39

APPLICATION INTERFACE

IN THIS SECTION:
Notification area icon ....................................................................................................................................................... 39
Context menu .................................................................................................................................................................. 40
Kaspersky Anti-Virus main window ................................................................................................................................. 41
Notification windows and pop-up messages ................................................................................................................... 43
Application settings window ............................................................................................................................................ 45
Kaspersky Gadget ........................................................................................................................................................... 46
Kaspersky Anti-Virus has a fairly simple and easy-to-use interface. This section discusses its basic features in detail.
Kaspersky Anti-Virus includes extension components (plug-ins) for Microsoft Office Outlook, Microsoft Outlook Express, The Bat!, Thunderbird, Mozilla Firefox, Microsoft Internet Explorer and Microsoft Windows Explorer. The plug-ins expand the functionality of the host applications, providing access to the configuration of product components within their interface.

NOTIFICATION AREA ICON

Immediately after installing Kaspersky Anti-Virus, the application icon appears in the Microsoft Windows taskbar notification area.
In the Microsoft Windows 7 operating system the application icon is hidden by default, but you can display it to access the application more easily (see the operating system documentation).
The icon has the following basic purposes:
It is an indicator of the application's operation.
It provides access to the context menu, main application window and the news window.

Indication of the application activity

This icon serves as an indicator of the application's operation. It also indicates the protection status and shows a number of basic functions currently being performed by the application:
– scanning an email message;
– scanning web traffic;
– updating databases and application modules;
– computer needs to be restarted to apply updates;
– a failure occurred in the operation of an application component.
U S E R G U I DE
40
The icon is animated by default: for example, during the email message scan, a tiny letter symbol blinks against the application icon; when the update is in progress, you can see a revolving globe. You can deactivate animation (see section "Active interface elements" on page 133).
When the animation is disabled, the icon can take the following form:
(colored symbol) – all or certain protection components are activated;
(black-and-white symbol) – all protection components are disabled.

Access to the context menu and application windows

You can use the icon to open the context menu (on page 40) and the main application window (see section "Kaspersky Anti-Virus main window" on page 41).
To open the context menu,
hover the cursor over the icon and right-click the area.
To open the main application window,
hover the cursor over the icon and left-click the area.
If news from Kaspersky Lab is available, the icon appears in the Microsoft Windows taskbar notification area. Double­click this icon to open News Agent window (see section "News Agent" on page 133).

CONTEXT MENU

You can run basic protection tasks from the context menu.
The Kaspersky Anti-Virus menu contains the following items:
Update – runs the update of application databases and modules.
Virtual Keyboard – displays the Virtual Keyboard.
Kaspersky Anti-Virus – opens the main application window.
Pause protection / Resume protection – temporarily turns off / on the real-time protection components. This
menu item does not affect the application’s updates, or the execution of virus scans.
Settings – opens the application settings window.
About – opens a window containing information about the application.
A P P L I C A T I O N I N T E R F A C E
41
News – opens the news agent window (see section "News Agent" on page 133). This menu item is displayed if
there is unread news.
Exit – closes Kaspersky Anti-Virus (when this item is selected, the application is discarded from the computer’s
RAM).

Figure 2. Context menu

If a virus scan or update task is running at the moment that you open the context menu, its name as well as its progress status (percentage complete) is displayed in the context menu. When you select a menu item with the name of a task, you can switch to the main window with a report of current task run results.
To open the context menu,
hover over the application icon in the taskbar notification area with the cursor and right-click it with the mouse.
In the Microsoft Windows 7 operating system the application icon is hidden by default, but you can display it to access the application more easily (see the operating system documentation).

KASPERSKY ANTI-VIRUS MAIN WINDOW

The main application window contains interface elements that provide access to all the main features of the application.
The main window can be divided into three parts:
The top part of the window contains the protection status indicator which informs you of your current computer
protection status.

Figure 3. Current computer protection status

There are three possible values of protection status: each of them is indicated with a certain color. Green
indicates that your computer’s protection is at the correct level, while yellow and red indicate that there are
various security threats. In addition to malicious programs, threats include obsolete application databases, disabled protection components, minimum protection settings, etc.
Security threats must be eliminated as they appear (see section "Diagnostics and elimination of problems in your computer protection" on page 48).
U S E R G U I DE
42
The left part of the window allows you to quickly switch to the main application features: enabling and disabling
protection components, running virus scan tasks, updating databases and program modules, etc.

Figure 4. Left part of the main window

The right part of the window contains information about the application function selected in the left part, and
allows configuration of its settings, provides tools for executing virus scan tasks, retrieving updates etc.

Figure 5. Right part of the main window

You can also use the following buttons and links:
Settings – to open the application settings window.
Quarantine – to start working with quarantined objects.
A P P L I C A T I O N I N T E R F A C E
43
Reports – switch to the application operation report in diagram format.
News – switch to viewing news in the News Agent window (see section "News Agent" on page 133). This link is
displayed after the application receives a piece of news.
Help – to view the Kaspersky Anti-Virus help system.
My Kaspersky Account – to enter the user's personal account on the Technical Support Service website (see
section "My Kaspersky Account" on page 141).
Support – to open the window containing information about the system and links to Kaspersky Lab information
resources (Technical Support Service website, forum).
License – Kaspersky Anti-Virus activation, license renewal.
You can change the appearance of Kaspersky Anti-Virus using alternate skins (see section "Application appearance" on page 132).
To open the main application window, perform one of the following actions:
Roll the cursor over the application icon in the taskbar notification area and left-click it with the mouse.
In the Microsoft Windows 7 operating system the application icon is hidden by default, but you can display it to access the application more easily (see the operating system documentation).
Select Kaspersky Anti-Virus from the context menu (see section "Context menu" on page 40).
Click the Kaspersky Anti-Virus icon in the middle part of Kaspersky Gadget (available only for Microsoft
Windows Vista and Microsoft Windows 7).

NOTIFICATION WINDOWS AND POP-UP MESSAGES

Kaspersky Anti-Virus notifies you of important events occurring during its operation, using notification windows and pop­up messages that appear over the application icon in the taskbar notification area.
U S E R G U I DE
44
Notification windows are displayed by Kaspersky Anti-Virus when various actions can be taken in connection with an event: for example, if a malicious object is detected, you can block access to it, delete, or try to disinfect it. The application offers you to select one of the available actions. A notification window only disappears from the screen if you select one of the actions.

Figure 6. The Notifications window

Pop-up messages are displayed by Kaspersky Anti-Virus in order to inform you of events that do not require selection of
an action. Some pop-up messages contain links that you can use to take an action offered by the application: for example, run the update of the databases, or initiate the activation of the application). Pop-up messages automatically disappear from the screen soon after they appear.

Figure 7. Pop-up message

Depending on how critical the event is for computer security, you might receive the following types of notification:
Critical notifications – inform you of events of critical importance from the viewpoint of computer security: for
example, detection of a malicious object or dangerous activity in the system. Notification windows and pop-up messages of this type are red-colored.
Important notifications – inform you of events which are potentially important from the viewpoint of computer
security: for example, detection of a potentially infected object or suspicious activity in the system. Notification windows and pop-up messages of this type are yellow-colored.
Information notifications – inform you of events that are non-critical from the viewpoint of security. Notification
windows and pop-up messages of this type are green-colored.
A P P L I C A T I O N I N T E R F A C E
45

APPLICATION SETTINGS WINDOW

The Kaspersky Anti-Virus settings window is designed for configuring the entire application, individual protection components, scan and update tasks, and for running other advanced configuration tasks (see section "Advanced application settings" on page 73).

Figure 8. Application settings window

The application settings window consists of two parts:
in the left part of the window you can choose the application component, task or another item that should be
configured;
the right part of the window contains the controls that you can use to configure the item selected in the left part
of the window.
The components, tasks and other parts in the left part of the window are combined in the following sections:
Protection Center;
Scan;
Update Center;
Advanced Settings.
U S E R G U I DE
46
To open the settings window, perform one of the following actions:
click the Settings link in the top part of the main application window (see section "Kaspersky Anti-Virus main
window" on page 41);
select Settings from the context menu (see section "Context menu" on page 40);
click the button with the Settings icon in the Kaspersky Gadget interface (only for Microsoft Windows Vista
and Microsoft Windows 7 operating systems). The option of option of opening the settings window should be assigned to the button (see section "How to use Kaspersky Gadget" on page 71).
To select the required section in the configuration window,
click the icon corresponding to the section in the top left part of the window (see the figure above).

KASPERSKY GADGET

When using Kaspersky Anti-Virus on a computer running under Microsoft Windows Vista or Microsoft Windows 7, you can also use the Kaspersky Gadget (hereinafter gadget).
Kaspersky Gadget is designed for quick access to the main features of the application: protection status indication, virus scan of objects, application operation reports, etc.
After you install Kaspersky Anti-Virus on a computer running under Microsoft Windows 7, the gadget appears on your desktop automatically. After you install the application on a computer running under Microsoft Windows Vista, you should add the gadget to Microsoft Windows Sidebar manually (see the operating system documentation).

Figure 9. Kaspersky Gadget

47
STARTING AND STOPPING THE
IN THIS SECTION:
Enabling and disabling automatic launch ........................................................................................................................ 47
Starting and stopping the application manually ............................................................................................................... 47
APPLICATION
After Kaspersky Anti-Virus is installed, it starts automatically. The application is launched automatically each time the operating system starts.

ENABLING AND DISABLING AUTOMATIC LAUNCH

Automatic launch of the application means that Kaspersky Anti-Virus launches after the operating system startup. This is the default start mode.
To disable or enable automatic launch of the application:
1. Open the application settings window.
2. In the left part of the window, in the Protection Center section, select the General Settings subsection.
3. To disable automatic launch of the application, uncheck the Launch Kaspersky Anti-Virus at computer startup box in the Autorun section in the right part of the window. Check this box, to enable automatic launch of the application.

STARTING AND STOPPING THE APPLICATION MANUALLY

Kaspersky Lab specialists do not recommend you to stop Kaspersky Anti-Virus, as in this case your computer and personal data's protection will be at risk. If disabling protection is really necessary, you are advised to pause your computer's protection for a specified period without exiting the application.
Kaspersky Anti-Virus should be started manually if you have disabled automatic launch of the application (see section "Enabling and disabling automatic launch" on page 47).
To launch the application manually,
in the Start menu select Programs Kaspersky Anti-Virus 2011 Kaspersky Anti-Virus 2011.
To exit the application,
right-click to open the context menu of the application icon in the taskbar notification area and select Exit.
In the Microsoft Windows 7 operating system the application icon is hidden by default, but you can display it to access the application more easily (see the operating system documentation).
48

COMPUTER PROTECTION STATUS

IN THIS SECTION:
Diagnostics and elimination of problems in your computer protection ............................................................................. 48
Enabling and disabling protection ................................................................................................................................... 50
Pausing and resuming protection .................................................................................................................................... 51
This section contains information about how to find out whether your computer is currently protected, or if its security is under threat, as well as how to eliminate emerging threats. In this section, you also can find information about enabling, disabling, and pausing protection when working with Kaspersky Anti-Virus.
DIAGNOSTICS AND ELIMINATION OF PROBLEMS IN YOUR
COMPUTER PROTECTION
Problems with computer protection are indicated by the computer protection status indicator located in the top part of the main application window (see section "Kaspersky Anti-Virus main window" on page 41). The indicator changes color depending upon the host protection status: green means that the computer is protected, yellow indicates protection­related problems, red alerts of serious threats to computer security. You are advised to fix the problems and security threats immediately.
C O M P U T E R P R O T E C T I O N S T A T U S
49
Clicking the indicator icon in the main application window opens the Protection state window (see the figure below) containing detailed information about the status of computer protection and troubleshooting suggestions for the detected problems and threats.

Figure 10. Resolving security problems

The Status tab of the Protection state window lists the protection-related problems including those caused by deviations from the normal product operation mode (e.g., outdated databases). To address the issues, the product offers the following options as further steps:
Remove immediately. Clicking the corresponding buttons will take you to the appropriate problem solution. This
is the recommended action.
Postpone removal. If, for whatever reason, immediate removal of the problem is not possible, you can postpone
this action and return to it later. To do this, click the Hide message button.
Note that postponing the removal is not available for serious problems. Such problems include, for example, malicious objects that were not disinfected, crashes of one or several components, or corruption of program files.
To display the notifications hidden earlier in the common list, check the Show hidden messages box, which appears in the bottom part of the tab when there are hidden messages.
You can use the Detected threats tab to view the list of revealed malware and riskware and select the operation which will be performed over the objects (e.g., move to Quarantine). To select an operation, use the controls above the list and the context menu for the listed records.
U S E R G U I DE
50
On the Report tab, you can view the application activity reports (see section "Where to view the report on the application's operation" on page 67).

ENABLING AND DISABLING PROTECTION

By default, Kaspersky Anti-Virus is launched when the operating system loads and protects your computer until it is switched off. All protection components are running.
You can completely or partially disable protection provided by Kaspersky Anti-Virus.
Kaspersky Lab specialists strongly recommend that you do not disable protection, since this may lead to an infection of your computer and data loss. If it is really necessary, we recommend that you pause protection for the required period of time (see section "Pausing and resuming protection" on page 51).
When protection is disabled, all its components become inactive.
This is indicated as follows:
inactive (gray) application icon in the taskbar notification area (see section "Notification area icon" on page 39);
red security indicator in the upper part of the main application window.
In this case, protection is seen in the context of the protection components. Disabling or pausing protection components does not effect the performance of virus scan tasks and Kaspersky Anti-Virus updates.
You can completely enable or disable protection in the application settings window (see section "Application settings window" on page 45). You can enable or disable individual application components either in the settings window, or in the main application window (see section "Kaspersky Anti-Virus main window" on page 41).
To completely enable or disable protection:
1. Open the application settings window.
2. In the left part of the window, select the Protection Center section, General Settings subsection.
3. Uncheck the Enable protection box if you need to disable protection. Check this box if you need to enable protection.
To enable or disable a protection component in the settings window:
1. Open the application settings window.
2. In the left part of the window, in the Protection Center section, select the component that should be enabled or disabled.
3. In the right part of the window, uncheck the Enable <component name> box if you need to disable this component. Check this box if you need to enable the component.
C O M P U T E R P R O T E C T I O N S T A T U S
51
To enable or disable a protection component in the main application window:
1. Open the main application window and select the Protection Center section.
2. In the right part of the window, left-click the section that comprises the component being enabled or disabled.
3. Open the action selection menu by clicking the button with the name of the component. Select Enable <Component name> if you need to enable this component, or select Disable <Component name> if you need to disable it.

PAUSING AND RESUMING PROTECTION

Pausing protection means temporarily disabling all protection components for a certain period of time.
This is indicated as follows:
inactive (gray) application icon in the taskbar notification area (see section "Notification area icon" on page 39);
red security indicator in the upper part of the main application window.
In this case, protection is seen in the context of the protection components. Disabling or pausing protection components does not effect the performance of virus scan tasks and Kaspersky Anti-Virus updates.
If network connections were established at the same time as protection was paused, a notification about termination of such connections is displayed.
When working on a computer running under Microsoft Windows Vista or Microsoft Windows 7, you can pause protection using Kaspersky Gadget. To do this, Kaspersky Gadget should be configured so that the option of opening the reports window would be assigned to one of its buttons (see section "How to use Kaspersky Gadget" on page 71).
To pause the protection of your computer:
1. Open the Pause protection window using one of the following methods:
When enabling a component, the icon on its left turns green and when disabling it, the icon turns grey.
select Pause protection from the context menu of the application icon (see section "Context menu" on
page 40);
click the button with the Pause protection icon in the Kaspersky Gadget interface (only for Microsoft
Windows Vista and Microsoft Windows 7 operating systems).
2. In the Pause protection window, select the time interval after which the protection should be resumed:
Pause for the specified time – protection will be enabled after the time interval specified in the field below.
Pause until reboot – protection will be enabled after the application is restarted or the operating system is
rebooted (provided that the automatic application launch is enabled (see section "Enabling and disabling automatic launch" on page 47)).
Pause – protection will only be enabled when you decide to resume it (please see below).
To resume computer protection,
select Resume protection from the context menu of the application icon (see section "Context menu" on page 40).
You can use this method to resume computer protection when the Pause option has been selected, or when you have selected Pause for the specified time or Pause until reboot.
52

SOLVING TYPICAL TASKS

IN THIS SECTION:
How to activate the application ........................................................................................................................................ 52
How to purchase or renew a license ............................................................................................................................... 53
What to do when the application's notifications appear ................................................................................................... 54
How to update application databases and modules ........................................................................................................ 54
How to scan critical areas of your computer for viruses .................................................................................................. 55
How to scan a file, folder, disk, or another object for viruses .......................................................................................... 56
How to perform full scan of your computer for viruses .................................................................................................... 58
Scanning computer for vulnerabilities.............................................................................................................................. 58
How to protect your personal data against theft .............................................................................................................. 59
What to do if you suspect an object of being infected with a virus .................................................................................. 61
What to do if you suspect your computer of being infected ............................................................................................. 62
How to restore an object that has been deleted or disinfected by the application ........................................................... 63
How to create and use Rescue Disk ............................................................................................................................... 64
How to view the report on the application's operation ..................................................................................................... 67
How to restore application default settings ...................................................................................................................... 67
How to import the application settings to Kaspersky Anti-Virus installed on another computer....................................... 68
How to switch from Kaspersky Anti-Virus to Kaspersky Internet Security ....................................................................... 69
How to use Kaspersky Gadget ........................................................................................................................................ 71
This section contains instructions on the basic tasks encountered by most users when working with the application.

HOW TO ACTIVATE THE APPLICATION

Activation is the procedure of activating a license that allows you to use a fully functional version of the application until the license expires.
If you have not activated the application during installation, you can do so later. You are reminded of the need to activate the application by notifications that Kaspersky Anti-Virus displays in the taskbar notification area.
To run the Kaspersky Anti-Virus Activation Wizard, perform one of the following actions:
Click the Please activate the application link in the Kaspersky Anti-Virus notification window that appears in
the taskbar notification area.
S O L V I N G T Y P I C A L T A S K S
53
Click the License link in the bottom part of the main application window. In the License management window
that opens, click the Activate the application with a new license button.
Let us review the steps of the Wizard in more detail.
Step 1. Selection of the license type and entry of the activation code
Make sure you have selected Activate commercial license in the Activation Wizard window, enter the activation code (see section "About activation code" on page 37) in the corresponding field, and click the Next button.
Step 2. Requesting for activation
At the first step, the Wizard sends a request to the activation server to obtain permission for activation of the commercial version of the application. If the request is sent successfully, the Wizard automatically proceeds to the next step.
Step 3. Entry of registration data
User registration is necessary for the user to be able to contact the Support Service. Unregistered users only receive minimal support.
Specify your registration data and click the Next button.
Step 4. Activation
At this step, the Wizard connects with the activation server in order to finish the application activation and user registration after which the Wizard automatically proceeds to the next window.
Step 5. Wizard completion
This window displays information on the activation results: type of license used and license expiry date.
Click the Finish button to close the Wizard.

HOW TO PURCHASE OR RENEW A LICENSE

If you have installed Kaspersky Anti-Virus without a license, you can purchase one after installation. When your license expires, you can renew it. You will receive an activation code that you should use to activate the application (see section "How to activate the application" on page 52).
To purchase a license:
1. Open the main application window.
2. Click the Purchase license button in the bottom part of the window.
The eStore web page opens where you can purchase a license.
To renew a license:
1. Open the main application window and click the License link in the bottom part of the main window.
The License management window opens.
2. Click the Renew license button.
U S E R G U I DE
54
The license renewal center web page opens where you can renew your license.
WHAT TO DO WHEN THE APPLICATION'S NOTIFICATIONS
APPEAR
Notifications that appear in the taskbar notification area inform you of events occurring in the application's operation and requiring your attention. Depending on how critical the event is, you may receive the following types of notification:
Critical notifications – inform you of events of critical importance from the viewpoint of computer security: for
example, detection of a malicious object or dangerous activity in the system. Notification windows and pop-up messages of this type are red-colored.
Important notifications – inform you of events which are potentially important from the viewpoint of computer
security: for example, detection of a potentially infected object or suspicious activity in the system. Notification windows and pop-up messages of this type are yellow-colored.
Information notifications – inform you of events that are non-critical from the viewpoint of security. Notification
windows and pop-up messages of this type are green-colored.
If such a notification is displayed on the screen, you should select one of the suggested options. By default, the optimum option is the one recommended by Kaspersky Lab experts.
HOW TO UPDATE APPLICATION DATABASES AND
MODULES
By default, Kaspersky Anti-Virus automatically checks for updates on Kaspersky Lab's update servers. If the server contains new updates, Kaspersky Anti-Virus downloads and installs them in the background. You can start Kaspersky Anti-Virus update at any time.
To download updates from Kaspersky Lab servers, you should have an established Internet connection.
To start update from the context menu,
select Update from the context menu of the application icon.
S O L V I N G T Y P I C A L T A S K S
55
To start update from the main application window:
1. Openthe main application window and select the Update Center section in the left part of the window.
2. Click the Run Update button in the right part of the window.
Information about the update in progress is displayed:
in the Update section of the main application window, in the Update is in progress subsection;
in the Update window, which opens when clicking the Update is in progress button;
in the context menu of the application icon.
To stop update:
1. Open the main application window and select the Update Center section in the left part of the window.
2. Click the Update is in progress button in the right part of the window.
3. In the Update window that opens, click the Stop button.
4. In the window that prompts the user for confirmation, click the Yes button.
HOW TO SCAN CRITICAL AREAS OF YOUR COMPUTER FOR
VIRUSES
Scan of critical areas consists of scanning the objects which are loaded at startup of the operating system, scanning the system memory, boot sectors of the disk drive, and the objects that have been added by the user (see section "Creating a list of objects to scan" on page 78).
You can start the scan of critical areas using one of the following methods:
using the shortcut created earlier (see page 82);
from the main application window (see section "Kaspersky Anti-Virus main window" on page 41).
To start the scan using a shortcut:
1. Open the Microsoft Windows Explorer window and go to the folder where you have created the shortcut.
2. Double-click the shortcut to start the scan.
Information about the scan in progress is displayed:
in the Scan section of the main application window, in the Critical Areas Scan is in progress section;
in the Critical Areas Scan window that opens by clicking the Critical Areas Scan is in progress button;
in the context menu of the application icon.
U S E R G U I DE
56
To start a scan from the main application window:
1. Open the main application window and select the Scan section in the left part of the window.
2. In the right part of the main application window, click the Run Critical Areas Scan button.
Information about the scan in progress is displayed:
in the Scan section of the main application window, in the Critical Areas Scan is in progress section;
in the Critical Areas Scan window that opens by clicking the Critical Areas Scan is in progress button;
in the context menu of the application icon.
To stop the critical areas scan:
1. Open the main application window and in the left part of it select the section named Scan.
2. In the right part of the window, click the Critical Areas Scan is in progress button.
3. In the Critical Areas Scan window that opens, click the Stop button.
4. In the window that prompts the user for confirmation, click the Yes button.
HOW TO SCAN A FILE, FOLDER, DISK, OR ANOTHER
OBJECT FOR VIRUSES
You can use the following methods to scan an object for viruses:
using the context menu of the object;
from the main application window (see section "Kaspersky Anti-Virus main window" on page 41);
using the Kaspersky Anti-Virus gadget (only for Microsoft Windows Vista and Microsoft Windows 7).
To start a virus scan task from the object context menu:
1. Open the Microsoft Windows Explorer window and go to the folder with the object that should be scanned.
2. Right-click to open the context menu of the object (see figure below) and select Scan for Viruses.
S O L V I N G T Y P I C A L T A S K S
57
The process and the results of the task will be displayed in the Virus Scan window that opens.

Figure 11. Context menu of an object in Microsoft Windows

To start scanning an object from the main application window:
1. Open the main application window and select the Scan section in the left part of the window.
2. Specify the object to scan, using one of the following methods:
Click the select link in the right part of the window to open the Custom Scan window, and check the boxes
next to the folders and drives that you need to scan. If the window displays no objects to scan, open the Select object to scan window by clicking the Add link, and select objects to scan.
Drag an object to scan into the dedicated area of the main window (see figure below).
Task run progress is displayed in the Virus Scan window that opens.

Figure 12. Window area into which you should drag an object to scan

To scan an object for viruses using the gadget,
drag the object to scan onto the gadget. Task run progress is displayed in the Virus Scan window that opens.
To stop objects scan:
1. In the Virus Scan window that opens after the scan of objects starts, click the Stop button or close the window.
2. In the Virus Scan window that opens, prompting the user for confirmation of scan stop, click the Yes button.
U S E R G U I DE
58
HOW TO PERFORM FULL SCAN OF YOUR COMPUTER FOR
VIRUSES
You can start a full scan for viruses using one of the following methods:
using the shortcut created earlier (see page 82);
from the main application window (see section "Kaspersky Anti-Virus main window" on page 41).
To start the full scan using a shortcut:
1. Open the Microsoft Windows Explorer window and go to the folder where you have created the shortcut.
2. Double-click the shortcut to start the scan.
Information about the scan in progress is displayed:
in the Scan section of the main application window, in the Full Scan is in progress section;
in the Full Scan window that opens by clicking the Full Scan is in progress section;
in the context menu of the application icon.
To start a full scan from the main application window:
1. Open the main application window and select the Scan section in the left part of the window.
2. In the right part of the window, click the Run Full Scan button.
Information about the scan in progress is displayed:
in the Scan section of the main application window, in the Full Scan is in progress section;
in the Full Scan window that opens by clicking the Full Scan is in progress section;
in the context menu of the application icon.
To stop the full scan:
1. Open the main application window and select the Scan section in the left part of the window.
2. In the right part of the window, click the Full Scan is in progress button.
3. In the Full Scan window that opens, click the Stop button.
4. In the window that prompts the user for confirmation, click the Yes button.

SCANNING COMPUTER FOR VULNERABILITIES

Vulnerabilities are unprotected portions of software code which intruders may deliberately use for their purposes, for example, to copy data used in unprotected applications. Scanning your computer for vulnerabilities helps you to reveal any such weak points in your computer. You are advised to remove the detected vulnerabilities.
S O L V I N G T Y P I C A L T A S K S
59
IN THIS SECTION:
Protection against phishing ............................................................................................................................................. 60
Virtual Keyboard .............................................................................................................................................................. 60
You can use the following methods to scan the system for vulnerabilities:
from the main application window (see section "Kaspersky Anti-Virus main window" on page 41);
using the shortcut created earlier.
To start the task using a shortcut:
1. Open the Microsoft Windows Explorer window and go to the folder where you have created the shortcut.
2. Double-click the shortcut to start scanning the system for vulnerabilities. Progress of the task will be displayed in the Vulnerability Scan window that opens.
To start the task from the main application window:
1. Open the main application window and select the Tools section in the left part of the window.
2. Click the Vulnerability Scan button in the right part of the window.
Progress of the task will be displayed in the Vulnerability Scan window that opens.
To stop the vulnerability scan:
1. Open the main application window and select the Tools section in the left part of the window.
2. Click the Vulnerability Scan button in the right part of the window.
3. In the Vulnerability Scan window that opens, click the Stop button.
4. In the window that prompts the user for confirmation of the scan stop, click the Yes button.

HOW TO PROTECT YOUR PERSONAL DATA AGAINST THEFT

With Kaspersky Anti-Virus, you can protect your personal data against theft, such as:
passwords, usernames, and other registration data;
account numbers and bank cards.
Kaspersky Anti-Virus includes components and tools that allow you to protect your personal data against theft attempts committed by hackers using such methods as phishing and interception of data entered at the keyboard.
Protection against phishing is ensured by Anti-Phishing implemented in the Web Anti-Virus and IM Anti-Virus components.
Protection against the interception of data entered at the keyboard is ensured by the use of Virtual Keyboard.
U S E R G U I DE
60

PROTECTION AGAINST PHISHING

Phishing is a type of online fraud that involves tricking users into disclosing their credit card numbers, PIN codes and other privacy data with the objective of stealing funds.
Phishing often targets online banking users. Criminals create an exact copy of the website of a chosen bank and send emails to customers on behalf of this bank. They claim that a malfunction or replacement of online banking system software has resulted in the loss of user details, necessitating the user to confirm or modify such details on the bank's website. Users click the link that takes them to the fake website and enter their details, which then end up in the hands of criminals.
Protection against phishing is ensured by Anti-Phishing implemented in the Web Anti-Virus and IM Anti-Virus components. Enable these components to ensure comprehensive protection against phishing.
To enable components providing protection against phishing:
1. Open the main application window and select the Protection Center section in the left part of the window.
2. In the right part of the window, left-click to open the Online Security section.
3. Open the menu for selecting an action on the component by clicking the Anti-Phishing button and select Enable Anti-Phishing item from the menu.

VIRTUAL KEYBOARD

When working on your computer, there are occasions when entering of your personal data, or username and password are required. That happens, for example, during account registration on web sites, web shopping or Internet banking.
There is a risk that this personal information is intercepted using hardware keyboard interceptors or keyloggers, which are programs that register keystrokes.
The Virtual Keyboard tool prevents the interception of data entered via the keyboard.
The Virtual Keyboard cannot protect your personal data if the website requiring the entry of such data has been hacked, because in this case the information is obtained directly by the intruders.
Many of the applications classified as spyware have the function of making screenshots which are then transferred to an intruder for further analysis and for stealing the user's personal data. Virtual Keyboard prevents the personal data being entered from being intercepted with the use of screenshots.
The Virtual Keyboard only prevents the interception of privacy data when working with Microsoft Internet Explorer and Mozilla Firefox browsers.
Before you start using the Virtual Keyboard, please learn its peculiarities:
This action enables Anti-Phishing and all components that it makes part of.
Before entering data from the Virtual Keyboard, using the cursor, make sure that the appropriate entry field is
selected.
You can click the Virtual Keyboard buttons using the mouse.
Unlike real keyboards, there is no way of clicking two keys simultaneously on a Virtual Keyboard. Therefore, to
use combinations of keys (e.g., ALT+F4), you have to click the first key (e.g., ALT), then the next key (e.g., F4), and then click the first key again. The second click of the key acts in the same way as the key release on a real keyboard.
S O L V I N G T Y P I C A L T A S K S
61
Input language for the Virtual Keyboard is toggled using the CTRL+SHIFT key combination (the SHIFT key
should be clicked using the right mouse button) or CTRL+LEFT ALT (the LEFT ALT key should be clicked using the right mouse button) depending upon the specified settings.
You can open the Virtual Keyboard in the following ways:
from the context menu of the application icon;
from the Microsoft Internet Explorer or Mozilla Firefox browser windows;
using the keyboard shortcuts.
To open the Virtual Keyboard from the context menu of the application icon,
select Virtual Keyboard from the context menu of the application icon.
To open the Virtual Keyboard from the browser window,
click the Virtual Keyboard button in the toolbar of Microsoft Internet Explorer or Mozilla Firefox.
To open the Virtual Keyboard using the computer keyboard,
press the CTRL+ALT+SHIFT+P shortcut.
WHAT TO DO IF YOU SUSPECT AN OBJECT OF BEING
INFECTED WITH A VIRUS
If you suspect an object of being infected, first scan it using Kaspersky Anti-Virus (see section "How to scan a file, folder, disk, or another object for viruses" on page 56).
After the scan, if the application reports that the object is not infected, but you think that it is, you can do the following:
Move the object to Quarantine. Objects moved to Quarantine do not pose any threat to your computer. After the
databases are updated, Kaspersky Anti-Virus will probably be able to clearly identify and eliminate the threat.
Send the object to Virus Lab. Virus Lab specialists scan the object. If it turns out to be infected with a virus, they
immediately add the description of the new virus in the databases that will be downloaded by the application with an update (see section "How to update application databases and modules" on page 54).
You can move an object to Quarantine using one of the two methods:
using the Move to Quarantine link in the Protection state window;
using the context menu of the object.
To move an object to Quarantine from the Protection state window:
1. Open the main application window.
2. Click the Quarantine link in the top part of the main window to open the Protection state window on the Detected threats tab.
3. Click the Move to Quarantine button.
4. In the window that opens, select the object that you want to move to Quarantine.
U S E R G U I DE
62
To move an object to Quarantine using the context menu:
1. Open Microsoft Windows Explorer and go to the folder that contains the object that you want to move to Quarantine.
2. Right-click to open the context menu of the object and select Move to Quarantine.
To send an object to the Virus Lab:
1. Go to the Virus Lab request page (http://support.kaspersky.com/virlab/helpdesk.html).
2. Follow the instructions on this page to send your request.
WHAT TO DO IF YOU SUSPECT YOUR COMPUTER OF BEING
INFECTED
If you suspect that your computer has been infected, use the System Restore Wizard to neutralize the consequences of malicious activity in the system. Kaspersky Lab recommends that you run the Wizard after the computer has been disinfected to make sure that all threats and damage caused by infections have been fixed.
The Wizard checks whether there are any changes to the system, such as the following: access to the network being blocked, known file format extensions have been changed, the toolbar is locked, etc. Such damage can have various causes. The latter may include the activity of malicious programs, incorrect system configuration, system failures or even incorrect operation of system optimization applications.
After the review is complete, the Wizard analyzes the information to evaluate whether there is system damage which requires immediate attention. Based on the review, a list of actions necessary to eliminate the problems is generated. The Wizard groups these actions by category based on the severity of the problems detected.
The Wizard consists of a series of screens (steps) navigated using the Back and Next buttons. To close the Wizard once it has completed its task, click the Finish button. To stop the Wizard at any stage, click the Cancel button.
To start the System Restore Wizard:
1. Open the main application window and select the Tools section in the left part of the window.
2. In the right part of the window, click the System Restore button.
The Wizard steps in detail.
Step 1. Starting system restore
Make sure that the Wizard option to Search for problems caused by malware activity is selected and click the Next button.
Step 2. Problem search
The Wizard will search for problems and damage, which should be fixed. Once the search is complete, the Wizard will automatically proceed to the next step.
S O L V I N G T Y P I C A L T A S K S
63
Step 3. Selecting troubleshooting actions
All damage found during the previous step is grouped on the basis of the type of danger it poses. For each damage group, Kaspersky Lab recommends a sequence of actions to repair the damage. There are three groups of actions:
Strongly recommended actions eliminate problems posing a serious security threat. You are advised to
perform all actions in this group.
Recommended actions eliminate problems presenting a potential threat. You are also advised to perform all
actions in this group.
Additional actions repair system damage which does not pose a current threat, but may pose a danger to
the computer's security in the future.
To view the actions within a group, click the + icon to the left of the group name.
To make the Wizard perform a certain action, check the box to the left of the corresponding action description. By default, the Wizard performs all recommended and strongly recommended actions. If you do not wish to perform a certain action, uncheck the box next to it.
It is strongly recommended not to uncheck the boxes selected by default because doing so will leave your computer vulnerable to threats.
Having defined the set of actions, which the Wizard will perform, click the Next button.
Step 4. Problems elimination
The Wizard will perform the actions selected during the previous step. The elimination of problems may take some time. Once the troubleshooting is complete, the Wizard will automatically proceed to the next step.
Step 5. Wizard completion
Click the Finish button to close the Wizard.
HOW TO RESTORE AN OBJECT THAT HAS BEEN DELETED
OR DISINFECTED BY THE APPLICATION
Kaspersky Lab recommends that you avoid restoring deleted and disinfected objects since they may pose a threat to your computer.
If you want to restore a deleted or disinfected object, you can use a backup copy of it which was created by the application when scanning the object.
To restore an object that has been deleted or disinfected by the application:
1. Open the main application window.
2. Click the Quarantine link in the top part of the main window to open the Protection state window on the Detected threats tab.
U S E R G U I DE
64
3. From the dropdown list located over the list of threats, select Neutralized.
IN THIS SECTION:
Create Rescue Disk ........................................................................................................................................................ 64
Starting the computer from the Rescue Disk ................................................................................................................... 66
The list of disinfected and deleted objects is displayed on the Detected threats tab. Objects are grouped according to their status. To display the list of objects in a group, click the + icon located to the left of the group header.
4. Right-click to open the context menu of the object that you want to restore, and select Restore.

HOW TO CREATE AND USE RESCUE DISK

We recommend that you create Rescue Disk after you have installed and configured Kaspersky Anti-Virus, scanned your computer, and made sure that it was not infected. You will further be able to use Rescue Disk for scanning and disinfecting infected computers that cannot be disinfected using other methods (e.g., with anti-virus applications).

CREATE RESCUE DISK

Creating the Rescue Disk means the creation of a disk image (ISO file) with up-to-date anti-virus databases and configuration files.
The source disk image serving as a base for new file creation can be downloaded from the Kaspersky Lab server or copied from a local source.
You can create Rescue Disk using the Rescue Disk Creation Wizard. The rescuecd.iso file created by the Wizard is saved on your computer's hard drive:
in Microsoft Windows XP – in the following folder: Documents and Settings\All Users\Application
Data\Kaspersky Lab\AVP11\Data\Rdisk\;
in Microsoft Windows Vista and Microsoft Windows 7 operating systems – in the following folder:
ProgramData\Kaspersky Lab\AVP11\Data\Rdisk\.
The Wizard consists of a series of screens (steps) navigated using the Back and Next buttons. To close the Wizard once it has completed its task, click the Finish button. To stop the Wizard at any stage, click the Cancel button.
To start the Rescue Disk Creation Wizard:
1. Open the main application window and select the Tools section in the left part of the window.
2. In the right part of the window, click the button named Rescue Disk.
The Wizard steps in detail.
S O L V I N G T Y P I C A L T A S K S
65
Step 1. Starting the Wizard. Searching for an existing disk image
The first window of the Wizard contains information about the Rescue Disk that will be created by the Wizard. If the Wizard detects an existing Rescue Disk ISO file in the dedicated folder (see above), the Use existing ISO
image box will be displayed in the first window of the Wizard. Check the box to use the detected file as original ISO image and go directly to the Updating disk image step (see below). Uncheck this box if you do not want to use the disk image that has been found, and the Wizard proceeds to the Select disk image source window.
Step 2. Select disk image source
If you have checked the Use existing ISO image box in the first Wizard window, then this step will be skipped.
At this step, you should select the image file source from the list of options:
Select Copy ISO image from local or network drive if you already have a Rescue Disk or an image
prepared for it and stored on your computer or on a local network resource.
Select the Download ISO image from Kaspersky Lab server option if you do not have an image file, and
you want to download it from the Kaspersky Lab server (file size is about 100 MB).
Step 3. Copying (downloading) disk image
If you have checked the Use existing ISO image box in the first Wizard window, then this step will be skipped.
If you have selected the option to copy the image from a local source at the previous step (Copy ISO image from local or network drive), you should specify the path to the ISO file at this current step. To do this, click the Browse button. After you have specified the path to the file, click the Next button. The disk image copying progress is displayed in the Wizard window.
If you have selected Download ISO image from Kaspersky Lab server, the disk image downloading progress is displayed immediately.
When copying or downloading the ISO image is complete, the Wizard automatically proceeds to the next step.
Step 4. Updating image file
File update procedure includes:
update of anti-virus databases;
update of configuration files.
Configuration files determine the possibility of starting the computer from a removable disk or CD / DVD written using a rescue disk image provided by the Wizard.
When updating anti-virus databases, those distributed at the last update of Kaspersky Anti-Virus are used. If the databases are obsolete, it is recommended to update and restart the Rescue Disk Creation Wizard.
To begin updating the ISO file, click the Next button. The updating progress will be displayed in the Wizard window.
Step 5. Recording the image on a data medium
In this window, the Wizard informs you of a successful creation of the Rescue Disk and offers you to record it on a data medium.
U S E R G U I DE
66
Specify a data medium for recording the ISO image:
Select Record to CD / DVD to record the image on a CD / DVD.
You will be prompted to specify the CD / DVD on which the image should be recorded. Then, the ISO image will be recorded on this CD / DVD. The recording process may take some time so please wait until it has completed.
Select the Record to USB flash drive option to record the image on a removable drive.
Kaspersky Lab recommends that you do not record the ISO image on devices which are not designed specifically for data storage, such as smartphones, cellphones, PDAs, and MP3 players. Recording ISO images on these devices may lead to their incorrect functioning in the future.
You will be prompted to specify the removable drive on which the image should be recorded. Then, the image will be recorded on this removable drive. The recording process may take some time so please wait until it has completed.
Select Save the disk image to file on local or network drive to record the ISO image to the hard drive
installed on your computer or another one that you can access over a network.
You will be offered to specify the folder into which the image should be recorded, and the name of the ISO file, after which it will be recorded on the hard drive. The recording process may take some time so please wait until it has completed.
Step 6. Wizard completion
To complete the Wizard, click the Finish button. You can use the disk that you have created for further booting of the computer (see page 66).

STARTING THE COMPUTER FROM THE RESCUE DISK

If the operating system cannot be started as a result of a virus attack, use the Rescue Disk.
To boot the operating system, you should use a CD / DVD or removable drive with a rescue disk image (.iso) file recorded on it (see section "Creating the Rescue Disk" on page 64).
Loading a computer from a removable drive is not always possible. In particular, this mode is not supported by some obsolete computer models. Before shutting down your computer for further booting from a removable drive, make sure that this operation can be performed.
To boot your computer from the Rescue Disk:
1. In the BIOS settings, enable booting from a CD / DVD or removable drive (for detailed information please refer to the documentation for your computer's motherboard).
2. Insert a CD / DVD with the Rescue Disk image into the CD/DVD drive of an infected computer or connect a removable drive to it.
3. Restart your computer.
For detailed information about the use of the Rescue Disk, please refer to the Kaspersky Rescue Disk User Guide.
S O L V I N G T Y P I C A L T A S K S
67
HOW TO VIEW THE REPORT ON THE APPLICATION'S
OPERATION
Kaspersky Anti-Virus creates operation reports for each component. Using a report, you can find out, for example, how many malicious objects (such as viruses and Trojan programs) have been detected and removed by the application during the specified period, how many times the application has been updated during the same period, how many spam messages have been detected, and many other characteristics.
When working on a computer running under Microsoft Windows Vista or Microsoft Windows 7, you can open reports using Kaspersky Gadget. To do this, Kaspersky Gadget should be configured so that the option of opening the reports window is assigned to one of its buttons (see section "How to use Kaspersky Gadget" on page 71).
To view the application operation report:
1. Open the Protection state window on the Report tab using one of the following methods:
click the Reports link in the top part of the main application window;
click the button with the Reports icon in the Kaspersky Gadget interface (only for Microsoft Windows
Vista and Microsoft Windows 7).
The Report tab displays application operation reports in diagram format.
2. If you want to view a detailed application operation report (for example, a report representing the operation of each component), click the Detailed report button in the bottom part of the Report tab.
The Detailed report window opens where data are represented in a table. For a convenient view of reports, you can select various entry sorting options.

HOW TO RESTORE APPLICATION DEFAULT SETTINGS

You can always restore the settings of Kaspersky Anti-Virus which are recommended by Kaspersky Lab and considered optimal. The settings can be restored using the Application Configuration Wizard.
When the Wizard completes its operations, the Recommended security level is set for all protection components. While restoring the settings, you will also be prompted to define which settings should or should not be kept for which components together with restoring the recommended security level.
To restore protection settings:
1. Open the application settings window.
2. Run the Application Configuration Wizard using one of the following methods:
click the Restore link in the bottom part of the window;
in the left part of the window, select the Advanced Settings section, Manage Settings subsection, and
click the Restore button in the Restore default settings section.
The Wizard steps in detail.
U S E R G U I DE
68
Step 1. Starting the Wizard
Click the Next button to proceed with the Wizard.
Step 2. Selecting settings to save
This window of the Wizard shows which Kaspersky Anti-Virus components have settings that are different from the default value, because they were changed by the user. If special settings have been created for any of the components, they will also be shown in the window.
Check the boxes for the settings that you want to save and click the Next button.
Step 3. Finishing restoration
To complete the Wizard, click the Finish button.
HOW TO IMPORT THE APPLICATION SETTINGS TO KASPERSKY ANTI-VIRUS INSTALLED ON ANOTHER
COMPUTER
Having configured the product, you can apply its settings in Kaspersky Anti-Virus installed on another computer. Consequently, the application will be configured identically on both computers. This is a helpful feature when, for example, Kaspersky Anti-Virus is installed on your home computer and in your office.
Application settings are stored in a special configuration file, which you can transfer to another computer. To do this:
1. Perform the Export procedure – save the application settings to a configuration file.
2. Move the file you have saved to another computer (for example, send it by email or use a removable data medium).
3. Perform the Import procedure – apply the settings from the configuration file to the application installed on another computer.
To export the current settings of Kaspersky Anti-Virus:
1. Open the application settings window.
2. Select the Manage Settings section in the left part of the window.
3. Click the Save button in the right part of the window.
4. In the window that opens enter the name of the configuration file and the path where it should be saved.
To import the application's settings from a saved configuration file:
1. Open the application settings window.
2. Select the Manage Settings section in the left part of the window.
3. Click the Load button in the right part of the window.
4. In the window that opens, select a file that you wish to import the Kaspersky Anti-Virus settings from.
S O L V I N G T Y P I C A L T A S K S
69
IN THIS SECTION:
Switching to the commercial version ............................................................................................................................... 69
Temporarily switching to the trial version ........................................................................................................................ 70

HOW TO SWITCH FROM KASPERSKY ANTI-VIRUS TO KASPERSKY INTERNET SECURITY

Kaspersky Internet Security is an application designed to ensure comprehensive protection of your computer. It is very similar to Kaspersky Anti-Virus, however featuring a range of advanced options implemented in the following modules and features:
Application Control;
Parental Control;
Firewall;
Network Attack Blocker;
Geo Filter;
Blocking access to dangerous websites;
Network Monitor;
Anti-Spam;
Anti-Banner;
Eliminating activity traces;
Safe Run section.
You can temporarily switch to the trial version of Kaspersky Internet Security to get acquainted with its features, or immediately proceed to using the commercial version of the application.
When using a license with subscription (see section "Subscription statuses" on page 146) or working with the application in some regions, the application cannot be temporarily switched to the trial version of Kaspersky Internet Security.

SWITCHING TO THE COMMERCIAL VERSION

If you want to switch to the commercial version of Kaspersky Internet Security, you do not have to install the application. All you need is an activation code for the commercial version of the application that you can use to activate it (see section "How to activate the application" on page 52). You can obtain an activation code if you already have the commercial license.
To purchase the commercial license for Kaspersky Internet Security:
1. Open the main application window and select the Upgrade section in the left part of the window.
2. Click the Buy Now button.
U S E R G U I DE
70
When done, you are redirected to the eStore website where you can purchase the commercial license for Kaspersky Internet Security.
When using a license with subscription (see section "Subscription statuses" on page 146) or working with the application in some regions, the main window does not contain the Upgrade section.

TEMPORARILY SWITCHING TO THE TRIAL VERSION

You can temporarily switch to Kaspersky Internet Security to assess its features. You can also purchase a license for further use of the application.
When using a license with subscription (see section "Subscription statuses" on page 146) or working with the application in some regions, the application cannot be temporarily switched to the trial version of Kaspersky Internet Security. In these cases, the main application window does not contain the Upgrade section.
To temporarily switch to Kaspersky Internet Security:
1. Open the main application window and select the Upgrade section in the left part of the window.
2. Click the Try Now button.
The Configuration Wizard then starts in protection upgrade mode.
The Wizard steps in detail.
Step 1. Request for activation of the trial version of Kaspersky Internet Security
At the first step, the Wizard sends a request to the activation server to obtain permission for activation of the trial version of Kaspersky Internet Security. If the request is sent successfully, the Wizard automatically proceeds to the next step.
Step 2. Starting to deploy protection
At this step, the Wizard displays the message that notifies you of upgrade readiness. To proceed with the Wizard, click the Next button.
Step 3. Removing incompatible applications
At this step, the Wizard checks if any applications incompatible with Kaspersky Internet Security are installed on your computer. If no such applications are detected, the Wizard automatically proceeds to the next step. If such applications are detected, the Wizard groups them in a list, displays it in the window, and offers you to remove them.
After the incompatible applications are deleted, you may need to restart your operating system. After you restart the application, the Wizard starts automatically and the protection upgrade will continue.
Step 4. Upgrading protection
At this step, upgrade modules are being connected, which may take some time. Once the process is complete, the Wizard will proceed automatically to the next step.
Step 5. Restarting the application
At the final step of upgrading application, you need to restart the application. To do this, click the Finish button on the Wizard window.
S O L V I N G T Y P I C A L T A S K S
71
Step 6. Completing the activation
After you restart the application, the Wizard starts automatically. When the trial version of Kaspersky Internet Security is successfully activated, the Wizard window displays information about the time period during which you can use the trial version.
Step 7. System analysis
At this stage, information about Microsoft Windows applications is collected. These applications are added to the list of trusted applications which have no restrictions imposed on the actions they perform in respect of the system.
Once the analysis is complete, the Wizard will automatically proceed to the next step.
Step 8. Completing upgrade
To complete the Wizard, click the Finish button.

Expiration of the trial period of Kaspersky Internet Security

When the trial period of Kaspersky Internet Security expires, all protection components stop functioning. The application notifies you of this event.
Click the Fix it button in the main application window to select a scenario of further actions in the Activation Wizard window that opens:
Return to the use of Kaspersky Anti-Virus in standard mode if you have a valid commercial license.
Purchase the commercial license for Kaspersky Internet Security or Kaspersky Anti-Virus and then activate the
application (see section "How to activate the application" on page 52).
You cannot temporarily switch to Kaspersky Internet Security for a second time.

HOW TO USE KASPERSKY GADGET

When using Kaspersky Anti-Virus on a computer running under Microsoft Windows Vista or Microsoft Windows 7, you can also use the Kaspersky Gadget (hereinafter gadget).
After you install Kaspersky Anti-Virus on a computer running under Microsoft Windows 7, the gadget appears on your desktop automatically. After you install the application on a computer running under Microsoft Windows Vista, you should add the gadget to Microsoft Windows Sidebar manually (see the operating system documentation).
Gadget color indicator displays your computer protection status in the same manner as the protection status indicator in the main application window does (see section "Kaspersky Anti-Virus main window" on page 41). Green indicates that your computer is duly protected, while yellow indicates that there are protection problems, and red indicates that your computer' security is at serious risk. The gray color indicates that the application is stopped.
The gadget's appearance allows you to monitor update downloads: when the updating of databases and application modules is in progress, a spinning globe icon appears in the center of the Gadget.
U S E R G U I DE
72
You can use the gadget to perform the following main tasks:
run the application if it has been stopped;
open the main application window;
scan specified objects for viruses;
open the news window.
To run the application using the gadget,
click the Enable icon located in the center of the gadget.
To open the main application window using the gadget,
click the Kaspersky Anti-Virus icon located in the center of the gadget.
To scan an object for viruses using the gadget,
drag the object to scan onto the gadget. Task run progress is displayed in the Virus Scan window that opens.
To open the news window using the gadget,
click the icon which is displayed in the center of the gadget when a piece of news is released.

Configuring the gadget

You can configure gadget so that you can use its buttons to initiate the following actions:
edit the application settings;
view application reports;
pause protection.
Additionally, you can change the gadget's appearance by selecting another skin for it.
To configure the gadget:
1. Open the gadget settings window by clicking the icon that appears in the right top corner of the gadget block if you roll over it with the mouse cursor.
2. From the Left icon and Right icon dropdown lists, select the actions that should be performed when clicking the left and right buttons of the gadget.
3. Select a skin for the gadget by clicking the buttons.
4. Click the OK button to save the changes that you have made.
73

ADVANCED APPLICATION SETTINGS

IN THIS SECTION:
General protection settings ............................................................................................................................................. 74
Scan ................................................................................................................................................................................ 75
Update............................................................................................................................................................................. 82
File Anti-Virus .................................................................................................................................................................. 87
Mail Anti-Virus ................................................................................................................................................................. 93
Web Anti-Virus ................................................................................................................................................................ 98
IM Anti-Virus .................................................................................................................................................................. 105
Proactive Defense ......................................................................................................................................................... 107
System Watcher ............................................................................................................................................................ 109
Network protection ........................................................................................................................................................ 111
Trusted zone ................................................................................................................................................................. 115
Performance and compatibility with other applications .................................................................................................. 117
Kaspersky Anti-Virus Self-Defense ............................................................................................................................... 120
Quarantine and Backup................................................................................................................................................. 121
Additional tools for better protection of your computer .................................................................................................. 124
Reports.......................................................................................................................................................................... 128
Application appearance ................................................................................................................................................. 132
Notifications ................................................................................................................................................................... 134
Participating in the Kaspersky Security Network ........................................................................................................... 136
This section provides detailed information about each application component and describes the operation and configuration algorithms for each component.
To adjust the advanced application settings, open the settings window using one of the following methods:
click the Settings link in the top part of the main application window;
select Settings from the context menu of the application icon.
U S E R G U I DE
74

GENERAL PROTECTION SETTINGS

IN THIS SECTION:
Restricting access to Kaspersky Anti-Virus ..................................................................................................................... 74
Selecting protection mode ............................................................................................................................................... 75
In the application settings window, in the General Settings subsection of the Protection Center section, you can perform the following operations:
disable all protection components (see section "Enabling and disabling protection" on page 50);
select the interactive or automatic protection mode (see section "Selecting protection mode" on page 75);
restrict users' access to the application by setting a password (see section "Restricting access to Kaspersky
Anti-Virus" on page 74);
disable or enable automatic launch of the application at the startup of the operating system (see section
"Enabling and disabling automatic launch" on page 47);
enable a custom key combination to display the virtual keyboard on the screen (see section "Virtual Keyboard"
on page 60).

RESTRICTING ACCESS TO KASPERSKY ANTI-VIRUS

A computer may be used by several users with various levels of computer literacy. Unrestricted access to Kaspersky Anti-Virus and its settings granted to users may lead to reduced level of computer protection.
To restrict access to the application, you can set a password and specify which actions should require entering the password:
changing application settings;
closing the application;
removing the application.
Use a password for restricting access to the application removal with care. If you forget the password, the application will be hard to remove from your computer.
To restrict access to Kaspersky Anti-Virus with a password:
1. Open the application settings window.
2. In the left part of the window, select the Protection Center section, General Settings subsection.
3. In the right part of the window, in the Password protection section, check the Enable password protection box and click the Settings button.
4. In the Password protection window that opens, enter the password and specify the area to be covered by the access restriction.
A D V A N C E D A P P L I C A T I O N S E T T I N G S
75
IN THIS SECTION:
Virus scan ....................................................................................................................................................................... 75
Vulnerability Scan ........................................................................................................................................................... 82

SELECTING PROTECTION MODE

By default, Kaspersky Anti-Virus runs in automatic protection mode. In this mode the application automatically applies actions recommended by Kaspersky Lab in response to dangerous events. If you wish Kaspersky Anti-Virus to notify you of all hazardous and suspicious events in the system and to allow to decide which of the actions offered by the application should be applied, you can enable interactive protection mode.
To select protection mode:
1. Open the application settings window.
2. In the left part of the window, in the Protection Center section, select the General Settings subsection.
3. In the Interactive protection section check or uncheck the boxes depending on the selected protection mode:
to enable interactive protection mode, uncheck the Select action automatically;
to enable automatic protection mode, check the Select action automatically.
If you do not want Kaspersky Anti-Virus to delete suspicious objects when running in automatic mode, check the Do not delete suspicious objects box.

SCAN

Scanning the computer for viruses and vulnerabilities is one of the most important tasks in ensuring the computer's security. It is necessary to scan your computer for viruses on a regular basis in order to rule out the possibility of spreading malicious programs that have not been discovered by protection components, for example, because of a low security level set, or for other reasons.
Vulnerability scan performs the diagnostics of operating system and detects software features that can be used by intruders to spread malicious objects and obtain access to personal information.
The following sections contain detailed information about scan tasks features and configuration, security levels, scan methods, and scan technologies.

VIRUS SCAN

Kaspersky Anti-Virus comprises the following tasks to scan objects for viruses:
Custom Scan. Scan of objects selected by the user. You can scan any object of the computer's file system
from the following list: system memory, objects loaded on startup, system backup, email databases, hard drives, removable storage media and network drives.
Full Scan. A thorough scan of the entire system. The following objects are scanned by default: system memory,
objects loaded on startup, system backup, email databases, hard drives, removable storage media and network drives.
Critical Areas Scan. Virus scan of operating system startup objects.
U S E R G U I DE
76
The Full Scan and the Critical Areas Scan tasks have their peculiarities. For these tasks, it is not recommended to edit
IN THIS SECTION:
Changing and restoring security level ............................................................................................................................. 77
Creating the scan startup schedule ................................................................................................................................. 77
Creating a list of objects to scan ..................................................................................................................................... 78
Selecting the scan method .............................................................................................................................................. 78
Selecting the scan technology ......................................................................................................................................... 79
Changing actions to be performed on detected objects .................................................................................................. 79
Running scan under a different user account .................................................................................................................. 79
Changing the type of objects to scan .............................................................................................................................. 80
Scan of compound files ................................................................................................................................................... 80
Scan optimization ............................................................................................................................................................ 81
Scanning removable drives on connection ...................................................................................................................... 81
Creating a task shortcut .................................................................................................................................................. 82
the lists of objects to scan.
Each scan task is performed in the specified area and can be started according to the schedule created. Each scan task is characterized with a security level (combination of settings that impact the depth of the scan). By default, the mode of using records from application databases to search for threats is always enabled. You can also apply various scan methods and technologies (see page 79).
After you run the full scan task or critical areas scan task, the progress of task run is displayed in the Scan section of the Kaspersky Anti-Virus main window, in the field under the name of the task being run.
If a threat is detected, Kaspersky Anti-Virus assigns one of the following statuses to the found object:
malicious program (such as a virus or Trojan);
potentially infected (suspicious) status if the scan cannot determine whether the object is infected or not. The file
may contain a sequence of code appropriate for viruses, or modified code from a known virus.
The application displays a notification about detected threat and performs the assigned action. You can change actions to be performed on detected threat.
If you work in automatic mode (see section "Selecting protection mode" on page 75), Kaspersky Anti-Virus will automatically apply the action recommended by Kaspersky Lab specialists when dangerous objects are detected. For malicious objects this action is Disinfect. Delete if disinfection fails, for suspicious objects – Move to Quarantine.
Before attempting to disinfect or delete an infected object, Kaspersky Anti-Virus creates a backup copy for subsequent restoration or disinfection. Suspicious (potentially infected) objects are quarantined. You can enable the automatic scan of quarantined objects after each update.
Information on the scan results and events, which have occurred during the execution of the task, is logged in a Kaspersky Anti-Virus report.
A D V A N C E D A P P L I C A T I O N S E T T I N G S
77
CHANGING AND RESTORING SECURITY LEVEL
Depending on your current needs, you can select one of the preset security levels, or modify the scan settings manually.
When configuring scan task settings, you can always restore the recommended ones. They are considered optimal, recommended by Kaspersky Lab, and grouped in the Recommended security level.
To change the defined security level, perform the following actions:
1. Open the application settings window.
2. In the left part of the window, in the Scan section, select the required task (Full Scan, Critical Areas Scan, or Custom Scan).
3. In the Security level section, set the required security level for the task selected, or click the Settings button to modify scan settings manually.
If you modify the settings manually, the name of the security level will change to Custom.
To restore the default scan settings:
1. Open the application settings window.
2. In the left part of the window, in the Scan section, select the required task (Full Scan, Critical Areas Scan, or Custom Scan).
3. In the Security level section, click the Default level button for the task selected.
CREATING THE SCAN STARTUP SCHEDULE
You can create a schedule to automatically start virus scan tasks: specify task run frequency, start time (if necessary), and advanced settings.
If it is not possible to start the task for any reason (for example, the computer was not on at that time), you can configure the skipped task to start automatically as soon as it becomes possible. You can automatically pause the scan when a screensaver is inactive or the computer is unlocked. This functionality postpones the launch until the user has finished working on the computer. The scan will then not take up system resources during the work.
Special Idle Scan mode (see section "Running tasks in background mode" on page 118) allows you to start scan of the system memory, system partition, and startup objects when your computer is idle.
To modify a schedule for scan tasks:
1. Open the application settings window.
2. In the left part of the window, in the Scan section, select the required task (Full Scan, Critical Areas Scan, or Vulnerability Scan).
3. Click the Run mode button in the right part of the window.
4. In the window that opens, on the Run mode tab, in the Schedule section, select By schedule and configure the scan run mode.
To enable automatic launch of skipped task:
1. Open the application settings window.
2. In the left part of the window, in the Scan section, select the required task (Full Scan, Critical Areas Scan, or Vulnerability Scan).
U S E R G U I DE
78
3. Click the Run mode button in the right part of the window.
4. In the window that opens, on the Run mode tab, in the Schedule section, select By schedule and check the Run skipped tasks box.
To launch scans only when the computer is not being used:
1. Open the application settings window.
2. In the left part of the window, in the Scan section, select the required task (Full Scan, Critical Areas Scan, or Vulnerability Scan).
3. Click the Run mode button in the right part of the window.
4. In the window that opens, on the Run mode tab, in the Schedule section, select By schedule and check the Pause scheduled scan when screensaver is inactive and computer is unlocked box.
CREATING A LIST OF OBJECTS TO SCAN
Each virus scan task has its own default list of objects. These objects may include items in the computer's file system, such as logical drives and email databases, or other types of objects such as network drives. You can edit this list.
If the scan scope is empty, or it contains no selected objects, a scan task cannot be started.
To create a list of objects for an object scan task:
1. Open the main application window.
2. In the left part of the window, select the Scan section.
3. In the right part of the window click the select link to open the list of objects for scanning.
4. In the Custom Scan window that opens, click the Add button.
5. In the Select object to scan window that opens, select the required object and click the Add button. Click the OK button after you have added all the objects you need. To exclude any objects from the list of objects to be scanned, uncheck the boxes next to them.
You can also drag files to be scanned directly into a marked area located in the Scan section.
To create the list of objects for Full Scan, Critical Areas Scan or Vulnerability Scan tasks:
1. Open the application settings window.
2. In the left part of the window, in the Scan section, select the required scan task (Full Scan, Critical Areas Scan, or Vulnerability Scan).
3. In the right part of the window, click the Scan scope button.
4. In the Scan scope window that opens, use the Add, Edit, and Delete buttons to create a list. To exclude any objects from the list of objects to be scanned, uncheck the boxes next to them.
SELECTING THE SCAN METHOD
During virus scan, signature analysis is always used: Kaspersky Anti-Virus compares the object found with the database records.
Objects which appear on the list by default cannot be edited or deleted.
A D V A N C E D A P P L I C A T I O N S E T T I N G S
79
You can use the additional scan methods to increase the scan efficiency: heuristic analysis (analysis of the actions an object performs within the system) and rootkit scan (tools that can hide malicious programs in your operating system).
To specify which scan method to use:
1. Open the application settings window.
2. In the left part of the window, in the Scan section, select the required task (Full Scan, Critical Areas Scan, or Custom Scan).
3. In the Security level section, click the Settings button for the task selected.
4. In the window that opens, on the Additional tab, in the Scan methods section, select the required values for the settings.
SELECTING THE SCAN TECHNOLOGY
In addition to the scan methods you can use special technologies, allowing you to increase the virus scan speed by excluding the files that have not been modified since they were last scanned.
To enable the object scan technologies:
1. Open the application settings window.
2. In the left part of the window, in the Scan section, select the required task (Full Scan, Critical Areas Scan, or Custom Scan).
3. In the Security level section, click the Settings button for the task selected.
4. In the window that opens, on the Additional tab, in the Scan technologies section, select the required values.
CHANGING ACTIONS TO BE PERFORMED ON DETECTED OBJECTS
If infected or potentially infected objects are detected, the application performs the specified action.
To change the action to be performed on detected objects:
1. Open the application settings window.
2. In the left part of the window, in the Scan section, select the required task (Full Scan, Critical Areas Scan, or Custom Scan).
3. In the right part of the window, select the required option in the Action on threat detection section.
RUNNING SCAN UNDER A DIFFERENT USER ACCOUNT
By default, the scan tasks are run under your system account. However, you may need to run task under a different user account. You can specify an account to be used by the application when performing a scan task.
To start the scan under a different user's account:
1. Open the application settings window.
2. In the left part of the window, select the required task in the Scan (Full Scan, Critical Areas Scan, Custom Scan, or Vulnerability Scan) section.
U S E R G U I DE
80
3. Click the Run mode button in the right part of the window.
4. In the window that opens, on the Run mode tab, in the User account section, check the Run task as box. Specify the user name and password.
CHANGING THE TYPE OF OBJECTS TO SCAN
When specifying the type of objects to scan, you establish which file formats and sizes will be scanned for viruses when the selected scan task runs.
When selecting file types please remember the following:
Probability of malicious code penetrating several file formats (such as .txt) and its further activation is quite low.
At the same time, there are formats that contain or may contain an executable code (such as .exe, .dll, .doc). The risk of penetrating and activating malicious code in such files is quite high.
The intruder can send a virus to your computer in an executable file renamed as txt file. If you have selected the
scan of files by extension, such a file is skipped by the scan. If the scan of files by format is selected, then, regardless of the extension, File Anti-Virus will analyze the file header, and reveal that the file is an .exe file. Such a file would be thoroughly scanned for viruses.
To change the type of scanned objects:
1. Open the application settings window.
2. In the left part of the window, in the Scan section, select the required task (Full Scan, Critical Areas Scan, or Custom Scan).
3. In the Security level section, click the Settings button for the task selected.
4. In the window that opens, on the Scope tab, in the File types section, select the required option.
SCAN OF COMPOUND FILES
A common method of concealing viruses is to embed them into compound files: archives, databases, etc. To detect viruses that are hidden in this way a compound file should be unpacked, which can significantly lower the scan speed.
For each type of compound file, you can select to scan either all files or only new ones. To make your selection, click the link next to the name of the object. It changes its value when you left-click it. If you select the scan new and changed files only scan mode (see page 81), you will not be able to select the links allowing you to scan all or new only files.
You can restrict the maximum size of the compound file being scanned. Compound files larger than the specified value will not be scanned.
When large files are extracted from archives, they will be scanned even if the Do not unpack large compound files box is checked.
To modify the list of scanned compound files:
1. Open the application settings window.
2. In the left part of the window, in the Scan section, select the required task (Full Scan, Critical Areas Scan, or Custom Scan).
A D V A N C E D A P P L I C A T I O N S E T T I N G S
81
3. In the Security level section, click the Settings button for the task selected.
4. In the window that opens, on the Scope tab, in the Scan of compound files section, select the required types of compound files to be scanned.
In order to set the maximum size of compound files to be scanned:
1. Open the application settings window.
2. In the left part of the window, in the Scan section, select the required task (Full Scan, Critical Areas Scan, or Custom Scan).
3. In the Security level section, click the Settings button for the task selected.
4. In the window that opens, on the Scope tab, in the Scan of compound files section, click the Additional button.
5. In the Compound files window that opens, check the Do not unpack large compound files box and specify the maximum file size.
SCAN OPTIMIZATION
You can reduce the scan time and speed up Kaspersky Anti-Virus. This can be achieved by scanning only new files and those files that have altered since the last time they were scanned. This mode applies both to simple and compound files.
You can also set a restriction on scan duration for an object. When the specified time interval expires, the object will be excluded from the current scan (except for archives and files comprised of several objects).
To scan only new and changed files:
1. Open the application settings window.
2. In the left part of the window, in the Scan section, select the required task (Full Scan, Critical Areas Scan, or Custom Scan).
3. In the Security level section, click the Settings button for the task selected.
4. In the window that opens, on the Scope tab, in the Scan optimization section, check the Scan only new and changed files box.
To set a restriction on scan duration:
1. Open the application settings window.
2. In the left part of the window, in the Scan section, select the required task (Full Scan, Critical Areas Scan, or Custom Scan).
3. In the Security level section, click the Settings button for the task selected.
4. In the window that opens, on the Scope tab, in the Scan optimization section, check the Skip objects scanned longer than box and specify the scan duration for a single file.
SCANNING REMOVABLE DRIVES ON CONNECTION
Nowadays, malicious objects using operating systems' vulnerabilities to replicate via networks and removable media have become increasingly widespread. Kaspersky Anti-Virus allows to scan removable drives when connecting them to the computer.
U S E R G U I DE
82
To configure scanning of removable media at connection:
1. Open the application settings window.
2. In the left part of the window, in the Scan section, select General Settings.
3. In the Scan removable drives on connection section, select the action and define the maximum size of a drive to scan in the field below, if necessary.
CREATING A TASK SHORTCUT
The application provides the option of creating shortcuts for a quick start of full, quick and vulnerability scan tasks. This can start the required scan without opening the main application window or the context menu.
To create a shortcut to start a scan:
1. Open the application settings window.
2. In the left part of the window, in the Scan section, select General Settings.
3. In the right part of the window, in the Scan tasks quick run section, click the Create shortcut button next to the name of the required task (Critical Areas Scan, Full Scan, or Vulnerability Scan).
4. Specify the path for saving a shortcut and its name in the window that opens. By default, the shortcut is created with the name of a task in the My Computer folder of the current computer user.

VULNERABILITY SCAN

Vulnerabilities of the operating system may be caused by errors in programming or design, unreliable passwords, malware activity, and so on. When scanning for vulnerabilities, the application analyzes the system, searches for anomalies and damaged settings of the operating system and web browser, looks for vulnerable services and takes other security-related precautions.
The diagnostics may take some time. When it is complete, found problems are analyzed from the perspective of a possible threat to the system.
After the vulnerability scan task start (see page 58), its progress is displayed in the Vulnerability Scan window, in the Finish field. Vulnerabilities detected when scanning the system and applications, are displayed in the same window, on the System vulnerabilities and Vulnerable applications tabs.
When searching for threats, information on the results is logged in a Kaspersky Anti-Virus report.
As with virus scan tasks, you can set a start schedule for a vulnerability scan task, create a list of objects to scan (see page 78), specify an account (see section "Running scan under a different user account" on page 79) and create a shortcut for quick start of a task. By default, the applications already installed on the computer are selected as scan objects.

UPDATE

Updating databases and program modules of Kaspersky Anti-Virus ensures the up-to-date protection status to your computer. New viruses, Trojans, and other types of malware appear worldwide on a daily basis. Kaspersky Anti-Virus databases contain information about threats and ways of eliminating them so regular application update is required for ensuring your computer's security and timely detecting new threats.
Regular update requires an active license for application usage. Without a license, you will only be able to update the application once.
A D V A N C E D A P P L I C A T I O N S E T T I N G S
83
IN THIS SECTION:
Selecting an update source ................................ ................................ ................................................................ ............. 84
Creating the update startup schedule ............................................................................................................................. 85
Rolling back the last update ............................................................................................................................................ 86
Scanning Quarantine after update .................................................................................................................................. 86
Using the proxy server .................................................................................................................................................... 87
Running updates under a different user account ............................................................................................................. 87
Application update downloads and installs the following updates on your computer:
Kaspersky Anti-Virus databases.
The protection of information is based on databases which contain signatures of threats and network attacks, and the methods used to fight them. Protection components use these databases to search for and disinfect dangerous objects on your computer. The databases are supplemented every hour with records of new threats. Therefore, you are advised to update them on a regular basis.
In addition to the Kaspersky Anti-Virus databases, the network drivers that enable the application's components to intercept network traffic are updated.
Application modules.
In addition to the Kaspersky Anti-Virus databases, you can also update the program modules. The update packages fix Kaspersky Anti-Virus's vulnerabilities, and supplement or improve the existing functionality.
The main update source of Kaspersky Anti-Virus are special Kaspersky Lab update servers. While updating Kaspersky Anti-Virus, you can copy database and program module updates received from Kaspersky Lab servers into a local folder, providing access to other networked computers. This saves Internet traffic.
You can also modify automatic update startup settings.
Your computer should be connected to the Internet for successful downloading of updates from our servers. By default, the Internet connection settings are determined automatically. If you use a proxy server, you may need to adjust the connection settings.
When performing updates (see page 114), the application modules and databases on your computer are compared with the up-to-date version at the update source. If your current databases and modules differ from those in the actual version of the application, the lacking portion of updates will be installed on your computer.
If the databases are outdated, the update package may be large, which may cause additional Internet traffic (up to several dozen MB).
Prior to updating the databases, Kaspersky Anti-Virus creates backup copies of them if you want to roll back to the previous version of databases.
Information about the current condition of Kaspersky Anti-Virus databases is displayed in the Update section of the main application window.
Information on the update results and events, which have occurred during the execution of the update task, is logged in a Kaspersky Anti-Virus report.
U S E R G U I DE
84

SELECTING AN UPDATE SOURCE

The update source is a resource containing updates for databases and application modules of Kaspersky Anti-Virus. You can specify HTTP/FTP servers, local and network folders as update sources.
The main update sources are Kaspersky Lab update servers where database updates and application module updates for all Kaspersky Lab products are stored.
If you do not have access to Kaspersky Lab's update servers (for example, the access to the Internet is restricted), you can call the Kaspersky Lab headquarters (http://www.kaspersky.ru/contacts) to request contact information of Kaspersky Lab partners who can provide you with updates on removable media.
When ordering updates on removable media, please specify whether you also require updates for the application modules.
By default, the list of update sources contains only Kaspersky Lab's update servers. If several resources are selected as update sources, Kaspersky Anti-Virus tries to connect to them one after another, starting from the top of the list, and retrieves the updates from the first available source.
If you select a resource outside the LAN as an update source, you must have an Internet connection to update.
To choose an update source:
1. Open the application settings window.
2. In the left part of the window, in the Update Center section, select the Update Settings component.
3. Click the Update source button in the right part of the window.
4. In the window that opens, on the Source tab, open the selection window by clicking the Add button.
5. In the Select update source window that opens, select the folder that contains the updates, or enter an address in the Source field to specify the server from which the updates should be downloaded.
SELECTING THE UPDATE SERVER REGION
If you use Kaspersky Lab servers as the update source, you can select the optimal server location when downloading updates. Kaspersky Lab servers are located in several countries.
Using the closest Kaspersky Lab update server allows you to reduce the time period required for receiving updates and increase the operation performance speed. By default, the application uses information about the current region from the operating system's registry. You can select the region manually.
To select the server region:
1. Open the application settings window.
2. In the left part of the window, in the Update Center section, select the Update Settings component.
3. Click the Update source button in the right part of the window.
4. In the window that opens, on the Source tab, in the Regional settings section, select the Select from the list option, and then select the country nearest to your current location from the dropdown list.
A D V A N C E D A P P L I C A T I O N S E T T I N G S
85
UPDATING THE APPLICATION FROM A SHARED FOLDER
To save Internet traffic, you can configure update of Kaspersky Anti-Virus from a shared folder when updating the application on networked computers. If done, one of the networked computers receives an update package from Kaspersky Lab servers or from another web resource that contains the required set of updates. The received updates are copied into a shared folder. Other networked computers access this folder to receive updates for Kaspersky Anti­Virus.
To enable updates distribution mode:
1. Open the application settings window.
2. In the left part of the window, in the Update Center section, select the Update Settings component.
3. Check the Copy updates to folder box in the Additional section and specify the path to a public folder where all downloaded updates are copied in the field below. You can also select a folder by clicking the Browse button.
To enable updating the application on a specified computer from the shared folder you have selected:
1. Open the application settings window.
2. In the left part of the window, in the Update Center section, select the Update Settings component.
3. Click the Update source button in the right part of the window.
4. In the window that opens, on the Source tab, open the selection window by clicking the Add button.
5. In the Select update source window that opens, select a folder or enter the full path to it in the Source field.
6. Uncheck the Kaspersky Lab update servers box on the Source tab.

CREATING THE UPDATE STARTUP SCHEDULE

You can create a schedule to automatically start an update task: specify task run frequency, start time (if necessary), and advanced settings.
If it is not possible to start the task for any reason (for example, the computer was not on at that time), you can configure the skipped task to start automatically as soon as it becomes possible.
You can also postpone automatic startup of the task after the application is started. Note that all scheduled tasks will be run only after the specified time interval elapses since the startup of Kaspersky Anti-Virus.
Special Idle Scan mode (see section "Running tasks in background mode" on page 118) allows you to start automatic update keeping your computer idle.
To configure the update task startup schedule:
1. Open the application settings window.
2. In the left part of the window, in the Update Center section, select the Update Settings component.
3. Click the Run mode button in the right part of the window.
4. In the window that opens, on the Run mode tab, in the Schedule section, select the By schedule option and configure the update run mode.
U S E R G U I DE
86
To enable automatic launch of skipped task:
1. Open the application settings window.
2. In the left part of the window, in the Update Center section, select the Update Settings component.
3. Click the Run mode button in the right part of the window.
4. In the window that opens, on the Run mode tab, in the Schedule section, select By schedule and check the Run skipped tasks box.
To postpone task run after the application startup:
1. Open the application settings window.
2. In the left part of the window, in the Update Center section, select the Update Settings component.
3. Click the Run mode button in the right part of the window.
4. In the window that opens, on the Run mode tab, in the Schedule section, select the By schedule option and fill in the Postpone running after application startup for field to specify the time to which the task run should be postponed.

ROLLING BACK THE LAST UPDATE

After first update of Kaspersky Anti-Virus databases and program modules, the option of rolling back to the previous databases becomes available.
At the start of the update process, Kaspersky Anti-Virus creates a backup copy of the current databases and application modules. If necessary, you can restore the previous databases. Update rollback feature may be useful in case a new version of the databases contain an invalid signature that makes Kaspersky Anti-Virus block a safe application.
In the event of Kaspersky Anti-Virus database corruption, it is recommended to run the update task to download a valid set of databases for up-to-date protection.
To roll back to the previous database version:
1. Open the main application window.
2. Select the Update Center section in the left part of the window.
3. Click the Roll back to the previous databases button in the right part of the window.

SCANNING QUARANTINE AFTER UPDATE

If the application has scanned an object and has not found out what malicious programs have infected it, the object is quarantined. After the next database update, the product may be able to recognize the threat unambiguously and neutralize it. You can enable the auto scan for quarantined objects after each update.
For this reason, the application scans quarantined objects after each update. Scanning may change their status. Some objects can then be restored to the previous locations, and you will be able to continue working with them.
A D V A N C E D A P P L I C A T I O N S E T T I N G S
87
To enable scanning quarantined files after update:
1. Open the application settings window.
2. In the left part of the window, in the Update Center section, select the Update Settings component.
3. Check the Rescan Quarantine after update box in the Additional section.

USING THE PROXY SERVER

If you use a proxy server for Internet connection, you should reconfigure it for proper update of Kaspersky Anti-Virus.
To configure the proxy server:
1. Open the application settings window.
2. In the left part of the window, in the Update Center section, select the Update Settings component.
3. Click the Update source button in the right part of the window.
4. In the window that opens, on the Source tab, click the Proxy server button.
5. Configure the proxy server settings in the Proxy server settings window that opens.

RUNNING UPDATES UNDER A DIFFERENT USER ACCOUNT

By default, the update procedure is run under your system account. However, Kaspersky Anti-Virus can update from a source for which you have no access rights (for example, from a network folder containing updates) or authorized proxy user credentials. You can run Kaspersky Anti-Virus updates on behalf of the user account that has such rights.
To start the update under a different user's account:
1. Open the application settings window.
2. In the left part of the window, in the Update Center section, select the Update Settings component.
3. Click the Run mode button in the right part of the window.
4. In the window that opens, on the Run mode tab, in the User account section, check the Run task as box. Specify the user name and password.

FILE ANTI-VIRUS

File Anti-Virus prevents infection of the computer's file system. The component starts upon startup of the operating system, continuously remains in the computer's RAM, and scans all files being opened, saved, or launched on your computer and all connected drives.
You can create the protection scope and set the security level (collection of settings that determine the scan's thoroughness).
When the user or a program attempts to access a protected file, File Anti-Virus checks if the iChecker and iSwift databases contain information about this file, and makes a decision on whether the file should be scanned or not.
By default, the mode of using records from application databases to search for threats is always enabled. Additionally, you can apply heuristic analysis (see page 91) and various scan technologies (see page 91).
U S E R G U I DE
88
If a threat is detected, Kaspersky Anti-Virus assigns one of the following statuses to the found object:
IN THIS SECTION:
Enabling and disabling File Anti-Virus ............................................................................................................................. 88
Automatically pausing File Anti-Virus .............................................................................................................................. 88
Creating a protection scope ............................................................................................................................................ 89
Changing and restoring security level ............................................................................................................................. 90
Selecting scan mode ....................................................................................................................................................... 90
Using heuristic analysis ................................................................................................................................................... 91
Selecting the scan technology ......................................................................................................................................... 91
Changing actions to be performed on detected objects .................................................................................................. 91
Scan of compound files ................................................................................................................................................... 92
Scan optimization ............................................................................................................................................................ 93
malicious program (such as a virus or Trojan);
potentially infected (suspicious) status if the scan cannot determine whether the object is infected or not. The file
may contain a sequence of code appropriate for viruses, or modified code from a known virus.
The application displays a notification about detected threat and performs the assigned action. You can change actions to be performed on detected threat.
If you work in automatic mode (see section "Selecting protection mode" on page 75), Kaspersky Anti-Virus will automatically apply the action recommended by Kaspersky Lab specialists when dangerous objects are detected. For malicious objects this action is Disinfect. Delete if disinfection fails, for suspicious objects – Move to Quarantine.
Before attempting to disinfect or delete an infected object, Kaspersky Anti-Virus creates a backup copy for subsequent restoration or disinfection. Suspicious (potentially infected) objects are quarantined. You can enable the automatic scan of quarantined objects after each update.

ENABLING AND DISABLING FILE ANTI-VIRUS

By default, File Anti-Virus is enabled, functioning in normal mode. You can disable File Anti-Virus, if necessary.
To disable File Anti-Virus:
1. Open the application settings window.
2. In the left part of the window, in the Protection Center section, select the File Anti-Virus component.
3. In the right part of the window, uncheck the Enable File Anti-Virus box.

AUTOMATICALLY PAUSING FILE ANTI-VIRUS

When carrying out resource-intensive works, you can pause File Anti-Virus. To reduce workload and ensure quick access to objects, you can configure automatic pausing of the component at a specified time or when handling specified programs.
A D V A N C E D A P P L I C A T I O N S E T T I N G S
89
Pausing File Anti-Virus when it conflicts with some programs is an emergency operation! If any conflicts arise when working with the component, please contact Kaspersky Lab Technical Support Service (http://support.kaspersky.com). The support specialists will help you resolve the simultaneous operation of Kaspersky Anti-Virus with other applications on your computer.
To pause the component at a specified time:
1. Open the application settings window.
2. In the left part of the window, in the Protection Center section, select the File Anti-Virus component.
3. Click the Settings button in the Security level section in the right part of the window.
4. In the window that opens, on the Additional tab, in the Pause task section, check the By schedule box and click the Schedule button.
5. In the Pause task window, specify the time (in 24-hour hh:mm format) for which protection will be paused (Pause task at and Resume task at fields).
To pause the component when running specified applications:
1. Open the application settings window.
2. In the left part of the window, in the Protection Center section, select the File Anti-Virus component.
3. Click the Settings button in the Security level section in the right part of the window.
4. In the window that opens, on the Additional tab, in the Pause task section, check the At application startup box and click the Select button.
5. In the Applications window create a list of applications which pause the component when running.

CREATING A PROTECTION SCOPE

Protection scope is the location of objects being scanned and the types of files to be scanned. By default, Kaspersky Anti-Virus only scans infectable files stored on any hard, network, or removable drive.
You can expand or restrict the protection scope by adding / removing objects to be scanned or changing the type of files to be scanned. For example, you can only select EXE files run from network drives to be scanned.
When selecting file types please remember the following:
Probability of malicious code penetrating several file formats (such as .txt) and its further activation is quite low.
At the same time, there are formats that contain or may contain an executable code (such as .exe, .dll, .doc). The risk of penetrating and activating malicious code in such files is quite high.
The intruder can send a virus to your computer in an executable file renamed as txt file. If you have selected the
scan of files by extension, such a file is skipped by the scan. If the scan of files by format is selected, then, regardless of the extension, File Anti-Virus will analyze the file header, and reveal that the file is an .exe file. Such a file would be thoroughly scanned for viruses.
To edit the object scan list:
1. Open the application settings window.
2. In the left part of the window, in the Protection Center section, select the File Anti-Virus component.
3. Click the Settings button in the right part of the window.
U S E R G U I DE
90
4. In the window that opens, on the General tab, in the Protection scope section, open the object selection window by clicking the Add link.
5. In the Select object to scan window, select an object and click the Add button.
6. After you have added all required objects, click the OK button in the Select object to scan window.
7. To remove an object from the scan list, uncheck the box next to it.
To change the type of scanned objects:
1. Open the application settings window.
2. In the left part of the window, in the Protection Center section, select the File Anti-Virus component.
3. Click the Settings button in the right part of the window.
4. In the window that opens, on the General tab, in the File types section, select the required settings.

CHANGING AND RESTORING SECURITY LEVEL

Depending on your actual needs, you can select one of the preset file/memory security levels or configure File Anti-Virus on your own.
When configuring File Anti-Virus, you can always roll back to the recommended settings. These settings are considered optimal, recommended by Kaspersky Lab, and grouped in the Recommended security level.
To change the current file and memory security level:
1. Open the application settings window.
2. In the left part of the window, in the Protection Center section, select the File Anti-Virus component.
3. In the right part of the window, in the Security level section, set the required security level, or click the Settings button to modify the settings manually.
If you modify the settings manually, the name of the security level will change to Custom.
To restore the default protection settings:
1. Open the application settings window.
2. In the left part of the window, in the Protection Center section, select the File Anti-Virus component.
3. Click the Default level button in the Security level section in the right part of the window.

SELECTING SCAN MODE

The scan mode is the condition which triggers File Anti-Virus into activity. The default setting for Kaspersky Anti-Virus is smart mode, which determines if the object is subject to scanning on the basis of the actions performed in respect of it. For example, when working with a Microsoft Office document, Kaspersky Anti-Virus scans the file when it is first opened and last closed. Intermediate operations that overwrite the file do not cause it to be scanned.
You can change the object scan mode. The scan mode should be selected depending on the files you work with most of the time.
A D V A N C E D A P P L I C A T I O N S E T T I N G S
91
To change the object scan mode:
1. Open the application settings window.
2. In the left part of the window, in the Protection Center section, select the File Anti-Virus component.
3. Click the Settings button in the Security level section in the right part of the window.
4. In the window that opens on the Additional tab, in the Scan mode section, select the required mode.

USING HEURISTIC ANALYSIS

During File Anti-Virus operation, signature analysis is always used: Kaspersky Anti-Virus compares the object found with the database records.
To improve protection efficiency, you can use the heuristic analysis (i.e., analysis of activity that an object performs in the system). This analysis allows detecting new malicious objects which are not yet described in the databases.
To enable the heuristic analysis:
1. Open the application settings window.
2. In the left part of the window, in the Protection Center section, select the File Anti-Virus component.
3. Click the Settings button in the Security level section in the right part of the window.
4. In the window that opens, on the Performance tab, in the Scan methods section, check the Heuristic analysis box and specify the detail level for the scan.

SELECTING THE SCAN TECHNOLOGY

In addition to the heuristic analysis you can use special technologies, allowing an increase in the objects scan speed by excluding the files that have not been modified since they were last scanned.
To enable the object scan technologies:
1. Open the application settings window.
2. In the left part of the window, in the Protection Center section, select the File Anti-Virus component.
3. Click the Settings button in the Security level section in the right part of the window.
4. In the window that opens, on the Additional tab, in the Scan technologies section, select the required values.

CHANGING ACTIONS TO BE PERFORMED ON DETECTED OBJECTS

If infected or potentially infected objects are detected, the application performs the specified action.
To change the specified action to be performed on detected objects:
1. Open the application settings window.
2. In the left part of the window, in the Protection Center section, select the File Anti-Virus component.
3. In the right part of the window, select the required option in the Action on threat detection section.
U S E R G U I DE
92

SCAN OF COMPOUND FILES

A common method of concealing viruses is to embed them into compound files: archives, databases, etc. To detect viruses that are hidden in this way a compound file should be unpacked, which can significantly lower the scan speed.
For each type of compound file, you can select to scan either all files or only new ones. To make your selection, click the link next to the name of the object. It changes its value when you left-click it. If you select the scan new and changed files only scan mode (see page 93), you will not be able to select the links allowing you to scan all or new only files.
By default, Kaspersky Anti-Virus only scans embedded OLE objects.
When large compound files are scanned, their preliminary unpacking may take a long period of time. This period can be reduced by enabling unpacking of compound files in background mode if they exceed the specified file size. If a malicious object is detected while working with such a file, Kaspersky Anti-Virus will notify you about it.
You can restrict the maximum size of the compound file being scanned. Compound files larger than the specified value will not be scanned.
When large files are extracted from archives, they will be scanned even if the Do not unpack large compound files box is checked.
To modify the list of scanned compound files:
1. Open the application settings window.
2. In the left part of the window, in the Protection Center section, select the File Anti-Virus component.
3. Click the Settings button in the Security level section in the right part of the window.
4. In the window that opens, on the Performance tab, in the Scan of compound files section, select the required type of compound files to be scanned.
In order to set the maximum size of compound files to be scanned:
1. Open the application settings window.
2. In the left part of the window, in the Protection Center section, select the File Anti-Virus component.
3. Click the Settings button in the Security level section in the right part of the window.
4. In the window that opens, on the Performance tab, in the Scan of compound files section, click the Additional button.
5. In the Compound files window, check the Do not unpack large compound files box and specify the maximum file size.
A D V A N C E D A P P L I C A T I O N S E T T I N G S
93
To unpack large-sized compound files in background mode:
1. Open the application settings window.
2. In the left part of the window, in the Protection Center section, select the File Anti-Virus component.
3. Click the Settings button in the Security level section in the right part of the window.
4. In the window that opens, on the Performance tab, in the Scan of compound files section, click the Additional button.
5. In the Compound files window, check the Extract compound files in the background box and specify the minimum file size.

SCAN OPTIMIZATION

You can reduce the scan time and speed up Kaspersky Anti-Virus. This can be achieved by scanning only new files and those files that have altered since the last time they were scanned. This mode applies both to simple and compound files.
To scan only new and changed files:
1. Open the application settings window.
2. In the left part of the window, in the Protection Center section, select the File Anti-Virus component.
3. Click the Settings button in the right part of the window.
4. In the window that opens, on the Performance tab, in the Scan optimization section, check the Scan only new and changed files box.
MAIL ANTI-VIRUS

Mail Anti-Virus scans incoming and outgoing messages for malicious objects. It starts when the operating system boots and runs continually, scanning all email messages sent or received via the POP3, SMTP, IMAP, MAPI, and NNTP protocols, as well as over encrypted connections (SSL) via POP3 and IMAP (see section "Scanning encrypted connections" on page 111).

The indicator of the component's operation is the application icon in the taskbar notification area, which looks like whenever an email message is being scanned.
You can specify the types of messages which should be scanned and select the security level (see page 95) (configuration settings affecting the scan intensity).
The application intercepts each message that the user sends or receives and parses it into basic components: message header, body, attachments. Message body and attachments (including attached OLE objects) are scanned for the presence of threats.
By default, the mode of using records from application databases to search for threats is always enabled. In addition, you can enable heuristic analysis. Furthermore, you can enable filtering of attachments (see page 96), which allows automatic renaming or deletion of specified file types.
If a threat is detected, Kaspersky Anti-Virus assigns one of the following statuses to the found object:
malicious program (such as a virus or Trojan);
potentially infected (suspicious) status if the scan cannot determine whether the object is infected or not. The file
may contain a sequence of code appropriate for viruses, or modified code from a known virus.
U S E R G U I DE
94
The application blocks a message, displays a notification about detected threat and performs the assigned action. You
IN THIS SECTION:
Enabling and disabling Mail Anti-Virus ............................................................................................................................ 94
Creating a protection scope ............................................................................................................................................ 95
Changing and restoring security level ............................................................................................................................. 95
Using heuristic analysis ................................................................................................................................................... 96
Changing actions to be performed on detected objects .................................................................................................. 96
Attachment filtering ......................................................................................................................................................... 96
Scan of compound files ................................................................................................................................................... 97
Email scanning in Microsoft Office Outlook ..................................................................................................................... 97
Email scanning in The Bat! .............................................................................................................................................. 97
can change actions to be performed on detected threat (see section "Changing actions to be performed on detected objects" on page 96).
If you work in automatic mode (see section "Selecting protection mode" on page 75), Kaspersky Anti-Virus will automatically apply the action recommended by Kaspersky Lab specialists when dangerous objects are detected. For malicious objects this action is Disinfect. Delete if disinfection fails, for suspicious objects – Move to Quarantine.
Before attempting to disinfect or delete an infected object, Kaspersky Anti-Virus creates a backup copy for subsequent restoration or disinfection. Suspicious (potentially infected) objects are quarantined. You can enable the automatic scan for quarantined objects after each update.
After the email message is successfully disinfected, it returns to the user. If the disinfection fails, the infected object is deleted from the message. After the virus scan, a special text is inserted in the subject line of the email, stating that the email was processed by Kaspersky Anti-Virus.
An integrated plug-in is provided for Microsoft Office Outlook (see section "Email scanning in Microsoft Office Outlook" on page 97) that allows you to fine-tune the email client.
If you use The Bat!, Kaspersky Anti-Virus can be used in conjunction with other anti-virus applications. At that, the email traffic processing rules (see section "Email scanning in The Bat!" on page 97) are configured directly in The Bat! and override the application’s email protection settings.
When working with other mail programs, including Microsoft Outlook Express/Windows Mail, Mozilla Thunderbird, Eudora, and Incredimail, the Mail Anti-Virus component scans email on SMTP, POP3, IMAP, and NNTP protocols.
Note that when working with the Thunderbird mail client, email messages transferred via IMAP will not be scanned for viruses if any filters moving messages from the Inbox folder are used.

ENABLING AND DISABLING MAIL ANTI-VIRUS

By default, Mail Anti-Virus is enabled, functioning in normal mode. You can disable Mail Anti-Virus, if necessary.
A D V A N C E D A P P L I C A T I O N S E T T I N G S
95
To disable Mail Anti-Virus:
1. Open the application settings window.
2. In the left part of the window, in the Protection Center section, select the Mail Anti-Virus component.
3. In the right part of the window, uncheck the Enable Mail Anti-Virus box.

CREATING A PROTECTION SCOPE

Protection scope is understood as the type of messages to be scanned. By default, Kaspersky Anti-Virus scans both incoming and outgoing emails.
If you have selected scan only incoming messages, you are advised to scan outgoing email when you first begin using Kaspersky Anti-Virus since it is likely that there are worms on your computer which will distribute themselves via email. This will avoid unpleasant situations caused by unmonitored mass emailing of infected emails from your computer.
The protection scope also includes the settings used to integrate the Mail Anti-Virus component into the system, and the protocols to be scanned. By default, the Mail Anti-Virus component is integrated into the Microsoft Office Outlook and The Bat! email client applications.
To disable scans of outgoing emails:
1. Open the application settings window.
2. In the left part of the window, in the Protection Center section, select the Mail Anti-Virus component.
3. Click the Settings button in the right part of the window.
4. Use the General tab of the displayed window to select in the Protection scope section the option Incoming messages only.
To select the protocols to scan and the settings to integrate Mail Anti-Virus into the system:
1. Open the application settings window.
2. In the left part of the window, in the Protection Center section, select the Mail Anti-Virus component.
3. Click the Settings button in the right part of the window.
4. In the window that opens, on the Additional tab, in the Connectivity section select the required settings.

CHANGING AND RESTORING SECURITY LEVEL

Depending on your actual needs, you can select one of the preset email security levels or configure Mail Anti-Virus on your own.
Kaspersky Lab advises you not to configure Mail Anti-Virus settings on your own. In most cases, it is enough to select a different security level.
When configuring Mail Anti-Virus, you can always roll back to the recommended values. These settings are considered optimal, recommended by Kaspersky Lab, and grouped in the Recommended security level.
U S E R G U I DE
96
To change the preset email security level:
1. Open the application settings window.
2. In the left part of the window, in the Protection Center section, select the Mail Anti-Virus component.
3. In the right part of the window, in the Security level section, set the required security level, or click the Settings button to modify the settings manually.
If you modify the settings manually, the name of the security level will change to Custom.
To restore default mail protection settings:
1. Open the application settings window.
2. In the left part of the window, in the Protection Center section, select the Mail Anti-Virus component.
3. Click the Default level button in the Security level section in the right part of the window.

USING HEURISTIC ANALYSIS

During Mail Anti-Virus operation, signature analysis is always used: Kaspersky Anti-Virus compares the object found with the database records.
To improve protection efficiency, you can use the heuristic analysis (i.e., analysis of activity that an object performs in the system). This analysis allows detecting new malicious objects which are not yet described in the databases.
To enable the heuristic analysis:
1. Open the application settings window.
2. In the left part of the window, in the Protection Center section, select the Mail Anti-Virus component.
3. Click the Settings button in the right part of the window.
4. In the window that opens, on the General tab, in the Scan methods section, check the Heuristic analysis box and specify the detail level for the scan.

CHANGING ACTIONS TO BE PERFORMED ON DETECTED OBJECTS

If infected or potentially infected objects are detected, the application performs the specified action.
To change the specified action to be performed on detected objects:
1. Open the application settings window.
2. In the left part of the window, in the Protection Center section, select the Mail Anti-Virus component.
3. In the right part of the window, select the required option in the Action on threat detection section.

ATTACHMENT FILTERING

Malware is most often distributed in mail as objects attached to messages. To protect your computer, for example, from automatic launch of attached files, you can enable filtering of attachments, which can automatically rename or delete files of specified types.
A D V A N C E D A P P L I C A T I O N S E T T I N G S
97
To enable filtering of attachments:
1. Open the application settings window.
2. In the left part of the window, in the Protection Center section, select the Mail Anti-Virus component.
3. Click the Settings button in the right part of the window.
4. Use the Attachment filter tab of the displayed window to select the filtering mode for attachments. When you select either of the last two modes, the list of file types (extensions) will become enabled; there you can select the required types or add a mask to select a new type.
To add a new type mask to the list, click the Add link to open the Input file name mask window and enter the necessary information.

SCAN OF COMPOUND FILES

A common method of concealing viruses is to embed them into compound files: archives, databases, etc. To detect viruses that are hidden in this way a compound file should be unpacked, which can significantly lower the scan speed.
You can enable or disable the scan of attached archives and limit the maximum size of archives to be scanned.
If your computer is not protected by any local network software (you access the Internet directly without a proxy server or a firewall), it is not recommended to disable the scanning of attached archives.
To configure the settings for the scan of compound files:
1. Open the application settings window.
2. In the left part of the window, in the Protection Center section, select the Mail Anti-Virus component.
3. Click the Settings button in the right part of the window.
4. Use the General tab in the displayed window to define necessary settings.

EMAIL SCANNING IN MICROSOFT OFFICE OUTLOOK

If you are using Microsoft Office Outlook as your mail client, you may modify additional settings for scanning your mail for viruses.
When installing Kaspersky Anti-Virus, a special plug-in is installed in Microsoft Office Outlook. It allows you to configure Mail Anti-Virus settings quickly, and determine when email messages are scanned for dangerous objects.
The plug-in comes in the form of Email protection tab located in the Tools Options menu.
To define the proper time for mail scanning, perform the following steps:
1. Open the main Microsoft Outlook application window.
2. Select Tools Options from the application menu.
3. Use the Email protection tab to select necessary settings.

EMAIL SCANNING IN THE BAT!

Actions in respect of infected email objects in The Bat! are defined using the application's own tools.
U S E R G U I DE
98
Mail Anti-Virus settings determining if incoming and outgoing messages should be scanned, which actions should be performed in respect of dangerous objects in email, and which exclusions should apply, are ignored. The only thing that The Bat! takes into account is the scanning of attached archives.
The email protection settings extend to all the anti-virus components installed on the computer that support working with the Bat!.
Note that incoming email messages are first scanned by Mail Anti-Virus and only after that – by the plug-in of The Bat!. If a malicious object is detected, you will receive a notification from Kaspersky Anti-Virus. If you select the Disinfect (Delete) action in the notification window of Mail Anti-Virus, actions aimed at eliminating the threat are performed by Mail Anti-Virus. If you select the Ignore option in the notification window, the object will be disinfected by the plug-in of The Bat!. When sending email messages, they are first scanned by the plug-in and then - by Mail Anti-Virus.
You have to define the following criteria:
which mail stream (incoming, outgoing) should be scanned;
when the mail objects should be scanned (when opening a message, before saving to disk);
what actions are performed by the mail client if dangerous objects are detected in email messages. For
example, you could select:
Attempt to disinfect infected parts – if this option is selected, the attempt is made to disinfect the infected
object; if it cannot be disinfected, the object remains in the message.
Delete infected parts – if this option is selected, the dangerous object in the message is deleted
regardless of whether it is infected or suspected to be infected.
By default, The Bat! places all infected email objects in Quarantine without attempting to disinfect them.
The Bat! does not give special headers to emails containing dangerous objects.
To set up email protection rules in The Bat!:
1. Open the main The Bat! window.
2. Select the Settings item from the Properties menu of the mail client.
3. Select the Virus protection object from the settings tree.
WEB ANTI-VIRUS
Whenever you use the Internet, the information stored on your computer becomes subject to the risk of infection from dangerous programs. These can infiltrate your computer while you are downloading free software, or browsing known safe websites, which have been subject to hacker attacks before you have gone on them. Moreover, network worms can penetrate your computer before you open a webpage or download a file just because your computer is connected to the Internet.

The Web Anti-Virus component is designed to ensure security while using the Internet. It protects your computer against data coming in via the HTTP, HTTPS and FTP protocols, and also prevents dangerous scripts from being executed on the computer.

Web protection monitors the data stream that passes only through the ports included in the monitored port list. A list of ports that are most commonly used for data transfer is included in the Kaspersky Anti-Virus distribution kit. If you use any ports that are not included in this list, add them into the list of monitored ports (see section "Creating a list of monitored ports" on page 114) to ensure protection of data streams being directed via them.
A D V A N C E D A P P L I C A T I O N S E T T I N G S
99
A collection of settings called the security level defines how the data stream will be scanned (see section "Selecting the Web Anti-Virus security level" on page 101). If Web Anti-Virus detects a threat, it will perform the assigned action.
Kaspersky Lab advises you not to configure Web Anti-Virus settings on your own. In most cases, it is enough to select an appropriate security level.

Component operation algorithm

Web Anti-Virus protects the data reaching your computer and transferred from it over HTTP, HTTPS and FTP, and prevents hazardous scripts from running on the computer. By default, scan of secure connections (via HTTPS) is disabled, you can enable and configure it (see section "Scanning encrypted connections" on page 111).
Data is protected using the following algorithm:
1. Each web page or file that is accessed by the user or an application via the HTTP, HTTPS or FTP protocols, is intercepted and analyzed for malicious code by Web Anti-Virus. Malicious objects are detected using both Kaspersky Anti-Virus databases and the heuristic algorithm. The database contains descriptions of all the malicious programs known to date and methods for neutralizing them. The heuristic algorithm can detect new viruses that have not yet been entered in the database.
2. After the analysis, you have the following courses of action available:
If a web page or an object accessed by the user contains malicious code, access to them is blocked. A
notification is displayed that the object or page being requested is infected.
If the file or web page does not contain malicious code, the program immediately grants the user access to
it.
Scripts are scanned according to the following algorithm:
1. Each script run is intercepted by Web Anti-Virus and is analyzed for malicious code.
2. If the script contains malicious code, Web Anti-Virus blocks this script and informs the user of it with a special pop-up message.
3. If no malicious code is discovered in the script, it is run.
Web Anti-Virus intercepts only scripts using the Microsoft Windows Script Host functionality.
U S E R G U I DE
100
IN THIS SECTION:
Enabling and disabling Web Anti-Virus ......................................................................................................................... 100
Selecting the Web Anti-Virus security level ................................................................................................................... 101
Changing actions to be performed on dangerous objects ............................................................................................. 101
Checking URLs using the databases of suspicious and phishing addresses ................................................................ 101
Using heuristic analysis ................................................................................................................................................. 102
Blocking dangerous scripts ........................................................................................................................................... 103
Scan optimization .......................................................................................................................................................... 103
Kaspersky URL Advisor ................................................................................................................................................ 103
Creating a list of trusted addresses ............................................................................................................................... 104
Restoring Web Anti-Virus default settings ..................................................................................................................... 105

ENABLING AND DISABLING WEB ANTI-VIRUS

There are two ways to enable or disable the component:
from the main application window (see section "Kaspersky Anti-Virus main window" on page 41);
from the settings window (see section "Application settings window" on page 45).
To enable or disable Web Anti-Virus in the main window, perform the following steps:
1. Open the main application window and select the Protection Center section in the left part of the window.
2. In the right part of the window, left-click to open the Online Security or the System and Applications Protection section.
3. Open the menu for selecting an action to take on the component by clicking the Web Anti-Virus button and select Enable Web Anti-Virus (if the component should be enabled) or Disable Web Anti-Virus (if it should be disabled).
When enabling a component, the icon on its left turns green and when disabling it, the icon turns grey.
To enable or disable Web Anti-Virus in the settings window:
1. Open the application settings window.
2. In the left part of the window, in the Protection Center section, select the Web Anti-Virus component.
3. In the right part of the window, check the Enable Web Anti-Virus box if the component should be enabled. Uncheck the box if the component should be disabled.
Loading...