You are welcome to subscribe to "New articles in Knowledge base" mailing list.

You are visiting our Support Website and we thank you in advance for your participation in this poll and your feedbacks.

Please vote honestly, we will analyze the results and will do our best to improve our service as soon as possible.

 Consumer Support Website Usability Survey:
Navigation quality*
Technical articles efficiency*
Relevance of the article(s) turned out by your query*
Ease of access to relevant information*
Comments

Read the same in:    English  Francais  Deutsch  Polski  Русский  Español  Sweden  
Home / Home products /  Home supported products /  Kaspersky Internet Security 2009 /  Technical articles / How to...

 
Search :  
Search tips Article ID # :   
 

Kaspersky Internet Security 2009

 
How Kaspersky Lab products version 2009 detect malware and other programs
 ID Article: 1736    Other languages:  Francais  Deutsch  Polski  Русский  Español  Sweden      Views for 7 days 32    Last modified on 2009 Feb 18 16:17 Printable version

Concerning to:
  • Kaspersky Anti-Virus 2009
  • Kaspersky Internet Security 2009
  • Kaspersky Lab's application version 2009 can detect hundreds thousands of malware programs that may reside on your computer. Some of these programs impose a greater threat for your computer, others are only dangerous when certain conditions are met. After the application detects a malware application, it classifies it and assigns to it a danger level (high or medium).

    Kaspersky Lab's virus analysts distinguish two main categories: malware programs and potentially unwanted programs.

    • Malware programs (Malware) are created with the purpose to damage a computer and its user, for example, to steal, block, modify or erase information, disrupt operation of a computer or a computer network. Malware programs are divided into three subcategories: 
      • Viruses and worms (Viruses\Worms) can create copies of themselves which are, in turn, capable of creating their own copies. Some of them run without user's knowledge or participation, others require actions on the user's part to be run. These programs perform their malicious actions when run.
      • Trojan programs (Trojan programs) do not create copies of themselves, unlike worms and viruses. They sneak into a computer, for example, via e-mail or using a web browser when the user visits an "infected" website. To be launched they require user's actions and start performing their malicious actions as they run.
      • Malware utilities (Malicious tools) are created specifically to inflict damage. However, unlike other malware programs, they do not perform malicious actions immediately as they are run and can be safely stored and run on the user's computer. Such programs have functions used to create viruses, worms and Trojan programs, arrange network attacks on remote servers, hacking computers or other malicious actions.
    • Potentially unwanted programs (PUPs), unlike malware programs, are not intended solely to inflict damage. Potentially unwanted programs include adware, auto-dialers and other potentially unwanted programs.
      • Adware display advertising information to the user.
      • Auto-Dialers display pornographic information to the user.
      • Other Riskware – more often than not they are useful programs used by many computer users. However, if an intruder obtains access to these programs or install them to the user's computer, such intruder can use their functionality to breach the security.

    Potentially unwanted programs are installed using one of the following methods: 

    • They are installed by the user, individually or along with another program (for example, software developers include adware programs into freeware or shareware programs). 
    • They are also installed by intruders, for example they include such programs into packages with other malware programs, use "vulnerabilities" of the web browser or Trojan downloaders and droppers, when the user visits an "infected" website.

    Additionally to the above mentioned threats the user can also enable\disable detection of suspicious compressed files and multi-packed objects.

    By default the following types of threats are detected in Kaspersky Lab’s products version 2009: 

    • Viruses and worms (their detection cannot be disabled) 
    • Trojan programs (their detection cannot be disabled) 
    • Adware 
    • Auto-dialers 
    • Suspicious compressed files 
    • Multi-packed objects

     In order to enable/disable detection of some types of threats, do the following:

    • Open the main application window 
    • Click Settings 
    • In the left part of the window select Threats and exclusions 
    • Click the Settings button in the right part of the window 
    • In the Threats window check/ clear the box(es) for the types of threats which should be\should not be detected 
    • Click OK to close each window 
    • Minimize the main application window

     

     

    Information The dialog windows for Kaspersky Anti-Virus 2009 and Kaspersky Internet Security 2009 are the same but with corresponding product names in the dialog windows.


     Did the provided info help you?

                           

     Give your detailed feedback.

     

    Kaspersky Lab

    Copyright © 1997 - 2009 Kaspersky Lab
    Site map  |   Contact us  |   International Support Service  |  Send us a suspected virus
    Login Your Personal Cabinet  |   Register  |   FAQ for Personal Cabinet