96
Kaspersky Anti-Virus for Novell NetWare
3. If you wish to scan archive files check the
Archived files
box (for
more details about extracting engine refer to section
B.2.1.2 on
page 96).
4. If you wish to scan packed executable files check the
Compressed
executable
box (for more details about the procedure of extracting
packed executables refer to section
B.2.1.3 on page 96).
5. If you wish to scan the mail repository check the
Mail databases
box.
6. If you wish to scan mail format files check the
Plain mail format
box.
You can enable the heuristic file-checking mode (see section
B.2.1.1 on
page 96) to enable detection of viruses yet unknown to the program.
To do so, check the
Use heuristic code analyzer
box.
B.2.1.1.
Code analyzer
Code analyzer
scans file and sector codes using different paths of the
Kasper-
sky
Anti-Virus
algorithm and detects virus-like instructions. If Code Analyzer
detects a sequence of commands like file opening, file writing, interrupt vector
intercept etc. such a file is considered
“
suspicious
”
and an appropriate message
is displayed.
Of course, like any heuristic algorithm, Code Analyzer can give false responses.
However, it has been tested with a very large number of files and did not give
any real false response. If you ever experience false responses with uninfected
files, please send copies to Kaspersky Lab for analysis.
When scanning the code, heuristic analyzer checks multiple paths of the pro-
gram's algorithm including several sub-layers. This procedure detects about 92%
of viruses (including many encrypted ones) from the range of viruses known to
Kaspersky Lab. Therefore we expect that new and unknown viruses will be de-
tected with similar probability.
B.2.1.2.
Extracting Engine
The Extracting Engine
is used for searching viruses in archived files (ZIP, ARJ,
LHA and RAR). If the extracting engine is disabled, archives will be scanned as
usual files. This means that only viruses that have infected the archive itself will
be detected, but not the files stored in it.
The current version of Extracting Engine is capable of unpacking all the existing
versions of ARJ, ZIP, LHA and RAR archives.
