AVP Inspector for WEB servers User guide December 1999 AntiViral Toolkit Pro Copyright © 1999 Kaspersky Lab Ltd. All rights reserved. No part of this document may be reproduced, changed or transmitted in any form or by any form by any means, electronic, mechanical or photographic, for any purpose, without the express written permission of Kaspersky Lab Ltd. and reference to this document. All product names referenced herein are trademarks of registered trademarks of their respective owners. Kaspersky Lab disclaims proprietary interest in the marks and names of others. Although Kaspersky Lab makes every effort to ensure that this information is accurate, Kaspersky Lab will not be liable for any errors or omission of facts contained herein. Kaspersky Lab reserves the right to modify specifications cited in this document without prior notice. -2- AntiViral Toolkit Pro Table of contents 1. AVP INSPECTOR FOR WEB-SERVERS................................ 6 1.1 Main Functions and Features .....................................................6 1.2 Distribution Kit...........................................................................6 1.2.1 Distribution Kit ......................................................................6 1.2.2 License agreement..................................................................7 1.2.3 Registration Card ...................................................................7 1.3 Information in the Book .............................................................7 1.3.1 Product Support......................................................................8 2. AVP INSPECTOR FOR WEB SERVERS INSTALLATION PROCEDURE ....................................................................................... 9 2.1 System requirements ..................................................................9 2.2 Installation Procedure.................................................................9 3. AVP INSPECTOR FOR WEB SERVERSTM PRINCIPLES OF OPERATION....................................................................................... 22 3.1 Tests Performed By AVP Inspector for Web ServersTM..........22 3.2 Analysis Of Changes On Disk..................................................22 3.2.1 What to do if AVP Inspector for Web ServersTM reports changes 23 4. LAUNCHING AND CONFIGURING AVP INSPECTOR FOR WEB SERVERSTM .............................................................................. 24 4.1 Launching AVP Inspector for Web ServersTM And Command Line Options 24 4.2 AVP Inspector for Web ServersTM Main Window...................26 4.2.1 Menu Items ..........................................................................28 4.2.2 Toolbar .................................................................................29 4.3 AVP Inspector for Web ServersTM Profiles .............................29 4.3.1 The "Profiles" Tab ...............................................................29 4.3.2 The "Startup" Tab ................................................................31 4.4 The "AVP Inspector for Web Servers Configuration" Dialog Box 32 4.4.1 The "Configuration" Tab .....................................................32 4.4.2 The "Extensions" Tab ..........................................................34 -3- AntiViral Toolkit Pro 4.4.3 4.4.4 4.4.5 4.4.6 4.4.7 4.4.8 5. The "Files" Tab ....................................................................37 The "Reports" Tab ...............................................................38 The "History" Tab................................................................39 The "AVP" Tab....................................................................41 The "Excludes" Tab .............................................................42 The "Backup/Restore" Tab ..................................................43 WORKING WITH AVP INSPECTOR FOR WEB SERVERSTM46 5.1 First launch of AVP Inspector for Web Servers.......................46 5.2 Custom folder inspection .........................................................46 5.2.1 How To Create Folder List...................................................47 5.3 How To Create New Tables .....................................................48 5.4 The Disk Tests Summary Dialog Box......................................48 5.5 The View File/Directory List Dialog Box ................................49 5.6 View Files.................................................................................50 5.7 View Test History ....................................................................51 5.8 Launching AVP Inspector for Web ServersTM as Windows NT service. 51 6. MESSAGES ABOUT SUSPICIOUS CHANGES OR POSSIBLE VIRUS INFECTION............................................................................. 54 6.1 Warnings displayed upon completion of tests..........................54 6.2 Troubleshooting .......................................................................55 WARNING AND ERROR MESSAGES.................................. 56 7.1 Run-Time error messages.........................................................56 7.2 AVP Inspector for Web ServersTM Startup And Run-Time Messages 57 7.3 Debugging registers test messages ...........................................58 7.4 Other messages.........................................................................58 8. 9. GLOSSARY .......................................................................... 60 KASPERSKY LAB LTD. ....................................................... 65 7. -4- AntiViral Toolkit Pro Dear customer, We are happy that you have chosen AntiViral Toolkit Pro (AVP), the world's best anti-virus defense, for protecting your computer against computer viruses. Kaspersky Lab's best anti-virus experts are working hard to provide you with this best-of-breed anti-virus solution and to face your strictest conditions. By choosing AVP you choose unbeatable anti-virus protection. Kaspersky Lab always cares about their customers, providing them with an easy-to-use and high performance products with strong and comprehensive functionality. The highest possible level of anti-virus protection, highly intelligent heuristic code analyzer, support for the most wide-spread mail formats, virus detection inside archived and compressed files, powerful management tools ­ these are the main advantages you get with AVP. We provide you with the ultimate customer service: round the clock technical support, extensive information support, personal attention and immediate response to a new virus attack. We appreciate the trust you have placed in our anti-virus products. We hope you will find our work effective and useful. Kaspersky Lab. Team. -5- AntiViral Toolkit Pro 1. AVP Inspector for Web-servers 1.1 Main Functions and Features AVP Inspector for Web ServersTM is additional utility for unauthorized changes on Web-site control which works under Microsoft Windows 95/98® or Microsoft Windows NT®. AVP Inspector for Web ServersTM registers changes to prevent data structures on Web site from bad consequences. It can recover modified objects. AVP Inspector for Web ServersTM reduces the time needed to scan a PC for viruses. After it has run, the AVP scanner needs to check only new files and those that have changed. Main Features of AVP Inspector for Web ServersTM The main features of AVP Inspector for Web ServersTM are: · Works in Microsoft Windows 95, Microsoft Windows 98 or Microsoft Windows NT environments; · True 32-bit multitasking GUI; · Maintains a database of the results of previous checks; · Supports OLE2 document structures (Word, Excel and Access documents); · Ability of transmitting report by means of e-mail; · Ability of the editing of checking area; · Specific abilities for data checking on Web site (for instance checking the files with extensions .cgi, .asp etc); · Opportunity of starting AVP as Windows NT service. Software and Hardware Requirements. 1.2 1.2.1 Distribution Kit Distribution Kit The AVP distribution kit contains the following components. -6- AntiViral Toolkit Pro · License Agreement; · Sealed envelope containing AVP distribution diskettes; · User Guide; · Register card. o Before you unseal the envelope make sure to thoroughly review License Agreement. 1.2.2 License agreement License Agreement is a legal agreement between you (either an individual or a single entity) and the manufacturer (Kaspersky Lab Ltd.) describing the terms on which you may employ the purchased by you antivirus product. Make sure to peruse License Agreement! If you do not agree to the terms of LA, Kaspersky Lab is not willing to license the software product to you and you should return the unused product to your AVP dealer for a full refund, but make sure the distribution diskette envelope to be sealed. If you unseal the envelope it means that you agreed to all the LA terms. 1.2.3 Registration Card To register please fill a detachable coupon of the register card (your full name, phone, e-mail address) and mail it to the dealer (the address is specified on your AVP kit box) you purchased the kit from. You may also e-mail your register information to sales@avp.ru. But in this case make sure to specify your message subject as «Registration». If your mail/e-mail address or phone number changed please notify the entity you have mailed the register coupon to. If registered you will become the AVP registered user and will be provided with the product support and the antivirus base updates for the period of your subscription. Besides Kaspersky Lab provides AVP registered users with information on the company new products. 1.3 Information in the Book This book contains information on how to install and manage AVP, explains basic concepts of the software product and the way it can be applied, -7- AntiViral Toolkit Pro recommends on how to manage and change settings. This book doesn't describe installation procedure and operation concepts of the package. 1.3.1 Product Support All the registered users are provided with the product support for the period of subscription. If you register and purchase the subscription you will be provided with the following services for the period of your subscription: · antivirus base weekly update; · new versions provision; · phone, e-mail or in-office advising on matters related to your AVP package; · provision of information on the AVP line new products and on the worldwide newborn computer viruses. For more information on Kaspersky Lab services refer to your README.TXT file -8- AntiViral Toolkit Pro 2. AVP Inspector for Web servers installation procedure 2.1 are: · · · IBM PC (or 100% compatible) running MS Windows® 95/98/NT; 8 Mb RAM or more (16 Mb recommended) for Windows®95/98, at least 16 Mb RAM for Windows NT® (32 Mb recommended); At least 1 Mb free disk space on the hard drive. System requirements The minimum system requirements for AVP Inspector for Web ServersTM 2.2 Installation Procedure Before you begin installation we recommend that you make backup copies of the original distribution diskettes and install AVP Inspector for Web ServersTM from these backup diskettes. Then if accidental damage to a diskette occurs you will be able to restore the damaged diskette from the original one. · Switch your PC on and boot Windows 95/98/NT. · Insert the distribution diskette (or its backup copy) into the floppy drive. · Run SETUP.EXE and follow the instructions on screen. -9- AntiViral Toolkit Pro The Welcome to the AVP Inspector for Web Servers Window During the installation procedure you will be prompted for some information that is necessary to set up AVP Inspector for Web ServersTM on your PC. The installation program will prompt you to read the License Agreement. Read it carefully and, if you agree to all its conditions, continue Setup by pressing the "Yes" button. If you do not agree press the "No" button to abort the installation. The License Agreement Window. - 10 - AntiViral Toolkit Pro User Information. Next you must register your copy of AVP Inspector for Web ServersTM. To do you must enter the required information (first and last names, company name, registration number) into the corresponding fields. Your registration number is printed on the registration card enclosed with the AVP Inspector for Web ServersTM software. Registering your copy of AVP Inspector for Web Servers Choose Destination Location. Now you should select the destination directory into which AVP Inspector for Web ServersTM will be installed. If you want to install AVP Inspector for Web ServersTM to a directory other than the default, press "Browse" button. From the "Choose Directory..." window select the directory into which you want to install the software. - 11 - AntiViral Toolkit Pro Choosing the destination directory for AVP Inspector for Web Servers TM. Select Program Folder. This option lets you specify the name under whi ...