Reduced anti-malware databases kit usage

March 5, 2024

ID 218262

You can use the reduced databases kit instead of the full databases kit. The reduced databases kit is smaller in size than the full kit and takes up less RAM when used. To ensure the same detection rate as when using the full databases kit, you must use the reduced kit together with KSN.

Reduced anti-malware databases kit and KSN

It is not recommended to use the reduced databases kit without KSN, because the detection rate will be lower than when using the full database kit. If there is no connection to the KSN servers (for example, when access to the Internet becomes unavailable), it is recommended to switch to the full databases kit.

If you download databases to mirror servers, always update both the reduced and full databases kits, so that the full kit will be up-to-date when Kaspersky Scan Engine switches to it.

Switching to the reduced databases kit by using the built-in functionality of Kaspersky Scan Engine

The instruction below shows the scenario of switching to the reduced databases kit by using the built-in functionality of Kaspersky Scan Engine.

To switch to the reduced databases kit:

  1. Make sure that the current license supports KSN usage.
  2. Enable KSN by using one of the following methods:
    • KAV_SHT_ENGINE_KSN flag in HTTP mode.
    • UseKSN parameter of the KSNSetting section of the ICAP mode configuration file in ICAP mode.

      Make sure that you have read and accepted the End User License Agreement (EULA). You can find the text of the EULA in /doc/ksn_license.txt. To accept the EULA, the parameter Settings > EULA > KSN in the klScanEngineUI.xml configuration file must be set to accepted.

    • Enable reputation checking toggle switch in the scanning settings of Kaspersky Scan Engine GUI.
  3. To start using the reduced databases kit, in HTTP and ICAP modes, specify 1 for the UseReducedBases parameter of the kavhttpd.xml and kavicapd.xml configuration files. By default, the value is 0.
  4. Restart kavhttpd (in HTTP mode) or kavicapd (in ICAP mode).

Notice that the full databases kit is not removed and remains on the hard drive.

Switching to the full databases kit by using the built-in functionality of Kaspersky Scan Engine

The scenario below demonstrates how to switch to the full databases kit by using the built-in functionality of Kaspersky Scan Engine.

To switch to the full databases kit:

  1. Set the UseReducedBases parameter to 0 (see UseReducedBases for HTTP or ICAP mode).
  2. Restart kavhttpd (in HTTP mode) or kavicapd (in ICAP mode).

Notice that the reduced databases kit is not removed and remains on the hard drive.

Switching from the full databases kit to the reduced kit and removing the full databases kit

To switch from the full databases kit to the reduced kit, and then remove the full databases kit:

  1. Perform steps 1 to 4 from subsection "Switching to the reduced databases kit by using the built-in functionality of Kaspersky Scan Engine" (see above).
  2. Click Update from scratch on the Kaspersky Scan Engine dashboard.

After this, the reduced databases kit is downloaded.

Did you find this article helpful?
What can we do better?
Thank you for your feedback! You're helping us improve.
Thank you for your feedback! You're helping us improve.