KAPERSKY ANTI-VIRUS 5.7 - FOR NOVELL NETWARE, Руководство администратора

Страница: 142 / 170

142
Kaspersky Anti-Virus for Novell NetWare
1. If you wish to scan mail format files check the Plain mail files box.
You can enable the heuristic file-checking mode (see section B.2.1.1 on
page 142) to enable detection of viruses yet unknown to the program.
To do so, check the Use Code Analyzer box.
B.2.1.1. Code analyzer
Code analyzer
scans file and sector codes using different paths of the
Kaspersky Anti-Virus algorithm and detects virus-like instructions. If Code
Analyzer detects a sequence of commands like file opening, file writing, interrupt
vector intercept etc. such a file is considered
“ suspicious ” and an appropriate
message is displayed.
Of course, like any heuristic algorithm, Code Analyzer can give false responses.
However, it has been tested with a very large number of objects and did not give
any real false response. If you ever experience false responses with uninfected
files, please send copies of these files to Kaspersky Lab for analysis.
When scanning the code for the presence of possible viruses, heuristic analyzer
checks multiple paths of the program's algorithm including several sub-layers.
This procedure detects about 92% of viruses (including many encrypted ones)
from the range of viruses known to Kaspersky Lab. Therefore we expect that
new and unknown viruses will be detected with similar probability.
B.2.1.2. Extracting Engine
The Extracting Engine
is used for searching viruses in archived files (ZIP, ARJ,
LHA and RAR). If the extracting engine is disabled, archives will be scanned as
usual files. This means that only viruses that have infected the archive itself will
be detected, but not the files stored in it.
The current version of Extracting Engine is capable of unpacking all the existing
versions of ARJ, ZIP, LHA, RAR, CAB, and ICE archives.
Detecting viruses in archives is of the utmost importance, since a virus can be
stored in an archive as long as several months or even years bringing no harm,
but can then spread very quickly causing a lot of trouble.
Using its Extracting Engine, Kaspersky Anti-Virus detects viruses in archived files
and informs the user.
Extracting Engine does not unpack password-protected archives.