User manual KASPERSKY LAB KASPERSKY ANTI-VIRUS 4.00.02 FOR NOVELL NETWARE

KASPERSKY LABS Kaspersky Anti-Virus 4.00.02 for Novell Netware USER GUIDE KASPERSKY ANTI-VIRUS 4.00.02 FOR NOVELL NETWARE User guide Kaspersky Labs Ltd. Visit our website: http://www.kaspersky.com/ Edition date: September 2002 Table of contents CHAPTER 1. INTRODUCTION..........................................................................7 1.1. Purpose and Main Functions.............................................................................7 1.2. Supply Set..........................................................................................................9 1.2.1. What's in the Supply Set .............................................................................9 1.2.2. License agreement ......................................................................................9 1.2.3. Registration card........................................................................................10 1.3. What's in the Guide..........................................................................................10 1.4. Services for registered users...........................................................................10 CHAPTER 2. PROGRAM INSTALLATION .....................................................12 2.1. System requirements.......................................................................................12 2.2. How to install Kaspersky Anti-Virus.................................................................12 CHAPTER 3. ANTI-VIRUS PROTECTION FOR SERVERS .........................21 3.1. Creating and Maintaining Anti-Virus Protection for Servers...........................21 3.2. Control Modules Interface ...............................................................................22 3.2.1. Control module interface for ConsoleOne ................................................22 3.2.2. Control module interface for NWAdmin ....................................................24 3.3. Installing and Uninstalling Kaspersky Scanner (ConsoleOne).......................25 3.3.1. Installing Kaspersky Scanner on Server...................................................25 3.3.2. Installing Kaspersky Scanner on Server Group .......................................27 3.3.3. Uninstalling Kaspersky Scanner from the Server or the Server Group...29 3.3.4. Upgrading Kaspersky Scanner .................................................................30 3.4. Loading Kaspersky Scanner ...........................................................................30 3.4.1. Loading via NWAdmin...............................................................................30 3.4.2. Loading via ConsoleOne...........................................................................32 3.5. Launching Kaspersky Scanner .......................................................................33 3.5.1. Three Modes of Operation ........................................................................33 4 Kaspersky Anti-Virus for Novell NetWare 3.5.2. Filter mode .................................................................................................33 3.5.3. On-demand Scanning ...............................................................................34 3.5.4. Scheduled Scanning..................................................................................35 3.6. Configuring Kaspersky Scanner......................................................................35 3.6.1. Kaspersky Scanner control module window.............................................35 3.6.2. Loading the program and viewing the program info. About tab page......36 3.6.3. On-demand scanning mode options. Manual Scanning tab page ..........38 3.6.3.1. Options list ..........................................................................................38 3.6.3.2. Scan area ...........................................................................................38 3.6.3.3. Files to scan........................................................................................40 3.6.3.4. Heuristic Analyzer ..............................................................................41 3.6.3.5. Archive extracting engine...................................................................42 3.6.3.6. Unpacking Engine for Processing Executable Modules...................43 3.6.4. Filter mode scanning options. Real-time Scanning tab page ..................44 3.6.5. Actions to take with infected and suspicious files. Actions tab page .......44 3.6.6. Notifying network users about found viruses. Alerts tab page .................47 3.6.7. Advanced options. Advanced tab page....................................................50 3.6.7.1. Specifying paths to working and "quarantine" directories.................50 3.6.7.2. Adjusting the load of a server with Kaspersky Scanner running on it.......................................................51 3.6.7.3. Configuring the connection between control module and Kaspersky AV server..........................................................................51 3.6.7.4. Specifying the number of scan requests ...........................................52 3.6.8. Scheduled scanning options. Scheduled Scans tab page.......................52 3.6.8.1. Scan area ...........................................................................................52 3.6.8.2. Files to scan........................................................................................54 3.6.8.3. Scheduling scanning..........................................................................54 3.6.9. Scanning result logs. Logging, Statistics tab pages .................................58 3.6.9.1. Configuring scanning result logs........................................................58 3.6.9.2. View scan results ...............................................................................62 CHAPTER 4. UPDATING ANTI-VIRUS BASES (CONSOLEONE) ...............66 Table of contents 5 4.1. Organizing Centralized Update Distribution....................................................66 4.2. Installing and Uninstalling Kaspersky Updater................................................67 4.2.1. System requirements.................................................................................67 4.2.2. Installing Kaspersky Updater.....................................................................67 4.2.3. Uninstalling Kaspersky Updater ................................................................68 4.2.4. Upgrading Kaspersky Updater..................................................................69 4.3. Kaspersky Updater Loading/Unloading ..........................................................70 4.4. Configuring and Launching Kaspersky Updater.............................................71 4.4.1. General information on program settings. Kaspersky Updater in ... dialog box..........................................................71 4.4.2. Configuring update retrieval settings. Settings tab page..........................73 4.4.2.1. Configuring updating from the network folder ...................................74 4.4.2.2. Configuring updating via the Internet.................................................75 4.4.2.3. Configuring the mode for copying anti-virus bases...........................79 4.4.3. Connecting the control module with an Update server. The Advanced tab page. ...........................................................................80 4.4.4. Scheduling the update retrieval by an Update server. The Scheduler tab page. ...........................................................................82 4.4.5. Creating a list of servers for distributing updates. Setting the distribution modes. The About tab page...................................................85 4.4.5.1. Creating and editing a list of servers for distributing updates ...........86 4.4.5.2. Setting the distribution mode .............................................................87 4.4.5.3. Loading/unloading Kaspersky Updater on the server.......................88 4.4.6. Manual start of retrieving and distributing updates. The Update tab page................................................................................89 4.4.6.1. Starting a session from an Update server.........................................89 4.4.6.2. Updating anti-virus bases from a workstation ...................................91 4.4.7. Configuring the log and viewing results. The Logging tab page. .............93 4.4.7.1. Configuring the log with updating results and distributing anti-virus databases ...........................................................................93 4.4.7.2. Viewing the log ...................................................................................95 CHAPTER 5. UPDATING ANTI-VIRUS BASES (NWADMIN) .......................99 5.1. Launching the Updater ....................................................................................99 6 Kaspersky Anti-Virus for Novell NetWare 5.2. The purpose of Kaspersky AV Updater ........................................................100 5.3. Kaspersky AV Updater Interface...................................................................100 5.3.1. Kaspersky AV Updater initial window......................................................100 5.3.2. The Connection window..........................................................................101 5.3.2.1. Configuring updating via Internet.....................................................102 5.3.2.2. Updating from the local folder..........................................................107 5.3.2.3. Choosing objects to be updated ......................................................108 5.3.3. The Options window................................................................................108 5.3.4. The Retrieving updates window..............................................................109 5.3.5. Updater wizard ­ task completed window ..............................................110 APPENDIX A. APPENDIX B. KASPERSKY LABS LTD .........................................................112 INDEX .......................................................................................117 Chapter 1.Introduction 1.1. Purpose and Main Functions Kaspersky Anti-Virus 4.00.02 for Novell NetWare (Kaspersky AV) is an antivirus software package consisting of various modules (see table) that provide a high protection level for corporate networks running under Novell NetWare. Kaspersky AV's implementation is based on a client-server technology. Server side consists of two modules--Kaspersky Scanner and Kaspersky Updater, The first module, Kaspersky Scanner, comprises functions of an anti-virus filter and scanner, that is, it enables users to check files when they are opened or copied, and provides an opportunity to check objects on demand or on certain schedule. The second module, Kaspersky Updater, provides an Internet-based updating. It allows the anti-virus databases used when searching for viruses to be renewed, and the updated version is expanded over all the protected servers1 of the network. Kaspersky Updater can be configured for automatic scheduled updating; moreover, the program will receive the latest updates via Internet or a local network and distribute them to Kaspersky AV servers. Kaspersky AV server First Update server Internet Kaspersky AV server Kaspersky AV server Kaspersky AV server Second Update sever Kaspersky AV server Kaspersky AV server Figure 1. Updating anti-virus bases on Kaspersky AV servers (process flow diagram). Example. Legend: "!" ­ distributing updates, "!!" ­ receiving updates. Hereinafter, the servers that are the objects of protection are referred to as Kaspersky AV servers; the servers whose functions are updating anti-virus databases, Update servers. 1 8 Kaspersky Anti-Virus for Novell NetWare Figure 1 displays the situation when the first Update server retrieves anti-virus database updates via the Internet and then sends them to the first three Kaspersky AV servers. The second Update server retrieves updates from the network folder (saved here by the first server) and sends them to the rest of the Kaspersky AV servers. Client side is represented by two back-end control modules -- NetWare Administrator (NWAdmin) module and similar ConsoleOne module. Both Kaspersky AV control modules allow users · · · · · to configure Kaspersky Scanner options, to schedule program launching and define file checking options, to perform remote program loading /unloading, to start manual scanning and view checking results, to specify the mode for transferring warning messages to the administrator's computer--for example, messages about detected viruses present on the protected servers and/or switching an infected workstation off the local network. Furthermore, ConsoleOne control module has the following additional options: · · · setting Kaspersky Updater module; performing batch operations with servers, including install/uninstall operations, loading/unloading Kaspersky Scanner, etc. ability to operate a control module both on a workstation and a server. In contrast to ConsoleOne control module, NWAdmin control module: · · supports manual updating via Internet and does not support automatic anti-virus bases updating via Internet, doesn't allow batch operations with servers (anti-virus base batch updating on multiple servers is not available), · works only on workstations. The software package is equipped with an easy-to-use installation program that installs the product on a server and records all options in NDS. Module Short name Kaspersky Scanner Comments Anti-virus scanner filter and Introduction 9 Short name Kaspersky Updater Comments Automatic updating support module control Kaspersky control Scanner Module Front end: NWAdmin control module Front end: ConsoleOne control module NWAdmin module ConsoleOne control module Kaspersky Scanner and Kaspersky Updater control Kaspersky AV users are provided with a day-and-night support service via phone and e-mail (in Russian and English). Kaspersky Labs recommends Kaspersky AV as a reliable solution for providing anti-virus protection in Novell networks. 1.2. Supply Set 1.2.1. What's in the Supply Set This product's supply set contains the following: · · · · license agreement; sealed envelope with the installation CD (floppy disks) inside; user guide; registration card. Before you open the sealed envelope with CD-ROM (diskettes) inside, read carefully the license agreement. 1.2.2. License agreement License agreement is a legal agreement between you and Kaspersky Labs Ltd., specifying under which conditions you should use the purchased product. 10 Read the license agreement carefully! Kaspersky Anti-Virus for Novell NetWare If you don't accept the terms of this license agreement, you can return Kaspersky Anti-Virus retail box to your dealer and get back the subscription fee. If this occurs, please make sure the envelope with diskettes remains sealed. By opening the sealed envelope with diskettes you confirm that you agree with the terms of this license agreement. 1.2.3. Registration card Please fill in a detachable coupon of the registration card. If possible, give the most detailed contact information: first name, last name, full patronymic (middle) name, telephone number, e-mail address. Then send it to the dealer whom you purchased the product from. If there are any changes to your postal/e-mail address or telephone number, please inform the organization where you sent the detachable coupon of the registration card. The registration card is a document which gives you gain the status of our company's registered user. This entitles you to receive technical support and updates within the period of the validity of the subscription. Moreover, registered users receive information notifying about new software products released by Kaspersky Labs Ltd. 1.3. What's in the Guide This guide comprises the information used for installing and operating the product. The essential principles of the program, as well as operating methods, are described here. You will also find various recommendations concerning the program settings. 1.4. Services for registered users Kaspersky Labs Ltd. provides registered users with a wide range of services that increase Kaspersky Anti-Virus efficiency. Acquiring the subscription gives you the status of a registered program user. Within the period of its validity you receive the following services: Introduction 11 daily updating of anti-virus bases; provision of new versions of this product; phone and e-mail consultations on matters which concern operating this product; notifying about new Kaspersky Labs products and new viruses detected in the world. · · · · Consultations concerning functioning and using operating systems, as well as using various technologies, are not provided. Chapter 2.Program installation 2.1. System requirements Kaspersky AV requires: · · Server with installed Novell Netware system versions 4.11, 4.2, 5.x or 6. Corresponding Support Pack installed: · for Novell NetWare 4.11 or 4.2: Support Pack 9 or higher; in addition, it requires installed WinSock 2 and the server should support the TCP/IP protocol. for Novell NetWare 5.0: Support Pack 6. or higher; for Novell NetWare 5.1: Support Pack 3 or higher; for Novell NetWare 6: Support Pack 2 or higher; · · · · · · Approximately 12 MB of available (free) server system memory. Approximately 3.5 MB of free disk space on server volumes. A workstation operating under Windows 95/98/Me with installed NetWare Client32 version 3.x or higher; or a workstation operating under Windows NT/2000/SP with installed NetWare Client32 version 4.8x or higher. ConsoleOne control module requires at least 128 MB of free memory; optimally, 256 MB. 2.2. How to install Kaspersky Anti-Virus Kaspersky AV is installed from a workstation running under Windows 9x/NT/2000/Me. To install Kaspersky AV: 1. Insert the installation diskette 1 into the floppy drive A: of the workstation (or place the provided CD-ROM into the corresponding drive). Program installation 13 2. Choose the Run item in the menu that appears when you click Start. Launch setup.exe (installation file). Click OK. This launches the installation program. Follow the instructions carefully. When you finish reading information in the Welcome window, click Next (see Fig. 2). 3. 4. 5. 6. Figure 2. Starting installation. 7. Read the license agreement, then click Yes if you accept the terms of the license agreement. Otherwise, click No and abort the installation process (see Fig. 3). 14 Kaspersky Anti-Virus for Novell NetWare Figure 3. License agreement. 8. In the Select Component dialog box (see Fig. 4), select components to install: · Indicate what module(s) should be installed using the keys Kaspersky Scanner, Snapin for ConsoleOne, and Snapin for Netware Administrator; lick Next button. · Figure 4. Selecting components to install. 9. If you chose installing Kaspersky Scanner on the server, the Choose Destination Server dialog box appears on the screen (see Fig. 5). The Connected servers list of this dialog box displays all Program installation 15 the connected servers available at the moment of installation. Select a server on which you want to install Kaspersky Scanner and click Next. This section describes installing Kaspersky Scanner on a single server. Using the ConsoleOne control module, you can install Kaspersky Scanner on several servers (see 3.3.2 on page 27). Figure 5. Choosing server. 10. In the Choose Destination Location dialog box (see Fig. 6), select directories to use for installing the Kaspersky Scanner components selected (a group of items of a component is displayed in the box only if you have previously chosen this component at step 8): · if you install Kaspersky Scanner, specify the IP-address of the server in the Server IP-address field and select an installation directory by clicking the Browse button located near the NLM Destination Directory field. 16 Kaspersky Anti-Virus for Novell NetWare Figure 6. Selecting Directory. · · select the required directory in the directory list located in the Select Directory dialog box and click Select (see Fig. 7). if you install Snapin for Netware Administrator program module and/or Snapin for ConsoleOne, specify directory/directories where NWAdmin32 and/or Novell ConsoleOne are installed. You can select a directory by clicking the Browse button located near the Netware Administrator Directory or the ConsoleOne Directory fields, respectively. If you specify an invalid directory and then click Next to get to the next window, an error message will be displayed. You will be offered to change the directory name; You can select a directory both on the server and workstation. Typically, a server directory is selected. Examples of typical directory names for server and workstation are given below: · NWAdmin on the server: SYS:\Public\win32 NWAdmin on the workstation: C:\Novell\win32 · ConsoleOne on the server: SYS:\Public\mgmt\ConsoleOne\1.2 ConsoleOne on the workstation: C:\Novell\ConsoleOne\1.2 · click Next in the Select Destination Location dialog box. Program installation 17 Figure 7. Selecting Directory. 11. Read the installation information in the Start Copying Files dialog box. To continue installation, click Next button (see Fig. 8). Figure 8. Installation information. 12. In the Install Key File dialog box (see Fig. 9), click Install Key and specify a key file (*.key) for this very installation in the dialog box that appears (see Fig. 10): 18 Kaspersky Anti-Virus for Novell NetWare The key file is your own "key" containing the housekeeping information necessary for proper running of the program, namely Information on support (who provides support and where it may be obtained); License title, number, and expiration date. Without the key file, the program runs as a demo Demo mode), when only detection of infected files is available without "healing" them. Figure 9. Installing key file. Figure 10. Choosing key file. · · if you don't specify a key file, the program will run as a demo (Demo mode); to continue installation, click the Next button. Program installation 19 13. At this moment, the program starts copying files to the server and storing settings in NDS. During the installation, the NDS scheme is being changed in the following way: a new "AVP" class is created, serving as a basis for the new "Kaspersky Anti-Virus ()" object where is a name of the server where Kaspersky Scanner is installed. Figure 11. Copying files. 14. Click Next upon completion of the installation process. 15. If you want Kaspersky Scanner to run automatically every time the server is started, mark the Yes, I want to modify the AUTOEXEC.NCF file now checkbox in the Setup Complete window. To run the program automatically upon completion of installation, mark the Load Kaspersky Scanner after installation checkbox. Click Finish (see Fig. 12). Figure 12. Installation complete. 20 Kaspersky Anti-Virus for Novell NetWare 16. If you chose installing Snapin for Netware Administrator , the installation process will continue (see Fig. 13). Click Next to install the required ActiveX components, then installation will be completed. Figure 13. Installing ActiveX components.