Chapter 6. Additional Settings; Optimization Of Kaspersky Anti-Virus Operation - KAPERSKY ANTI-VIRUS 5.5 - FOR LINUX-FREEBSD WORKSTATION AND FILE SERVER Administrator's Manual

CHAPTER 6. ADDITIONAL
SETTINGS
This chapter contains information about additional settings of Kaspersky Anti-
Virus. These additional settings are used to extend the functionality of the
application and its adaptation to the conditions of a specific company.
6.1. Optimization of Kaspersky Anti-
Virus operation
In order to reduce the load on the processor and increase the speed of the anti-
virus processing of objects, Kaspersky Anti-Virus offers effective methods for
optimization of its operation. Provided below is a detailed discussion of these
features.
The use of the iChecker database and double-level caching of scanned
files.
The application uses several technologies that make it unnecessary to scan a file
each time you attempt to access it and, if possible, restrict the work to mere
comparing it to the existing information about it. The algorithm of scanning object
(file) for viruses includes the following:
After the primary scan of any file, information about it (name, checksum) is regis-
tered in one of the following databases:
•
iChecker database – common database that includes information about
scanned non-infected files of some formats. This database contains
information about objects scanned by kavmonitor and kavscanner.
•
The cache of scanned files - database that contains information about
files scanned by the kavmonitor files. The cache consists of two levels:
the first level stores information about clean files, that are accessed
relatively often. The first-level cache is located in the kernel module that
allows to considerably decrease the time needed to access it. If the
application detects data about the file requested in the first-level cache, it
automatically assigns the Clean status to the object and no further anti-
virus scan will be performed. If the first-level cache does not contain the
required information a search will be performed on the second level that