User manual KASPERSKY LAB KASPERSKY ANTI-HACKER 1.5

[. . . ] KASPERSKY LABS Kaspersky Anti-Hacker 1. 5 USER GUIDE KASPERSKY ANTI-HACKER 1. 5 User Guide Kaspersky Labs Ltd. http://www. kaspersky. com Revision date: April 2004 Contents CHAPTER 1. KASPERSKY ANTI-HACKER. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . Introduction . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [. . . ] Alternatively, you can select the appropriate command from the system menu. You can switch to one of the following security levels: · · · · · Block all High Medium Low Allow all With the High, or the Medium, or the Low level enabled you can enable a supplementary security tool by checking the Stealth mode checkbox. Enabling the Security System and Defining its Settings 41 Security levels are applied right after the user selects them. For details of the available security levels see subchapter 4. 2 on page 23. 6. 1. 3. Network Event Warning If you created a rule and checked the Display warning checkbox (see subchapter 0 on page 59, subchapter 6. 4. 2. 2 on page 67), when the program applies this rule, an appropriate message will appear on your screen (see fig. See figure 18 for an example of such a message, which appears after an appropriate packet filtering rule is applied. The message describes the related remote and local addresses, and also the ports used. You can review the corresponding packet filtering rule by clicking on the hyperlink. You can also disable subsequent warnings for this event by checking the Do not show this warning checkbox. Fig. An example of a Kaspersky Anti-Hacker warning When creating a rule you can check the Log event checkbox to log the corresponding event. 42 Kaspersky Anti-Hacker 6. 1. 4. Training Window (Medium Level) The program displays its training window (see fig. 19) when it detects an unknown event while running with the Medium level selected. Fig. An example of a training window At the top of this box you can see the name of the application requesting connection with a remote machine, the remote machine address, and the port numbers. If required, you can display more details of the requested connection by clicking on the . . . You can allow or block this specific operation by clicking on the Allow once or Block once buttons, respectively. If you close the training window by pressing the button in its upperright corner, the operation at issue will be blocked this time. To define a rule that will later handle events initiated by this application, select one of the actions listed below and click on the button. After this, the new rule will be added to your list of application rules. · Allow activity of the application according to its type ­ allows only network communication that is compliant with the specified application Enabling the Security System and Defining its Settings 43 type. Select the required type from the drop-down list below the option button (for details see subchapter 6. 3. 2. 1 on page 49). · · Disable all activities of the application ­ blocks the specified application from any kind of network activity including the described operation. ­ allows you to specify the operations that will be allowed for this application. If you select this option button and click , the Rule Wizard box will appear on your screen (for details of the wizard see subchapter 6. 3. 2 on page 49). [. . . ] The product is also powered by a unique heuristic technology combating even future threats: the built-in heuristic code analyzer, which is able to detect up to 92% of unknown viruses and the world's only behavior blocker for MS Office 2000 providing 100% guaranteed protection against any macroviruses. Appendix C. 93 C. 1. Other Kaspersky Lab's Products Kaspersky® Anti-Virus Lite The program is the most easy-to-use Kaspersky Lab's anti-virus product that is developed for protection of home computers running Windows 95/98/Me, Windows 2000/NT Workstation, Windows XP. Kaspersky® Anti-Virus Lite includes: · · · an anti-virus scanner that provides a comprehensive check of all local and network drives on demand; an anti-virus monitor that automatically checks all used files in realtime; an MS Outlook Express mail databases checking module for checking for viruses on demand. Kaspersky® Anti-Virus Personal/Personal Pro The package has been developed to provide the full-scale anti-virus protection for home computers running the Windows 95/98/ME, or the Windows 2000/NT, or the Windows XP operation system, MS Office 2000 business applications and the Outlook and Outlook Express mail programs. Kaspersky® Anti-Virus Personal/Personal Pro includes a program to retrieve daily updates via the Internet, an integrated module of management and automation of your anti-virus protection. [. . . ]