KASPERSKY LABS Kaspersky Anti-Virus 4.00.02 for Novell Netware USER GUIDE KASPERSKY ANTI-VIRUS 4.00.02 FOR NOVELL NETWARE User guide Kaspersky Labs Ltd. Visit our website: http://www.kaspersky.com/ Edition date: September 2002 Table of contents CHAPTER 1. INTRODUCTION..........................................................................7 1.1. Purpose and Main Functions.............................................................................7 1.2. Supply Set..........................................................................................................9 1.2.1. What's in the Supply Set .............................................................................9 1.2.2. License agreement ......................................................................................9 1.2.3. Registration card........................................................................................10 1.3. What's in the Guide..........................................................................................10 1.4. Services for registered users...........................................................................10 CHAPTER 2. PROGRAM INSTALLATION .....................................................12 2.1. System requirements.......................................................................................12 2.2. How to install Kaspersky Anti-Virus.................................................................12 CHAPTER 3. ANTI-VIRUS PROTECTION FOR SERVERS .........................21 3.1. Creating and Maintaining Anti-Virus Protection for Servers...........................21 3.2. Control Modules Interface ...............................................................................22 3.2.1. Control module interface for ConsoleOne ................................................22 3.2.2. Control module interface for NWAdmin ....................................................24 3.3. Installing and Uninstalling Kaspersky Scanner (ConsoleOne).......................25 3.3.1. Installing Kaspersky Scanner on Server...................................................25 3.3.2. Installing Kaspersky Scanner on Server Group .......................................27 3.3.3. Uninstalling Kaspersky Scanner from the Server or the Server Group...29 3.3.4. Upgrading Kaspersky Scanner .................................................................30 3.4. Loading Kaspersky Scanner ...........................................................................30 3.4.1. Loading via NWAdmin...............................................................................30 3.4.2. Loading via ConsoleOne...........................................................................32 3.5. Launching Kaspersky Scanner .......................................................................33 3.5.1. Three Modes of Operation ........................................................................33 4 Kaspersky Anti-Virus for Novell NetWare 3.5.2. Filter mode .................................................................................................33 3.5.3. On-demand Scanning ...............................................................................34 3.5.4. Scheduled Scanning..................................................................................35 3.6. Configuring Kaspersky Scanner......................................................................35 3.6.1. Kaspersky Scanner control module window.............................................35 3.6.2. Loading the program and viewing the program info. About tab page......36 3.6.3. On-demand scanning mode options. Manual Scanning tab page ..........38 3.6.3.1. Options list ..........................................................................................38 3.6.3.2. Scan area ...........................................................................................38 3.6.3.3. Files to scan........................................................................................40 3.6.3.4. Heuristic Analyzer ..............................................................................41 3.6.3.5. Archive extracting engine...................................................................42 3.6.3.6. Unpacking Engine for Processing Executable Modules...................43 3.6.4. Filter mode scanning options. Real-time Scanning tab page ..................44 3.6.5. Actions to take with infected and suspicious files. Actions tab page .......44 3.6.6. Notifying network users about found viruses. Alerts tab page .................47 3.6.7. Advanced options. Advanced tab page....................................................50 3.6.7.1. Specifying paths to working and "quarantine" directories.................50 3.6.7.2. Adjusting the load of a server with Kaspersky Scanner running on it.......................................................51 3.6.7.3. Configuring the connection between control module and Kaspersky AV server..........................................................................51 3.6.7.4. Specifying the number of scan requests ...........................................52 3.6.8. Scheduled scanning options. Scheduled Scans tab page.......................52 3.6.8.1. Scan area ...........................................................................................52 3.6.8.2. Files to scan........................................................................................54 3.6.8.3. Scheduling scanning..........................................................................54 3.6.9. Scanning result logs. Logging, Statistics tab pages .................................58 3.6.9.1. Configuring scanning result logs........................................................58 3.6.9.2. View scan results ...............................................................................62 CHAPTER 4. UPDATING ANTI-VIRUS BASES (CONSOLEONE) ...............66 Table of contents 5 4.1. Organizing Centralized Update Distribution....................................................66 4.2. Installing and Uninstalling Kaspersky Updater................................................67 4.2.1. System requirements.................................................................................67 4.2.2. Installing Kaspersky Updater.....................................................................67 4.2.3. Uninstalling Kaspersky Updater ................................................................68 4.2.4. Upgrading Kaspersky Updater..................................................................69 4.3. Kaspersky Updater Loading/Unloading ..........................................................70 4.4. Configuring and Launching Kaspersky Updater.............................................71 4.4.1. General information on program settings. Kaspersky Updater in ... dialog box..........................................................71 4.4.2. Configuring update retrieval settings. Settings tab page..........................73 4.4.2.1. Configuring updating from the network folder ...................................74 4.4.2.2. Configuring updating via the Internet.................................................75 4.4.2.3. Configuring the mode for copying anti-virus bases...........................79 4.4.3. Connecting the control module with an Update server. The Advanced tab page. ...........................................................................80 4.4.4. Scheduling the update retrieval by an Update server. The Scheduler tab page. ...........................................................................82 4.4.5. Creating a list of servers for distributing updates. Setting the distribution modes. The About tab page...................................................85 4.4.5.1. Creating and editing a list of servers for distributing updates ...........86 4.4.5.2. Setting the distribution mode .............................................................87 4.4.5.3. Loading/unloading Kaspersky Updater on the server.......................88 4.4.6. Manual start of retrieving and distributing updates. The Update tab page................................................................................89 4.4.6.1. Starting a session from an Update server.........................................89 4.4.6.2. Updating anti-virus bases from a workstation ...................................91 4.4.7. Configuring the log and viewing results. The Logging tab page. .............93 4.4.7.1. Configuring the log with updating results and distributing anti-virus databases ...........................................................................93 4.4.7.2. Viewing the log ...................................................................................95 CHAPTER 5. UPDATING ANTI-VIRUS BASES (NWADMIN) .......................99 5.1. Launching the Updater ....................................................................................99 6 Kaspersky Anti-Virus for Novell NetWare 5.2. The purpose of Kaspersky AV Updater ........................................................100 5.3. Kaspersky AV Updater Interface...................................................................100 5.3.1. Kaspersky AV Updater initial window......................................................100 5.3.2. The Connection window..........................................................................101 5.3.2.1. Configuring updating via Internet.....................................................102 5.3.2.2. Updating from the local folder..........................................................107 5.3.2.3. Choosing objects to be updated ......................................................108 5.3.3. The Options window................................................................................108 5.3.4. The Retrieving updates window..............................................................109 5.3.5. Updater wizard ­ task completed window ..............................................110 APPENDIX A. APPENDIX B. KASPERSKY LABS LTD .........................................................112 INDEX .......................................................................................117 Chapter 1.Introduction 1.1. Purpose and Main Functions Kaspersky Anti-Virus 4.00.02 for Novell NetWare (Kaspersky AV) is an antivirus software package consisting of various modules (see table) that provide a high protection level for corporate networks running under Novell NetWare. Kaspersky AV's implementation is based on a client-server technology. Server side consists of two modules--Kaspersky Scanner and Kaspersky Updater, The first module, Kaspersky Scanner, comprises functions of an anti-virus filter and scanner, that is, it enables users to check files when they are opened or copied, and provides an opportunity to check objects on demand or on certain schedule. The second module, Kaspersky Updater, provides an Internet-based updating. It allows the anti-virus databases used when searching for viruses to be renewed, and the updated version is expanded over all the protected servers1 of the network. Kaspersky Updater can be configured for automatic scheduled updating; moreover, the program will receive the latest updates via Internet or a local network and distribute them to Kaspersky AV servers. Kaspersky AV server First Update server Internet Kaspersky AV server Kaspersky AV server Kaspersky AV server Second Update sever Kaspersky AV server Kaspersky AV server Figure 1. Updating anti-virus bases on Kaspersky AV servers (process flow diagram). Example. Legend: "!" ­ distributing updates, "!!" ­ receiving updates. Hereinafter, the servers that are the objects of protection are referred to as Kaspersky AV servers; the servers whose functions are updating anti-virus databases, Update servers. 1 8 Kaspersky Anti-Virus for Novell NetWare Figure 1 displays the situation when the first Update server retrieves anti-virus database updates via the Internet and then sends them to the first three Kaspersky AV servers. The second Update server retrieves updates from the network folder (saved here by the first server) and sends them to the rest of the Kaspersky AV servers. Client side is represented by two back-end control modules -- NetWare Administrator (NWAdmin) module and similar ConsoleOne module. Both Kaspersky AV control modules allow users · · · · · to configure Kaspersky Scanner options, to schedule program launching and define file checking options, to perform remote program loading /unloading, to start manual scanning and view checking results, to specify the mode for transferring warning messages to the administrator's computer--for example, messages about detected viruses present on the protected servers and/or switching an infected workstation off the local network. Furthermore, ConsoleOne control module has the following additional options: · · · setting Kaspersky Updater module; performing batch o ...