1. Manuals
  2. Brands
  3. KAPERSKY Manuals
  4. Software
  5. ANTI-VIRUS 5.0 - FOR SAMBA SERVERS
  6. Administrator's manual

KAPERSKY ANTI-VIRUS 5.0 - FOR WINDOWS FILE SERVERS Administrator's Manual

Hide thumbs Also See for ANTI-VIRUS 5.0 - FOR WINDOWS FILE SERVERS:
Table of Contents

Advertisement

Quick Links

Download this manual See also: Administrator's Manual, User Manual
KASPERSKY LAB
®
Kaspersky Anti-Virus
5.0
for Windows File Servers
ADMINISTRATOR'S
MANUAL

Advertisement

Table of Contents
loading
Need help?

Need help?

Do you have a question about the ANTI-VIRUS 5.0 - FOR WINDOWS FILE SERVERS and is the answer not in the manual?

Questions and answers

Subscribe to Our Youtube Channel

Related Manuals for KAPERSKY ANTI-VIRUS 5.0 - FOR WINDOWS FILE SERVERS

Summary of Contents for KAPERSKY ANTI-VIRUS 5.0 - FOR WINDOWS FILE SERVERS

  • Page 1 KASPERSKY LAB ® Kaspersky Anti-Virus for Windows File Servers ADMINISTRATOR’S MANUAL...
  • Page 2 ® K A S P E R S K Y A N T I - V I R U S 5 . 0 F O R W I N D O W S F I L E S E R V E R S Administrator’s manual ©...

  • Page 3: Table Of Contents

    Contents CHAPTER 1. KASPERSKY ANTI-VIRUS FOR WINDOWS FILE SERVERS..... 6 1.1. What's new in version 5.0 ..................7 1.2. Hardware and software system requirements ............. 8 1.3. Product package....................9 1.4. Services for registered users ................9 1.5. Adopted conventions................... 10 CHAPTER 2.
  • Page 4 Kaspersky Anti-Virus 5.0 for Windows File Servers 6.1.6. Application launch..................30 6.1.7. Application stop..................... 30 6.1.8. Task management..................30 6.1.9. Convert report to convenient format for reading.......... 32 6.1.10. Import / export of parameters..............32 6.2. Application management using the Administration console ......33 6.2.1.
  • Page 5 General information about the product CHAPTER 9. ANTI-VIRUS PROTECTION AND SERVER MAINTENANCE .... 86 CHAPTER 10. FREQUENTLY ASKED QUESTIONS..........87 APPENDIX A. GLOSSARY................... 95 APPENDIX B. COMMAND LINE RETURN CODES ..........101 A.1. General return codes ..................101 A.2. Return codes for on-demand scan..............101 A.3.

  • Page 6: Chapter 1. Kaspersky Anti-Virus For Windows File Servers

    CHAPTER 1. KASPERSKY ANTI- VIRUS FOR WINDOWS FILE SERVERS ® Kaspersky Anti-Virus for Windows File Servers (hereinafter also referred to as Kaspersky Anti-Virus or the application) is designed to protect file servers from viruses and malware. The following features are implemented in the application: •...

  • Page 7: What's New In Version 5.0

    General information about the product Please keep in mind that new viruses emerge every day, therefore you are advised to set up automatic product updates to keep the product up-to-date. • Local administration of the application through the command line or via Administration console, and centralized control through Kaspersky Administration Kit.

  • Page 8: Hardware And Software System Requirements

    Kaspersky Anti-Virus 5.0 for Windows File Servers • The event report functionality has been extended, enabling logged events to trigger corresponding actions, for example: saving to Windows Event Log, E-mail notification, notification using NET SEND or run an operating system command. •...

  • Page 9: Product Package

    General information about the product 1.3. Product package You can purchase the software from our distributors (retail box), or from one of our web shops (for example, www.kaspersky.com, E-Store section). If you purchase a box product, the software bundle includes: •...

  • Page 10: Adopted Conventions

    Kaspersky Anti-Virus 5.0 for Windows File Servers • software upgrades; • consultations regarding issues pertaining to installation, configuration and use of this software, available over the telephone or via e-mail; • notifications about new software products from the Kaspersky Lab, and new viruses outbreaks.
  • Page 11 General information about the product Style Purpose [key] Command line keys. – key purpose. Text of information Text of configuration files, information messages and the command messages and the command line. line...

  • Page 12: Chapter 2. Software Installation And Removal

    CHAPTER 2. SOFTWARE INSTALLATION AND REMOVAL There are two main choices for the installation of Kaspersky Anti-Virus: local installation, and remote installation, through a centralized administration computer using Kaspersky Administration Kit 5.0. This manual describes the local installation of Kaspersky Anti-Virus. For details regarding remote product installation please consult the administrator’s guide for Kaspersky Administration Kit 5.0.

  • Page 13: Software Installation

    Software installation and removal 2.1. Software installation In order to install the application run the setup executable file included in the distribution package. The installation runs in interactive mode. Each window contains certain buttons controlling the installation process. There are four main buttons: •...
  • Page 14 Kaspersky Anti-Virus 5.0 for Windows File Servers Step 5. License key installation In the License key dialog box you should specify the license key, which Kaspersky Anti-Virus will use for checking the presence of a license agreement and its validity. The license key is your personal "key"...

  • Page 15: Software Removal

    Software installation and removal If you disable that checkbox, anti-virus protection will be automatically activated only after the restart of your computer. 2.2. Software removal If for some reason you need to remove Kaspersky Anti-Virus, run Start!Programs!Kaspersky Anti-Virus Windows File Servers!Remove Kaspersky Anti-Virus or use the standard Microsoft Windows Add or Remove Programs Control Panel applet.

  • Page 16: Chapter 3. Application Management Concepts

    CHAPTER 3. APPLICATION MANAGEMENT CONCEPTS Kaspersky Anti-Virus is installed on servers and can either be controlled locally, or remotely through Kaspersky Administration Kit if the computer is included in a centralized control system. The application recognizes two categories of users: •...

  • Page 17: Introduction To Software Administration

    Application management concept Please see details of centralized management concepts in the Administrator's guide for Kaspersky Administration Kit 5.0. 3.1. Introduction to software administration If Kaspersky Anti-Virus is locally controlled, computer protection is based on the application and task parameters defined by the administrator. A task is a named action performed by the application.

  • Page 18: Main Application Window

    Kaspersky Anti-Virus 5.0 for Windows File Servers 3.2.1. Main application window The main window of the application (see Figure 1) contains: • The menu – it contains the main features used to manage files and dialog boxes and provides access to Help topics. •...

  • Page 19: Context-Sensitive (Right-Click) Menu

    Application management concept allows to you to open the application parameters dialog box, which also allows you to manage the tasks on the selected computer. If an Administration server is present on the LAN you can control Kaspersky Anti- Virus on remote servers. When a connection to an Administration server is established the <Server name>...

  • Page 20: Chapter 4. Default Server Protection

    CHAPTER 4. DEFAULT SERVER PROTECTION Anti-virus protection will be enabled immediately after application setup on a computer using the default parameters recommended by experts at Kaspersky lab for optimal protection of your computer. Besides, the application provides an opportunity for quick modification of its parameters by selecting any of three predefined protection levels specified by Kaspersky Lab experts: maximum protection, recommended or high speed.

  • Page 21: Default Parameters

    Default server protection Table 1. Parameter settings of different protection levels Maximum protection Recommended High speed Parameter Protec- Protec- Protec- Scanning Scanning Scanning tion tion tion Use IChecker Use IStreams Files by Files by Files by Files by Scanning level All files All files ext-...
  • Page 22 Kaspersky Anti-Virus 5.0 for Windows File Servers Details of the default settings for anti-virus protection tasks are as follows: REAL-TIME PROTECTION IN THE MONITORING MODE The recommended level of protection for real-time protection has the following settings: • infectable files are analyzed when they are opened for reading, writing and execution, namely: •...
  • Page 23 Default server protection • If a riskware program is detected, Kaspersky Anti-Virus will skip it and add a corresponding record to its report. • If an infected object is detected the application will attempt to disinfect it and removes the object if disinfection fails; if a suspicious object is detected it is quarantined.

  • Page 24: Chapter 5. Recommended Setup Depending Upon Server Configuration

    CHAPTER 5. RECOMMENDED SETUP DEPENDING UPON SERVER CONFIGURATION A computer may perform several roles simultaneously. For instance, it can act at the same time as a file server, e-mail server, application server, and database server etc. During Anti-Virus setup you are advised to configure your server following the guidelines below: •...

  • Page 25: Chapter 6. Local Management

    CHAPTER 6. LOCAL MANAGEMENT 6.1. Using the command line Kaspersky Anti-Virus can be controlled using the command line, which supports the following tasks: SCAN Scanning of selected objects FULLSCAN Complete computer scanning UPDATE Updating of the anti-virus database and application modules ROLLBACK Rolling back of the last anti-virus database update...

  • Page 26: Scanning Selected Objects

    Kaspersky Anti-Virus 5.0 for Windows File Servers In order to display this help: KAVSHELL [ /? | HELP ] 6.1.1. Scanning selected objects Command syntax: KAVSHELL SCAN [objects] [/L[!]:objects_file] [/F(A|E|C)] [/DISINFECT|/DELETE] [/W]:report_file] objects [files] [directories] [PREDEFINED] Specifies a list of one or more files, directories or predefined objects (PREDEFINED) delimited by spaces.

  • Page 27: Full Scan

    Local management – scan infectable files, by format – scan infectable files, by extension /W:report_file Writes only important events to specified report_file. Use of either absolute or relative file path is allowed. The path must be specified in quotes if it contains a space character.

  • Page 28: Launching Update

    Kaspersky Anti-Virus 5.0 for Windows File Servers /WA:report_file Writes all events to specified report_file. Use of either absolute or relative file path is allowed. The path must be specified in quotes if it contains a space character. Example: KAVSHELL FULLSCAN KAVSHELL FULLSCAN /WA:fullscan.log 6.1.3.

  • Page 29: Rolling Back The Last Update

    Local management 6.1.4. Rolling back the last update Command syntax: KAVSHELL ROLLBACK [/W[A]:report_file] /W:report_file Writes only important events to specified report_file. Use of either absolute or relative file path is allowed. The path must be specified in quotes if it contains a space character.

  • Page 30: Application Launch

    Kaspersky Anti-Virus 5.0 for Windows File Servers protection task. Real-time protection (RTP) task identifier. If taskid is not taskid specified then commands are applied to the whole RTP. Can be one of the following: • on-access – real-time file protection •...
  • Page 31 Local management /START Starts the task with the specified taskid. /W:report_file Writes only important events to specified report_file. Use of either absolute or relative file path is allowed. The path must be specified in quotes if it contains a space character. /WA:report_file Writes all events to specified report_file.

  • Page 32: Convert Report To Convenient Format For Reading

    Kaspersky Anti-Virus 5.0 for Windows File Servers Examples: KAVSHELL TASK KAVSHELL TASK update-app /START /WA:update_ application.log KAVSHELL TASK _LOCAL_0630cddf-0793-4c2d-be1e-a3daed0904c6 /START /WA:task.log KAVSHELL TASK _LOCAL_0630cddf-0793-4c2d-be1e-a3daed0904c6 /DELETE 6.1.9. Convert report to convenient format for reading Command syntax: KAVSHELL CONVERT /I:report_file /O: output_report_file /I:report_file Initial report file generated by a task in optimized format.

  • Page 33: Application Management Using The Administration Console

    Local management settings_file The name of the file used as the source or target while importing or exporting the parameters of Kaspersky Anti-Virus. Examples: KAVSHELL IMPORT c:\kav50settings.xml KAVSHELL EXPORT c:\kav50settings.xml 6.2. Application management using Administration console When Kaspersky Anti-Virus is managed locally using Administration console you are actually dealing only with the Local computer object in the console tree.

  • Page 34: Launching And Stopping Tasks

    Kaspersky Anti-Virus 5.0 for Windows File Servers In order to review tasks for Kaspersky Anti-Virus, select the Local computer object in the console tree and use the Properties command of the right-click menu. In the next window, titled <Computer name> Properties, switch to the Tasks tab (see Fig. 2). You can edit the task list using the Add and Delete buttons;...

  • Page 35: Viewing And Editing Task Parameters

    Local management To manually start / stop / pause / resume a task, select the required task from the list (see Fig. 2), open the right-click menu, and run the Start / Stop / Pause / Resume command. Similar commands can be accessed from the task configuration window on the General tab (see Fig.
  • Page 36 Kaspersky Anti-Virus 5.0 for Windows File Servers Figure 3. The General tab All tabs (except for the Settings and Account tabs) are standard tabs for Kaspersky Administration Kit 5.0. More information about these tabs is available in the administrator’s guide for that product. The Account tab can be used to set up task launch from a selected account (see section 6.2.1.3 on p.
  • Page 37 Local management Figure 4. Setting up an on-demand scanning task The Scan Scope field displays a list of objects to be scanned while the current task is running. Objects for scanning (for instance, a drive, directory or file) can be added in the window which opens after clicking the Add button. The list of objects can be edited using the Edit button, and objects can be removed from the scan list by clicking the Delete button.
  • Page 38 Kaspersky Anti-Virus 5.0 for Windows File Servers Figure 5. The Scan Scope tab In the Scan Scope area you can select and deselect the resources which will be scanned while running the task by checking the appropriate boxes. In the Objects to scan area, select the types of objects to be scanned: •...
  • Page 39 Local management You may use masks to specify excluded objects. Examples of allowed exceptions: • Masks without paths: • *.exe – all files with the *.exe mask; • *.ex? – all files with the *.ex? mask; • test – all files named test. •...
  • Page 40 Kaspersky Anti-Virus 5.0 for Windows File Servers • Delete – deletes an infected or suspicious object. If you select that action for an object, a copy of it will be created and stored in the backup storage. You may use the copy to restore the file or send it for examination to Kaspersky Lab.
  • Page 41 Local management compound objects to be scanned in the Scan compound objects not larger than, MB. Use iChecker, Use iStreams checkboxes enable your scanner to use these technologies for scanning acceleration. Figure 7. The Additional tab 6.2.1.2.2. Real-time protection of files Use the Settings tab (see Figure 8) to specify the parameters which apply to the real-time protection of file system objects.
  • Page 42 Kaspersky Anti-Virus 5.0 for Windows File Servers Figure 8. Setting up a task for real-time protection of files Clicking the Advanced button opens a window where you can review the parameters corresponding to the selected level, or use them as the basis for your own setup.
  • Page 43 Local management Figure 9. The Scan Scope tab Use the Actions tab (see Fig. 10) to determine the action taken when the application detects infected or suspicious objects: • Block access and disinfect; delete if disinfection fails means that the application will attempt disinfection using the records from its anti-virus database;...
  • Page 44 Kaspersky Anti-Virus 5.0 for Windows File Servers Figure 10. The Actions tab Use the Additional tab (see Fig. 11) to enable/disable scanning for various types of compound files, to exclude the trusted riskware from scanning, to restrict scanning duration and to enable/disable iChecker and iStreams technologies. Check the box Do not detect trusted riskware (see section 6.2.2.3 on p.
  • Page 45 Local management Figure 11. The Additional tab 6.2.1.2.3. Real-time monitoring of scripts You can set up the parameters for real-time scanning for potentially dangerous VBScript and Java Script scripts using the Settings tab. Selection of the protection level and switching to the advanced setup window are identical to the task for real-time protection of files (see section 6.2.1.2.2 on p.
  • Page 46 Kaspersky Anti-Virus 5.0 for Windows File Servers Figure 12. The Actions tab 6.2.1.2.4. Updating anti-virus database and application modules The Settings window (see Fig. 13) looks identical for the tasks for updating anti- virus database and application modules. The task for rolling back the updates to anti-virus database has no specific settings.
  • Page 47 Local management Figure 13. Setting up a task for update of the anti-virus database and application modules Update anti-virus database – check this box to receive updates for the anti-virus database. Copy updates automatically – check this box to enable automatic downloading and installation of updates to application modules: All available updates –...
  • Page 48 Kaspersky Anti-Virus 5.0 for Windows File Servers • checkbox enabled: a package of updates will be copied to the directory used for updates’ storage. Patches included in the package will be arranged into a chain for sequential application. The updating procedure will apply all files from the chain beginning up to the first one, which requires computer restart Use the Updates' source section to specify the source of updates and its...
  • Page 49 Local management Figure 14. LAN settings Use passive FTP mode if possible – check this box if your server is protected with a firewall and you cannot connect to an FTP-site in active mode. Use the Connection timeout, sec. field to enter the desired timeout for connecting to an updates' server of Kaspersky Lab.
  • Page 50 Kaspersky Anti-Virus 5.0 for Windows File Servers Use the window (see Fig. 15) displayed after clicking the Sharing settings button to configure the updates' sharing service. The service allows downloaded updates to the anti-virus database and application modules to be stored in a local directory for future sharing with other LAN computers, saving thus web traffic.

  • Page 51: License Key Installation

    Local management Figure 15. Setting up the updates’ sharing service Perform the following actions in order to grant access to other computers in your LAN to a local directory assigned for sharing of updates: Allow common access to the local source directory containing the updates.

  • Page 52: Task Launch Using A Specified User Account

    Kaspersky Anti-Virus 5.0 for Windows File Servers Figure 16. License key installation 6.2.1.3. Task launch using a specified user account Kaspersky Anti-Virus includes an implemented service that allows running its tasks from another user account (impersonation). The service is disabled by default, and the tasks are started using the current account.

  • Page 53: Task Creation

    Local management Figure 17. The Account tab Default account option means that the current account will be used. Specified account option serves to enter the parameters of a different account. If you select that variant, fill in the Run as user, Password and Confirm password fields.
  • Page 54 Kaspersky Anti-Virus 5.0 for Windows File Servers Step 1. General information about the new task The first wizard dialog box is introductory: here you should enter the task name in the Name field. Step 2. Select the application and type of the task Select Kaspersky Anti-Virus 5.0 for Windows File Servers application from the list of Kaspersky Lab applications installed on the computer.
  • Page 55 Local management Figure 18. Setting up task launch using a specified account Step 5. Schedule tasks After you have configured the selected task type, the wizard will open the Task scheduling settings dialog box (see Fig. 19), where you can schedule this task.
  • Page 56 Kaspersky Anti-Virus 5.0 for Windows File Servers Figure 19. Scheduling a new task Select the desired task frequency from the Schedule for drop-down list. The following variants are possible: Every N hours, Every N days, Every N weeks, Manually, and At application launch. Depending on your choice, the elements of this dialog box will vary.

  • Page 57: Configuring Application Parameters

    Local management 6.2.2. Configuring application parameters To review / change application settings, In the console tree, select the Local computer item and click the Properties command in the right-click menu. You will see Local computer Properties window. Select the Applications tab (see Fig. 20) that displays a list of Kaspersky Lab applications installed on the computer.

  • Page 58: General Information About The Application

    Kaspersky Anti-Virus 5.0 for Windows File Servers • View current statistics of application performance. • Access application parameters. Clicking the Properties button opens a window including the following tabs: General, Additional, Quarantine, Backup, Storage objects, Riskware, Trusted processes, Licenses, Event processing.

  • Page 59: Configuring Additional Application Settings

    Local management 6.2.2.2. Configuring additional application settings The Additional tab (see Fig. 22) displays the settings for service parameters. Check the box Launch application at system startup in order to allow Kaspersky Anti-Virus to launch automatically when the operating system starts Figure 22.
  • Page 60 Kaspersky Anti-Virus 5.0 for Windows File Servers application setup the number of running instances is defined automatically based on the number of physical processors installed in a computer. To modify the number of copies of the anti-virus kernel running simultaneously, change the value of the Number of working processes field.

  • Page 61: Setting Up Riskware Detection Parameters

    Local management 6.2.2.3. Setting up riskware detection parameters Kaspersky Anti-Virus allows detection of riskware, running on a computer or loaded from the internet as well as the same stored on its hard drive or removable media. Riskware means software that may harm your computer: lawful software containing security breaches or bugs, remote administration software, spyware tracking keyboard input, password recovery software, automatic dialers making charged calls to specific sites, etc.
  • Page 62 Kaspersky Anti-Virus 5.0 for Windows File Servers Figure 25. The Riskware tab In order to make Kaspersky Anti-Virus check whether program files belong to a certain riskware type check the Detect riskware, adware, pornware, etc box. Check the Detect hack tools box to enable search for hacker software. Use the Trusted riskware to create a list of exceptions, which will be skipped during riskware scanning.

  • Page 63: Monitoring The Activity Of Software Processes

    Local management Figure 26. Adding a program to the trusted riskware list Use the File path mask field to specify the path to the directory containing program files. In the Riskware verdict mask: field you can enter any of the following: •...
  • Page 64 Kaspersky Anti-Virus 5.0 for Windows File Servers E.g., you may believe that the objects used by Notepad, a standard Microsoft Windows application, are safe and require no real-time protection. In other words, you trust the process of that program. Add Notepad to the list of trusted processes, to exclude objects used by that process from scanning.

  • Page 65: Configuring Quarantine And Backup Settings

    Local management Figure 28. Adding a trusted process You can select the process file name using the Browse button. Upon name selection, Kaspersky Anti-Virus registers internal attributes of the process file and then uses them to identify the process as a trusted one during anti-virus scanning.

  • Page 66: Working With Quarantine And Backup

    Kaspersky Anti-Virus 5.0 for Windows File Servers Figure 29. The Quarantine tab Enter the location of the quarantine directory in the Storage path box. Delete objects stored longer than, days – a restriction for the objects’ storage duration. Quarantined files are preserved for 90 days by default. You can modify the period by entering the corresponding number in the box to the right.
  • Page 67 Local management To do so, click the List of objects button in the Quarantine or Backup copy storage section respectively. Figure 30. The Storage objects tab The dialog boxes displaying the contents of both storage areas are similar (see Fig. 31). In the central part of the dialog box, you can see a list of quarantined or backup files.

  • Page 68: Viewing License Key Information

    Kaspersky Anti-Virus 5.0 for Windows File Servers – Scan an object (only for quarantined objects). Figure 31. Quarantine storage 6.2.2.7. Viewing license key information The Licenses tab (see Fig. 32) is purely informational. It displays information about the current and the reserved license keys installed on the current client computer.

  • Page 69: Configuring Report Generation Settings

    Local management Figure 32. The Licenses tab 6.2.2.8. Configuring report generation settings The Event processing tab (see Fig. 33) displays the types of events occurring and being registered in reports, the location for storing the reports, and the settings for notifying the administrator and / or other users thereof.
  • Page 70 Kaspersky Anti-Virus 5.0 for Windows File Servers Figure 33. Editing a policy. The Event processing tab Kaspersky Anti-Virus generates events during its operation (see Table 2), each with its own priority status. There are four priority statuses: • Critical event; •...
  • Page 71 Local management Table 2. Application events Event type Priority status Warning Object was cured Warning Infected object was deleted Informational RTP level was changed message License will expire soon (two weeks before the Warning expiration date) License has expired Critical event License is invalid.
  • Page 72 Kaspersky Anti-Virus 5.0 for Windows File Servers * Those are the default values. You can modify them in the Notifications window (see section 6.2.2.2 on p. 59). For each event you can specify whether it should be appended to a report, and the method used to notify the administrator when the event occurs.

  • Page 73: Chapter 7. Remote Management

    CHAPTER 7. REMOTE MANAGEMENT Using centralized management of Kaspersky Anti-Virus via Kaspersky Administration Kit you can control the policies, tasks and settings of Kaspersky Anti-Virus application installed on remote computers in your LAN. 7.1. Policy management This section describes how to create and manage policies for Kaspersky Anti- Virus.
  • Page 74 Kaspersky Anti-Virus 5.0 for Windows File Servers In order to apply a policy immediately after its creation, check the Enable the policy box. Only one active policy can exist for an application. If an upper level group policy for an application already exists, then lower level policies can only alter parameters that were labeled as modifiable by the upper level policy.
  • Page 75 Remote management Figure 34. Selecting the source of updates Step 5. Define updating service parameters In this dialog box (see Fig. 35) you must configure parameters for the updating service for both anti-virus database and application modules (please refer to section 6.2.1.2.4 on p.

  • Page 76: Viewing And Editing Policy Settings

    Kaspersky Anti-Virus 5.0 for Windows File Servers Figure 35. Selection of the updating service parameters Step 6. Finish creating a policy In this last dialog box, the wizard informs you that a new policy has been successfully created. After the wizard is closed, the policy for this application will be shown on the results pane and added to the Policies folder of the corresponding group.

  • Page 77: Task Management

    Remote management To view the current policy settings and / or change them: In the Groups folder of the console tree, select a group of computers for which you want to change policy settings. Select the Policies folder in this group. All policies available for this group will be displayed on the results pane.

  • Page 78: Creating A Local Task

    Kaspersky Anti-Virus 5.0 for Windows File Servers The parameters used by a client computer to execute tasks comply with the group policy, specific task settings, and the application settings on the client computer. All tasks are scheduled by default. Tasks can be temporarily excluded from the list of scheduled tasks, in which case they remain in the task list but are not launched.

  • Page 79: Creating A Group Task

    Remote management Figure 36. Creating a local task. The Tasks tab 7.2.1.2. Creating a group task To create a group task for Kaspersky Anti-Virus, perform the following actions: In the console tree, select a group of computers the new task will be applied to.

  • Page 80: Creating A Global Task

    Kaspersky Anti-Virus 5.0 for Windows File Servers 7.2.1.3. Creating a global task To create a global task for Kaspersky Anti-Virus: In the console tree, select the Tasks node, and select the New!Task command, either on the right-click menu or the Action menu. A global task creation wizard will appear to guide you through the creation procedure.

  • Page 81: Configuring Application Parameters

    Remote management • For a group task, select the required group in the console tree and choose the Tasks folder within this group. The results pane will display all tasks assigned to this group. Select the desired task and click the Properties command, either on the right-click menu or the Action menu.
  • Page 82 Kaspersky Anti-Virus 5.0 for Windows File Servers Figure 37. List of Kaspersky Lab applications. Select Kaspersky Anti-Virus 5.0 for Windows File Servers application and click the Properties button. Management of application settings through remote administration is identical to their local administration (see section 6.2.2 on p. 57 for details).

  • Page 83: Chapter 8. Testing The Kaspersky Anti-Virus Operation

    CHAPTER 8. TESTING THE KASPERSKY ANTI-VIRUS OPERATION 8.1. EICAR test "virus" and its modifications After installing and adjusting Kaspersky Anti-Virus, we recommend that you test the correctness of its settings and operation of the application using a test "virus" or its modifications. The test virus was specially designed by the European Institute for Computer Antivirus Research organization, , for testing anti-virus products.
  • Page 84 Kaspersky Anti-Virus 5.0 for Windows File Servers You can test the correctness of Kaspersky Anti-Virus operation using the modified EICAR "virus" only if your anti-virus database was last updated on or after October 24, 2003, or has the cumulative updates for October, 2003.

  • Page 85: Testing Correct Operation Of Kaspersky Anti-Virus

    Testing the Kaspersky Anti-Virus operation 8.2. Testing correct operation of Kaspersky Anti-Virus In order to test the settings and correct operation of Kaspersky Anti- Virus, • Make a directory on disk and save to it the test "viruses", which you have created.

  • Page 86: Chapter 9. Anti-Virus Protection And Server Maintenance

    CHAPTER 9. ANTI-VIRUS PROTECTION AND SERVER MAINTENANCE During server maintenance, follow the recommendations of operating systems vendors and disable anti-virus protection in the following situations: • Disk defragmentation. • Installation of new data media. When a new disk or any removable media already containing some data is connected to a server you are advised to: •...

  • Page 87: Chapter 10. Frequently Asked Questions

    CHAPTER 10. FREQUENTLY ASKED QUESTIONS This chapter is devoted to the most frequently asked users’ questions pertaining to installation, setup and operation of the Kaspersky Anti-Virus; here we shall try to answer them in detail. Question: Is it possible to use Kaspersky Anti-Virus 5.0 for Windows File Servers with anti-virus products of other vendors? No.
  • Page 88 Kaspersky Anti-Virus 5.0 for Windows File Servers to install just the Administration console and Administration agent components. Question: Is it possible to receive notifications (e-mail, net send…) about events occurring during operation of Kaspersky Anti-Virus? You can receive notifications about events that occur during Kaspersky Anti-Virus operation through a mail server, through the NET Send service within a LAN or by configuring the launch of a particular program or executable file on the occurrence of predefined events...
  • Page 89 Frequently asked questions Kaspersky Lab believes that the purpose of anti-virus protection is to establish real and complete anti-virus security for its users. Experienced users can, of course, accelerate anti-virus scanning by disabling scanning of various file types. However, please keep in mind that it will decrease the overall security level.
  • Page 90 Kaspersky Anti-Virus 5.0 for Windows File Servers If you have not found the solution to your problem in the relevant documentation and the Knowledge base on the web site, we recommend that you contact Kaspersky Lab's Technical Support. For solution of urgent issues please call us using the phone numbers in the Contact Us part of this document.
  • Page 91 Frequently asked questions Question: What are the daily updates for? A few years ago viruses were transmitted on floppy disks, and adequate computer protection could be achieved by installation of an anti-virus program followed by rare updates to its anti-virus database. However, recent virus epidemics spread around the world in several hours, and anti-virus protection with old database may be helpless against a new threat.
  • Page 92 Kaspersky Anti-Virus 5.0 for Windows File Servers therefore do not suffer from inability to contact overloaded updates’ servers. • Corporate enterprises can now create a local updates' server. This feature is designed for organizations where a single LAN unites computers protected by Kaspersky Lab products. Any computer on the LAN can be turned into an updates’...
  • Page 93 Frequently asked questions Identify the computers which will act as servers of updates. They should have Kaspersky Lab applications (version 5.0) installed. Create a network resource to be used for further sharing of updates on each of the selected computers. It can be a network folder, FTP or HTTP server.
  • Page 94 Kaspersky Anti-Virus 5.0 for Windows File Servers Question: How can I receive a debug log of the updating service activity? Kaspersky Anti-Virus offers an opportunity to receive reports on the updating tasks activity. A more detailed report will be available if you enable logging of all events in the advanced setup tab.

  • Page 95: Appendix A. Glossary

    APPENDIX A. GLOSSARY These documents use terms and concepts specific to the sphere of anti-virus protection. This glossary serves as a dictionary containing definitions for those concepts. For convenience the glossary is arranged in alphabetic order. Administration agent – a special application, which provides for interaction between an administration server and applications from the corporate products of Kaspersky Lab.
  • Page 96 Kaspersky Anti-Virus 5.0 for Windows File Servers console. Each application requires its own application management plug-in, which is included in the packages of all Kaspersky Lab applications that can be controlled via Kaspersky Administration Kit 5.0. Application modules – files included into the distribution package of Kaspersky Anti-Virus 5.0 for Windows File Servers and implementing the main product features.
  • Page 97 Appendix A cannot be disinfected. Objects are disinfected using the anti-virus database. If disinfection is the first action to be applied to an object, i.e. the first action after detection of a suspicious object, the application creates a backup copy of this file. If some data are lost during disinfection, the backup can be used to recover this object.
  • Page 98 Kaspersky Anti-Virus 5.0 for Windows File Servers iChecker™ – the technology which allows the application to skip the rescanning of objects which are unchanged since their previous scanning. The technology is implemented using a database of objects’ checksums. Infected object – an object containing harmful code. You are advised to abandon working on these objects because they can infect your computer.
  • Page 99 Appendix A OLE object – objects or documents embedded in other files using OLE technology. PornWare – programs that establish charged modem connections to various Internet sites, mostly with adult content. Quarantine – a special data storage designed for isolation of suspicious objects.
  • Page 100 Kaspersky Anti-Virus 5.0 for Windows File Servers Security administrator – a person who controls the operation of the application locally using the command line or remotely using Administration console. SpyWare – software designed for unauthorized access to user data, tracking of actions performed on a computer, collection of information about hard drive contents.

  • Page 101: Appendix B. Command Line Return Codes

    APPENDIX B. COMMAND LINE RETURN CODES Command line return codes may mean success or failure. Success codes have positive values, while for failure codes the values are negative. A.1. General return codes General codes may be returned by any command entered in the command line. Code Description Operation has been performed successfully...

  • Page 102: Update Service Return Codes

    Kaspersky Anti-Virus 5.0 for Windows File Servers Code Description Not all the infected or suspicious objects have been removed All infected objects have been cured All variations of infected and suspicious objects have been relocated to quarantine All infected and suspicious objects have been deleted Infected objects have been detected Variations of infected objects have been detected Suspicious object have been detected...

  • Page 103: Licensing Service Return Codes

    Appendix B Code Description 08, 11, 12, 15, 27, 31 – internal application error 09 – error connecting to the list of available servers 17 – file signature error 18 – file operation error 20 – an attempt to update with an older version 21 –...

  • Page 104: Appendix C. Kaspersky Lab

    APPENDIX C. KASPERSKY LAB Founded in 1997, Kaspersky Lab has become a recognized leader in information security technologies. It produces a wide range of data security software and delivers high-performance, comprehensive solutions to protect computers and networks against all types of malicious programs, unsolicited and unwanted e- mail messages, and hacker attacks.

  • Page 105: Other Kaspersky Lab Products

    Error! Reference source not found. C.1. Other Kaspersky Lab Products ® Kaspersky Anti-Virus Personal ® Kaspersky Anti-Virus Personal has been designed to provide anti-virus protection to personal computers running Microsoft Windows 98/ME or Microsoft Windows 2000/NT/XP against all known viruses, including potentially dangerous software.
  • Page 106 Kaspersky Anti-Virus 5.0 for Windows File Servers retrieval of daily updates for the anti-virus database and the program modules. A unique second-generation heuristic analyzer efficiently detects unknown viruses. A simple and convenient interface allows users to configure the program quickly making work with it easier than ever.
  • Page 107 Error! Reference source not found. ® Kaspersky Personal Security Suite ® Kaspersky Personal Security Suite is a software suite designed for organizing comprehensive protection of personal computers running Microsoft Windows. The suite prevents malicious and potentially dangerous programs from penetrating through any possible data sources and protects you from unauthorized attempts to access your computer’s data, as well as blocking spam.
  • Page 108 Kaspersky Anti-Virus 5.0 for Windows File Servers • Exclude archives and e-mail databases from scanning. • Select standard/extended anti-virus databases for scanning. • Save a report on the scanning results in txt or html formats. ® Kaspersky OnLine Scanner Pro The program is a subscription service offered to the visitors of Kaspersky Lab's corporate website.
  • Page 109 Error! Reference source not found. • Monitoring of changes in OS registry due to internal system registry control. • Blocking of dangerous VBA macros in Microsoft Office documents. • System restoration after malicious spyware influence accomplished due to recording of all changes in the registry and computer file system and an opportunity to perform their roll-back at user's discretion.
  • Page 110 Kaspersky Anti-Virus 5.0 for Windows File Servers computer detection from outside. When you switch into that mode, the system will block all network activity except for a few transactions allowed in user- defined rules. The program employs complex approach to anti-spam filtering of incoming e-mail messages: •...
  • Page 111 Error! Reference source not found. • E-mail systems including Microsoft Exchange 2000/2003, Lotus Notes/Domino, Postfix, Exim, Sendmail, and Qmail. • Internet gateways: CheckPoint Firewall –1; Microsoft ISA Server 2000 Standard Edition. ® ® The Kaspersky Anti-Virus Business Optimal distribution kit includes Kaspersky Administration Kit, a unique tool for automated deployment and administration.
  • Page 112 Kaspersky Anti-Virus 5.0 for Windows File Servers ® Kaspersky Anti-Spam ® Kaspersky Anti-Spam is a cutting-edge software suite that is designed to help organizations with small- and medium-sized networks wage war against the onslaught of unsolicited e-mail messages (spam). The product combines the revolutionary technology of linguistic analysis with modern methods of e-mail filtration, including DNS Black Lists and formal letter features.

  • Page 113: Contact Us

    Error! Reference source not found. performs centralized anti-spam filtration of e-mail stream. This solution also includes some additional mail traffic filtration features. C.2. Contact Us If you have any questions, comments, or suggestions, please refer them to one of our distributors or directly to Kaspersky Lab. We will be glad to assist you in any matters related to our product by phone or via e-mail.

  • Page 114: Appendix D. License Agreement

    APPENDIX D. LICENSE AGREEMENT End User License Agreement NOTICE TO ALL USERS: CAREFULLY READ THE FOLLOWING LEGAL AGREEMENT ("AGREEMENT") FOR THE LICENSE OF SPECIFIED SOFTWARE ("SOFTWARE") PRODUCED BY KASPERSKY LAB ("KASPERSKY LAB"). IF YOU HAVE PURCHASED THIS SOFTWARE VIA THE INTERNET BY CLICKING THE ACCEPT BUTTON, YOU (EITHER AN INDIVIDUAL OR A SINGLE LEGAL ENTITY) CONSENT TO BE BOUND BY AND BECOME PARTY TO THIS AGREEMENT.
  • Page 115 Appendix D PRODUCT. IN THIS CASE, KASPERSKY LAB WILL NOT BE HELD BY THE PARTNER'S CLAUSES. THE RIGHT TO RETURN AND REFUND EXTENDS ONLY TO THE ORIGINAL PURCHASER. All references to "Software" herein shall be deemed to include the software activation key ("Key Identification File") with which you will be provided by Kaspersky Lab as part of the Software.
  • Page 116 Kaspersky Anti-Virus 5.0 for Windows File Servers steps to achieve interoperability, provided that you only reverse engineer or decompile the Software to the extent permitted by law. 1.1.4 You shall not make error corrections to, or otherwise modify, adapt, or translate the Software, nor create derivative works of the Software, nor permit any third party to copy the Software (other than as expressly permitted herein).
  • Page 117 Appendix D described herein. Upon any termination or expiration of this Agreement, you must immediately destroy all copies of the Software and the Documentation. You may terminate this Agreement at any point by destroying all copies of the Software and the Documentation. 3.
  • Page 118 Kaspersky Anti-Virus 5.0 for Windows File Servers You shall implement reasonable security measures to protect such confidential information, but without limitation to the foregoing shall use best endeavours to maintain the security of the Key Identification File. 6. Limited Warranty. (i) Kaspersky Lab warrants that for six (6) months from first download or installation the Software purchased on a physical medium will perform substantially in accordance with the functionality described in the Documentation...
  • Page 119 Appendix D (whether such losses or damage were foreseen, foreseeable, known or otherwise): (a) Loss of revenue; (b) Loss of actual or anticipated profits (including for loss of profits on contracts); (c) Loss of the use of money; (d) Loss of anticipated savings; (e) Loss of business;...

Table of Contents