Pageviews last month

Monday, March 22, 2010

Kaspersky Pure

Components of Kaspersky PURE
My Backup
Data stored on a computer can be lost due to various issues, such as impact of a virus, information modification or deletion by another user, etc. To avoid losing important information, you should regularly back up data.
Backup copying creates backup copies of objects in a special storage on the selected device. To do so, you should configure backup tasks. After running the task manually or automatically, according to a schedule, backup copies of selected files are created in the storage. If necessary, the required version of the saved file can be restored from the backup copy. Thus, regular backup ensures additional security of data.

My Parental Control
Parental Control is designed to protect children and teenagers from threats related to computer and Internet usage.
Parental Control allows a flexible limit of the access to resources and applications for different users depending on their age and experience. Besides, this function allows to view statistical reports about the users' actions.
The specified restrictions fall into three categories: using the Internet; instant messaging; using the computer.

My Control Center

Home network often comprises several computers, which makes it difficult to manage network security. The vulnerability of one computer puts in jeopardy the whole network.
The Control Center allows starting virus scan tasks and update tasks for the whole network or for selected computers, manage the backup copying of data, and configure Parental Control settings on all computers within the network immediately from your workspace. This ensures remote security management of all computers within home network.

My Encryption
Confidential information, which is saved in electronic mode, requires additional protection from unauthorized access. Storing data in an encrypted container provides this protection.
Data encryption allows creating special encrypted containers on the chosen drive. In the system, such containers are displayed as virtual removable drives. To access the data in the encrypted container, a password should be entered.

My Password Manager
At the moment, registration and entering account data for authentication are required to access the majority of services and resources. For security reasons, it is not recommended to use identical user accounts for different resources, or write down your user name and password. As a result, today's user is not able to remember huge amounts of account data, which makes safe storing of passwords particularly up-to-date.
Password Manager makes it possible to store different personal data in encrypted form (for example, user names, passwords, addresses, phone and credit card numbers). Data access is protected with a single Master Password. After entering the Master Password, Password Manager can automatically fill in the fields of different authorization forms. Thus, you should remember only one Master Password to manage all account data.

My System Tune-Up
Ensuring computer's security is a difficult task that requires the expertise in operating system's features and in ways of exploiting its weak points. Additionally, volume and diversity of information about system security makes its analysis and processing difficult.
To facilitate solving specific tasks of providing computer security, Kaspersky PURE includes the following wizards and tools:
Browser Configuration Wizard , which performs the analysis of the Microsoft Internet Explorer settings by assessing them, primarily, in relation to the security.
System Restore Wizard , which removes traces left by malicious objects in the system.
Privacy Cleaner Wizard ,which finds and removes traces of user's activities in the system, and the operating system settings, which allow gathering information about the user's activities.
Rescue Disk which is designed to scan and disinfect infected x86-compatible computers. It should be used when the infection is at such level that it is deemed impossible to disinfect the computer using anti-virus applications or malware removal utilities.
Permanently Delete Data , which prevents unauthorized restoration of deleted files.
Unused Data Clearing Wizard , which deletes temporary and unused files requiring considerable volume of disk space or being at risk of a malware impact.

My Computer Protection

Computer Protection protects your computer against known and new threats. Each type of threat is processed by a separate application component. This structure of the protection system allows a flexible configuration of the application, depending on the needs of any specific, or of an enterprise as a whole.
Computer Protection includes the following protection tools:

Protection components, which ensure security for: files and personal data; system;network activity.

File Anti-Virus monitors the file system of the computer. It scans all files that can be opened, executed or saved on your computer, and all connected disk drives. Computer Protection intercepts each attempt to access a file and scans such file for known viruses. The file can only be processed further if the file is not infected or is successfully treated by the application. If a file cannot be disinfected for any reason, it will be deleted, with a copy of it saved in the backup, or moved to the quarantine.
Mail Anti-Virus scans all incoming and outgoing email messages on your computer. It analyzes emails for malicious programs. The email is available to the addressee only if it does not contain dangerous objects. The component also analyzes email messages to detect phishing.
Web Anti-Virus intercepts and blocks scripts on websites if they pose a threat. All HTTP traffic is also subject to a thorough monitoring. The component also analyzes web pages to detect phishing.
IM Anti-Virus ensures the safe use of Internet pagers. The component protects information that comes to your computer via IM protocols. IM Anti-Virus ensures safe operation of various applications for instant messaging.
Application Control logs the actions performed by applications in the system, and manages the applications' activities, based on which group the component assigns them to. A set of rules is defined for each group of applications. These rules manage applications' access to various resources.
Firewall ensures security for your work in local networks and on the Internet. The component filters all network activities using rules of two types: rules for applications and packet rules.
Proactive Defense allows to detect a new malicious program before it performs its malicious activity. The component is designed around monitoring and analyzing the behavior of all applications installed on your computer. Based on the actions being performed, Computer Protection makes a decision whether the application is potentially dangerous, or not. So your computer is protected not only from known viruses, but from new ones as well that still have not been discovered.
Network Attack Blocker loads at the operating system startup, and tracks incoming network traffic for activities characteristic of network attacks. Once an attempt of attacking your computer is detected, Computer Protection blocks any network activity of the attacking computer towards your computer.
Anti-Spam integrates into the mail client installed on your computer, and monitors all incoming email messages for spam. All messages containing spam are marked with a special header. The option of configuring Anti-Spam for spam processing (deleting automatically, moving to a special folder, etc.) is also provided. The component also analyzes email messages to detect phishing.
Network Monitor - The component designed to view information about network activity in real-time mode.
Anti-Phishing - The component, integrated into Web Anti-Virus, Anti-Spam and IM Anti-Virus, which allows to check web addresses if they are included in the list of phishing and suspicious web addresses.
Anti-Banner blocks advertising information located on banners built into interfaces of various programs installed on your computer, or displayed online.
CONTROL OVER APPLICATIONS AND DATA ACCESS
Computer Protection prevents applications from executing actions which can endanger the system, monitors access to your personal data and provides the option of running applications in the safe mode. It is performed with the help of the following tools:
Application Activity Control - The component logs the actions performed by applications in the system, and manages the applications' activities, based on which group they belong to. A set of rules is defined for each group of applications. These rules manage applications' access to various resources.
Digital Identity Protection - Application Control manages rights of applications to perform actions on the user's personal data. They include files, folders and registry keys, which contain the settings and important data of the most frequently used applications, as well as user's files (My Documents folder, cookies, information about the user's activity).
Safe Run Computer Protection ensures the maximum security of operating system objects and the user's personal data by running unknown applications in the protected virtual environment.

Virus scan
Tasks used to scan individual files, folders, drives, areas, or the entire computer for viruses.
Objects Scan. Scan of objects selected by the user. You can scan any object in the computer's file system.
Full Scan. A thorough scan of the entire system. The following objects are scanned by default: system memory, programs loaded on startup, system backup, email databases, hard drives, removable storage media and network drives.
Quick Scan. Virus scan of operating system startup objects.

My Update Center,
which ensures the up-to-date status of internal application modules and databases used to scan for malicious programs.
To block any network attack, delete a virus or other malicious program, Kaspersky PURE should be regularly updated. The My Update Center component is designed for that purpose. It handles the update of application databases and modules used by the application.
The update distribution service allows saving databases and program modules updates downloaded from Kaspersky Lab servers to a local folder and then granting access to them to other computers on the network to reduce network traffic.

Monday, March 15, 2010

Kaspersky Mobile security enterprise edition for corporate mobile


Kaspersky Mobile Security 7.0 Enterprise Edition

Latest version number: 7.0.1.85 [Windows Mobile], 7.0.31 [Symbian], 6.0.1717 [Plugin] (7.0 Critical Fix 3)  

Product

Latest version: kmsecurity_ee_7.0cf3_en.exe [EXE, 1.47MB]
Additional distributives: Plugin to manage KMS 7.0 EE through Kaspersky Administration Kit 6.0 MP2:  
build 6.0.1717 [EXE, 545KB]
 
 Product manuals: Version 7.0 CF3:
 
User's guide [PDF, 1.09MB]
Administrator's guide [PDF, 840 KB]

FAQ: 
Administration Server FAQ for KMSEE Management
 
How to prepare an Administration Server version 8.0 to install Kaspersky Mobile Security 7.0 Enterprise Edition - http://support.kaspersky.com/ak8/clients_install?qid=208280781

How to install Kaspersky Mobile Security 7.0 Enterprise Edition via a remote install task in Kaspersky Administration Kit - http://support.kaspersky.com/ak8/clients_install?qid=208279864

How to install Kaspersky Mobile Security 7.0 Enterprise Edition via SMS - http://support.kaspersky.com/ak8/clients_install?qid=208279865

How to activate (install\ prolong) a key file in Kaspersky Mobile Security 7.0 Enterprise Edition? - http://support.kaspersky.com/ak8/key?qid=208279859

System Requirements

Kaspersky Mobile Security 7.0 Enterprise Edition runs only on smartphones and communicators that support receipt and sending of SMS messages and working under the following operating systems:
  • Symbian OS 9.1, 9.2 Series 60 (Nokia smartphones only)
  • Windows Mobile 5.0, 6.0, 6.1
The product has been tested on the following hardware:
  • Nokia: E61, 6290, 5500, N95, 3250, E50, E60, N71, N81, N91, N73, E65, 6220, N78, E71
The latest version of Kaspersky Mobile Security 7.0.20 has been tested Nokia 6220, N78 and E71.
  • HTC: 710S, S620
  • HP: iPaq 514, S100, HW 6915
  • Eten: m600, x800
  • Toshiba: G900

Sunday, March 7, 2010

RIprep utiilty - To prepare client computers for Kaspersky Deployment

Applies to Kaspersky Administration Kit 8.0

The Riprep utility is designed for preparing client PCs for deployment. It allows to quickly perform operations on a client PC necessary for deployment. Riprep allows to:

  • Disable Simple File Sharing. This option is not available for the following operating systems: Microsoft Windows Vista, Microsoft Windows 7 and Microsoft Windows Server 2008.

  • Start the Server service.

  • Create an Account having all permissions required to perform remote installation.

  • Disable User account control (UAC). This option is available for the following operating systems only: Microsoft Windows Vista, Microsoft Windows 7 and Microsoft Windows Server 2008.

  • Open the following ports which is necessary to be able to install applications:
    • TCP 139, 445, 13000, 14000, 18000
    • UDP 137, 138, 13000

InformationNote: The Riprep utility is incompatible with Microsoft Windows Home Edition.

The Riprep utility is located in Kaspersky Administration Kit installation folder on a PC with installed Administration server. The utility should be run on a client PC which you want to prepare for deployment under an account having local administrator permissions for that PC.

The utility has a GUI, and can be managed using command prompt as well.

Managing the utility via GUI:

  1. Copy the file riprep.exe to a client PC and run it.

  2. Check necessary box(es).

During account creation an additional window will appear prompting to enter login and password:

Managing the utility via command prompt

Syntax:

riprep.exe [-silent] [-cfg ] [-tl traceLevel]

Switches:

-silent – run the utility in non-interactive mode.

-tl traceLevel – set traces level, where traceLevel is a number between 0 and 5. Without this switch, traces level is set to 0.

-cfg – specifies riprep.ini configuration file path. You should manually create this configuration file has under this exact name.

Riprep.ini configuration file contains two sections:

Specify which tasks should be run in the section Common:

DisableSFS – disable simple file sharing (0 – disable task; 1 – enable task);

StartServer – start the service Server (0 – disable task; 1 – enable task);

OpenFirewallPorts – open necessary ports (0 – disable task; 1 – enable task).

DisableUAC – disable User account control (0 – disable task; 1 – enable task).

Specify login (user) and password (Pwd) in the section UserAccount.

An example of a configuration file:

[Common]

DisableSFS=0

StartServer=1

OpenFirewallPorts=1

DisableUAC=0

[UserAccount]

user=Admin

Pwd=Pass123

After the utility work is over, the following files will be created in the starting folder:

riprep.txt – a utility run log containing a full utility runtime report with reasons.

riprep.log – a trace file (it is created if the utility traces level is set to more than 0).

Source: http://usa.kaspersky.com/support/corporate/remote_management/t207802766/208280781/


How to install Kaspersky Antivirus version 6.0 MP4 with a preset configuration in silent mode

Applies to:
  • Kaspersky Anti-Virus 6.0 for Windows Workstations MP4
  • Kaspersky Anti-Virus 6.0 SOS MP4
  • Kaspersky Anti-Virus 6.0 for Windows Servers MP4
  • Kaspersky Administration Kit 8.0
  • In order to install the application in silent mode (without displaying dialogue boxes during installation) remotely, please do the following:

    1. create a special file containing information about application components to install and general installation settings. There are two ways to do it:

      • create an installation package for the application in Kaspersky Administration Kit and change the package as necessary (or use an existing package);

      • for Kaspersky Antivirus version 6.0 MP4: manually create a setup.ini file containing necessary settings. Please see description of that file below.

    2. copy a key file and an Anti-Virus configuration file (as necessary) into an installation package or a folder with application installation files (if you are not using Kaspersky Administration Kit).

      WarningInstall.cfg (configuration file) and key file should be saved into the subfolder exec of an installation package together with the msi file.

    3. Run setup.exe (from an installation package or a distribution package) on a computer where you want to install the application in silent mode or install it using msiexec.exe. Files can be run with the following arguments:

      • setup.exe [/pKLUNINSTPASSWD=password]:
        • /s – silent installation without reboot
        • /s /pALLOWREBOOT=1 - silent installation with reboot (without prompting)
        • /v/qb - semi-silent installation without reboot (progress bar only)
        • /v/qb /pALLOWREBOOT=1 - semi-silent installation with a prompt to reboot

          InformationArguments /v/qb and /pALLOWREBOOT are typed in without a delimiting space.
          Argument /pKLUNINSTPASSWD allows to set a password for application uninstallation.

      • msiexec.exe /I [KLUNINSTPASSWD=]:
        • /qn - silent installation without reboot
        • /qn ALLOWREBOOT=1 - silent installation with reboot (without prompting)
        • /qb - semi-silent installation without reboot (progress bar only)
        • /qb ALLOWREBOOT=1 - semi-silent installation with a prompt to reboot

          InformationArgument KLUNINSTPASSWD allows to set a password for application uninstallation.

    WarningIf you are using arguments for silent and semi-silent installation, it is necessary to manually create setup.ini file, specify necessary settings in it and save it in Anti-Virus distribution package in order to install application Scan and Update tasks. System Scan and Update

    Description of setup.ini file

    Section [Setup] – general application installation settings.

    tasks will not be installed without this file!

    InstallDir=.
    Reboot=yes|no – computer reboot after completing application installation (rebooted by default).
    SelfProtection=yes|no – enable or no Kaspersky Anti-Virus installation process self-defense (enabled by default). Should not be mistaken with application self-defense function!
    MSExclusions=yes|no – should exclusions recommended by Microsoft for servers be added into Kaspersky Anti-Virus list of exclusions (Kaspersky Anti-Virus 6.0 for Windows Servers MP4 only).
    AddPath=yes|no – should avp.com path be added to environment variable %Path% (Kaspersky Anti-Virus 6.0 for Windows Servers MP4 only).
    ActivationCode=XXXXX-XXXXX-XXXXX-XXXXX – here you can specify an activation code.



    Section [Components] – application components to install. Entire application will be installed unless you specify at least one component here.


    FileMonitor=yes|no – install the component File Anti-Virus.
    MailMonitor=yes|no – install the component Mail Anti-Virus (Kaspersky Anti-Virus 6.0 for Windows Workstations MP4 only).
    WebMonitor=yes|no – install the component Web Anti-Virus (Kaspersky Anti-Virus 6.0 for Windows Workstations MP4 only).
    ProactiveDefence=yes|no – install the component Proactive Defense (Kaspersky Anti-Virus 6.0 for Windows Workstations MP4 only).
    AntiSpy=yes|no – install the component Anti-Spy (Kaspersky Anti-Virus 6.0 for Windows Workstations MP4 only).
    AntiHacker=yes|no – install the component Anti-Hacker (Kaspersky Anti-Virus 6.0 for Windows Workstations MP4 only).
    AntiSpam=yes|no – install the component Anti-Spam (Kaspersky Anti-Virus 6.0 for Windows Workstations MP4 only).
    LockControl=yes|no – install the component Access Control (Kaspersky Anti-Virus 6.0 for Windows Workstations MP4 only).

    InformationIn order to exclude a component from installation include a string =no.

    InformationYou can use 1, on, enable, enabled instead of yes, and 0, off, disable, disabledno.
    instead of no

    How to install Kaspersky Anti-Virus version 6.0 MP4 bypassing detection of incompatible software?

    Applies to:
  • Kaspersky Anti-Virus 6.0 for Windows Workstations MP4
  • Kaspersky Anti-Virus 6.0 for Windows Servers MP4
  • Kaspersky Administration Kit 8.0
  • Kaspersky Anti-Virus version 6.0 MP4 allows bypassing detection of installed incompatible software during installation.
    WarningThis method should be used by users ONLY in case Kaspersky Anti-Virus version 6.0 MP4 Setup Wizard keeps detecting third-party antivirus software which has actually been completely uninstalled from the PC.
    Using this method on a system with installed third-party antivirus software, might result in unstable work of installed software and operating system, and even render the system completely unusable!
    There are two ways of disabling detection of incompatible software during installation of Kaspersky Anti-Virus version 6.0 MP4:
    • by running installation from command line prompt with arguments:

      • download and save the latest version of Kaspersky Anti-Virus version 6.0 MP4 installer from the official Kaspersky Lab website (http://www.kaspersky.com/productupdates);
      • run the installer;
      • Click Next when asked by Kaspersky Anti-Virus Setup Wizard for a location to save files. By default the installer will extract files into the folder C:\KAV\WinWorkstation\english;
      • click Cancel to exit Kaspersky Anti-Virus Setup Wizard after it finishes extracting installation files;
      • click the button Start, select Run... Type in cmd and click OK.
        type in the following command:

        [full_path_to_setup.exe] /pSKIPPRODUCTCHECK=1

        The command will look like C:\KAV\WinWorkstation\english\setup.exe /pSKIPPRODUCTCHECK=1 (if files have been saved to the default location).

      • Press Enter to execute the command. Setup Wizard will start.

    • by editing the file installer.ini:

      • open the folder containing installation files:

        • local installation: C:\KAV\WinWorkstation\english, by default.

        • installation via Kaspersky Administration Kit:

          C:\Program Files\Kaspersky Lab\Kaspersky Administration Kit\Share\Packages\KavWks 6.0.4.1212\exec for Kaspersky Anti-Virus 6.0 for Windows Workstations MP4;

          C:\Program Files\Kaspersky Lab\Kaspersky Administration Kit\Share\Packages\KavFs 6.0.4.1212\exec for Kaspersky Anti-Virus 6.0 for Windows Servers MP4;

      • open the file installer.ini in a text editor;
      • insert a line pSKIPPRODUCTCHECK=1 before the line RemoveIncompApp=1 and save the changes;
      • run the file setup.exe or a Kaspersky Administration Kit installation task for Kaspersky Anti-Virus 6.0 for Windows Workstations/ Servers MP4
      • Source: http://usa.kaspersky.com/support/corporate/remote_management/t207802766/208281062/