Tools - Kaspersky Lab | Antivirus Protection | Internet Security

Internet Security 2012

Tools

Kaspersky Internet Security 2012

1 | 23

Table of Contents Tools ................................................................................................................................................ 2

Kaspersky Rescue Disk ................................................................................................................ 3Creating Rescue Disk ................................................................................................................ 4Starting the computer from the rescue disk ............................................................................. 10

System Restore Wizard .............................................................................................................. 13Privacy Cleaner Wizard .............................................................................................................. 17Browser Configuration Wizard .................................................................................................... 19

Starting Browser Configuration Wizard .................................................................................... 20Rolling back wizard actions which resulted in problems when working on the Internet ........... 22


2 | 23

Tools Providing computer security is a hard task which demands knowledge of the operating system functioning and how its weak points can be used. Additionally, great amount and diversity of the information about the system security, complicates the analysis and the information processing.

To facilitate solving specific tasks of providing computer security, KIS 2012 includes the following wizards and tools:

► Kaspersky Rescue Disk restores the system its efficiency after a virus attack in case system files of the operating system were damaged and the operating system could not be initially booted.

► Microsoft Windows troubleshooting Wizard eliminates traces of malicious objects in the system.

► Privacy Cleaner Wizard searches and eliminates traces of a user's activities in the system, and the operating system's settings which allow the gathering of information about user activities.

► Browser Configuration Wizard analyzes and adjusts the settings of Microsoft Internet Explorer in order to eliminate its potential vulnerabilities.


3 | 23

All the problems found by the Wizards (except the Rescue Disk Creation Wizard) are grouped based on the type of danger they pose to the operating system. Kaspersky Lab offers a set of actions for each group of problems which help eliminate vulnerabilities and weak points in the system's settings. Three groups of problems and, respectively, three groups of actions on them, when detected, are distinguished:

► Strongly recommended actions will help eliminate problems posing a serious security threat. You are advised to perform in time all the actions in this group to eliminate the threat.

► Recommended actions help eliminate problems posing a potential threat. You are advised to perform all actions in this group as well to provide the optimal level of protection.

► Additional actions help repair system damages which do not pose a current threat but may threaten your computer's security in the future. Performing these actions ensures comprehensive protection of your computer. However, in some cases, they may lead to deletion of user settings (such as cookies).

Kaspersky Rescue Disk KIS 2012 includes a service which allows to create rescue disk designed to scan and disinfect x86-compatible computers. It is required when a computer is so damaged that the anti-virus solution or disinfection tools (for example, Kaspersky AVPTool), run under control of the operating system, fail to disinfect a computer. Efficiency of such disinfection enhances considerably as malicious programs in the system do not get control during the boot of the operating system. Rescue disk is an .iso image which includes the following:

► system and configuration files ► a set of utilities to diagnose the system ► a set of additional utilities (file manager and etc.) ► Kaspersky Rescue Disk files ► anti-virus databases files

A computer with the damaged operating system is booted from a CD/DVD-disk or a USB-medium (a corresponding device should be installed on the computer).


4 | 23

Creating Rescue Disk You can create the disk image (an .iso file) with up-to-date anti-virus databases and configuration files. A source image can be downloaded from Kaspersky Lab servers or copied from a local source. The file created by the Wizard is saved in the path specified during the work of the Wizard. To create a Rescue Disk, perform the following actions:

1. Open the main application window.

2. Select the Tools section.

3. In the Tools window in the Kaspersky Rescue Disk section click the Create button to launch the Rescue Disk Creation Wizard:


5 | 23

4. The Wizard consists of a series of screens (steps) navigated using the Back and Next buttons. To close the Wizard once it has completed its task, click the Finish button. To stop the Wizard at any stage, click the Cancel button.

Step 1. Starting the Wizard. Searching for an existing disk image

Steps of the Rescue Disk Creation Wizard

The first window of the Wizard contains information about the Rescue Disk that will be created by the Wizard. If the Wizard detects an existing Rescue Disk ISO file in the dedicated folder, the Use existing ISO image box will be displayed in the first window of the Wizard. Check the box to use the detected file as original ISO image and go directly to the Updating disk image step. Uncheck this box if you do not want to use the disk image that has been found.

Step 2. Select disk image source If you have checked the Use existing ISO image box in the first Wizard window, then this step will be skipped. At this step, you should select the image file source from the list of options:

► Select Copy ISO image from local or network drive if you already have a Rescue Disk or an image prepared for it and stored on your computer or on a local network resource.

► Select the Download ISO image from Kaspersky Lab server option if you do not have an image file, and you want to download it from the Kaspersky Lab server. Make sure that the Internet connection is established on your computer. The latest version of an image is downloaded from the Kaspersky Lab server. The file size is about 200 MB.


6 | 23

Step 3. Copying (downloading) disk image If you have checked the Use existing ISO image box in the first Wizard window, then this step will be skipped.

► If you have selected Download ISO image from Kaspersky Lab server, the disk image downloading progress is displayed immediately.

► If you have selected the option to copy the image from a local source at the previous step (Copy ISO image from local or network drive), you should specify the path to the ISO file at this current step. To do this, click the Browse button. After you have specified the path to the file, click the Next button. The disk image copying progress is displayed in the Wizard window.


7 | 23

When copying or downloading the ISO image is complete, the Wizard automatically proceeds to the next step.

Step 4. Updating image file File update procedure includes:

► update of anti-virus databases; ► update of configuration files.

Configuration files determine the possibility of starting the computer from a removable disk or CD / DVD written using a rescue disk image provided by the Wizard.

When updating anti-virus databases, those distributed at the last update of Kaspersky Internet Security 2012 are used. If the databases are obsolete, it is recommended to update KIS 2012 and restart the Rescue Disk Creation Wizard. To begin updating the ISO file, click the Next button. The updating progress will be displayed in the Wizard window.


8 | 23

Step 5. Recording the image on a data medium In this window, the Wizard informs you of a successful creation of the Rescue Disk and offers you to record it on a data medium. Specify a data medium for recording the ISO image:

► Select Record to CD / DVD to record the image on a CD / DVD. You will be prompted to specify the CD / DVD on which the image should be recorded. Then, the ISO image will be recorded on this CD / DVD. The recording process may take some time so please wait until it has completed.

A special program is needed for burning. For example, Nero.

► Select the Record to USB flash drive option to record the image on a removable drive. Kaspersky Lab recommends that you do not record the ISO image on devices which are not designed specifically for data storage, such as smartphones, cellphones, PDAs, and MP3 players. Recording ISO images on these devices may lead to their incorrect functioning in the future. You will be prompted to specify the removable drive on which the image should be recorded. Then, the image will be recorded on this removable drive. The recording process may take some time so please wait until it has completed.


9 | 23

► Select Save the disk image to file on local or network drive to record the ISO image to the hard drive installed on your computer or another one that you can access over a network. You will be offered to specify the folder into which the image should be recorded, and the name of the ISO file, after which it will be recorded on the hard drive. The recording process may take some time so please wait until it has completed. Later you will have to record this file on the CD/DVD disk or a USB drive on your own.


10 | 23

Step 6. Wizard completion To complete the Wizard, click the Finish button. You can use the disk that you have created for further booting of the computer (see Starting the computer from the rescue disk).

Starting the computer from the rescue disk To boot the operating system from the rescue disk, you should use a CD / DVD or removable drive with a rescue disk image (.iso) file recorded on it, and start the computer. If a CD-disk cannot be inserted into the CD/DVD drive, then start up the computer and next insert the CD into the CD/DVD drive. Insert the disk quickly, otherwise the infected operating system starts booting not from a rescue disk. If you fail to boot your computer as described above, perform the following actions to boot from the Kaspersky Rescue Disk:

1. Restart your computer.

2. Immediately after the computer restart, press the Delete key several times to enter BIOS1

3. In BIOS in the Advanced BIOS Features menu set CD/DVD-ROM (or USB-drive) as the first boot device (the BIOS interface may vary depending on its version).

.

4. Exit BIOS saving the made changes.

5. When a screen with Kaspersky Rescue Disk 10 appears, press any key within 10 seconds, to prevent your computer to boot from the hard drive.

6. Start work with the rescue disk.

7. Using the keys to move the cursor in the left part of the screen, select the language of the graphic interface. Press the ENTER key.

1 BIOS is a part of the system hardware designed to provide access to computer hardware and the connected devices.


11 | 23

If no choice is made for some time, English is used as a default language.

Next, the folders for anti-virus databases, reports, the quarantine and auxiliary files are searched (created). By default, folders of a Kaspersky Lab product, installed on an infected computer, are used (ProgramData/Kaspersky Lab/AVP12 – for Microsoft Windows Vista/7, Documents and Settings/All Users/Application Data/Kaspersky Lab/AVP12 – for earlier versions of Microsoft Windows).

Pay attention, the folders Application Data in Microsoft Windows XP and ProgramData in Microsoft Windows Vista and Microsoft Windows 7 are hidden by default. Read Article 3580 in Kaspersky Lab Knowledge Base, to know how to enable display of hidden folders.

If the application’s folders are not found, an attempt is made to create them. If the folders cannot be found or created, the kl.files folder is created on one of the drives.

8. Next you are offered to select from one of the following boot modes: ► Kaspersky Rescue Disk. Graphic mode loads the graphic subsystem (recommended

for most of the users). ► Kaspersky Rescue Disk. The text mode loads the user text interface provided by the

console file manager Midnight Commander (MC). ► Boot from the hard drive.

http://support.kaspersky.com/kis2012/tech?qid=208281592�

http://support.kaspersky.com/kis2012/tech?qid=208281592�


12 | 23

9. Using the Up/Down arrows on the keyboard select Graphic mode. Press the ENTER key.

10. Carefully read the text of a license agreement for Kaspersky Rescue Disk 10 and if you agree with its conditions, press the C key on the keyboard.

When the operating system has booted you can start working with Kaspersky Rescue Disk 10. If the operating system of the booting computer is in the sleep mode or its work was finished incorrectly, the application will notify you of it. To finish the work of the operating system correctly, click the Restart computer button.

If you click the Continue button, Kaspersky Rescue Disk 10 continues mounting the file system but the file system can be damaged. If you click the Skip button, Kaspersky Rescue Disk 10 skips mounting of the file system. In this case you can only scan boot sectors and startup elements for viruses. However, in this scenario you file system may also be damaged.

Kaspersky Rescue Disk 10 allows the user to perform the following actions:

1. Scan objects for viruses and configure scan settings, including: ► modify the security level; ► change an action performed upon a threat detection; ► create the list of objects to scan; ► change type of scanned objects; ► restrict scan duration; ► specify scan settings of compound files; ► change the scan method; ► restore default scan settings.

2. Start update of anti-virus databases and configure the update settings: ► select an update source; ► configure proxy-server settings;


13 | 23

► specify regional settings; ► if necessary, roll the latest update back.

3. Configure additional settings: ► specify the category of the detected threats; ► create the trusted zone; ► configure notification settings; ► set the storage time for report files; ► configure settings of storing objects on quarantine and backup.

4. Create a report for scan and update tasks.

5. View statistics of the application operation. You can find more detailed information about the features of the rescue disk in the help system of Kaspersky Rescue Disk.

System Restore Wizard The Microsoft Windows Troubleshooting Wizard allows to neutralize the consequences of malicious activity in the system. Kaspersky Lab recommends that you run the Wizard after the computer has been disinfected to make sure that all threats and damage caused by infections have been fixed. You can also use the Wizard if you suspect that your computer is infected. The Wizard checks whether there are any changes to the system, such as the following:

► access to the network being blocked (for example, it is impossible to address other computers in the LAN);

► known file format extensions have been changed; ► the toolbar is locked (as a result applications cannot be deleted) and etc.

Such damage can have various causes: ► the activity of malicious programs, ► system failures, ► incorrect operation of system optimization applications.

To start the Wizard, perform the following actions:




14 | 23

3. In the Tools window in the Microsoft Windows Troubleshooting section click the Start button:

4. The Microsoft Windows Troubleshooting Wizard is started.

The Wizard consists of a series of screens (steps) navigated using the Back and Next buttons. To close the Wizard once it has completed its task, click the Finish button. To stop the Wizard at any stage, click the Cancel button.


15 | 23

Step 1. Start of Wizard’s work. Selecting an action

Sequence of the wizard’s steps

If the wizard is started for the first time, then only the option Search for problems related to malware activity will be available. If the wizard was started earlier and some changes were made, then you will also be able to select the Changes rollback option. Click the Next button to continue.

Step 2. Problem search All damage found during the previous step is grouped on the basis of the type of danger it poses. For each damage group, Kaspersky Lab recommends a sequence of actions to repair the damage. There are three groups of actions:

► Strongly recommended actions eliminate problems posing a serious security threat. You are advised to perform all actions in this group.

► Recommended actions eliminate problems presenting a potential threat. You are also advised to perform all actions in this group.

► Additional actions repair system damage which does not pose a current threat, but may pose a danger to the computer's security in the future.

Check the boxes for the problems to be fixed. Click the Next button.


16 | 23

Step 3. Wizard completion To close the Wizard, click the Finish button.


17 | 23

Privacy Cleaner Wizard Many of user's actions performed on the Internet or with applications are registered in the system. The following data is saved:

► Histories containing information about visited websites, applications launch , search requests, opening / saving files by different applications;

► Microsoft Windows system log records; ► Temporary files and etc.

Privacy Cleaner Wizard allows to delete the files, including files with the user private data (for example, passwords). To start Privacy Cleaner Wizard, perform the following actions:



3. In the Tools window in the Privacy Cleaner section click the Start button:

4. In the Wizard welcome window select an action: ► Perform user’s activity traces diagnostics. ► Rollback changes (the option is available if the wizard was used before).

5. Click the Next button.


18 | 23

6. Wait until the process is completed.

7. Select the required information about the user's actions to delete. The list contains three sections: ► Additional actions — the list of the least dangerous problems; ► Recommended actions — the list of potentially dangerous problems; ► Strongly recommended actions — this group includes dangerous problems.

8. To start the process, click the Next button.


19 | 23

9. Wait until the process of deleting is completed.

In order to delete some files, the wizard will suggest that you restart the system.

10. In the Activity traces cleaned successfully window, you can specify the mode that the wizard will be started automatically every time on KIS 2012 exit. To do so, check the box Clean activity traces every time on Kaspersky Internet Security exit.

11. To finish the wizard's work, click the Finish button.

Repeated running of the Privacy Cleaner Wizard may detect activity traces which were not cleaned up by the previous run of the Wizard. The matter is that data related to user activity in the system are accumulated constantly. Some files, for example the Microsoft Windows log file, may be in use by the system while the Wizard is attempting to delete them. In order to delete these files, the Wizard will prompt you to restart the system. However, during the restart, these files may be recreated and detected again as activity traces.

Browser Configuration Wizard The Browser Configuration Wizard analyzes Microsoft Internet Explorer settings from the perspective of security, since some settings selected by the user or set by default may cause security problems. The Wizard checks whether the latest software updates for the browser have been installed, and whether its settings contain any potential vulnerabilities which can be used by intruders to inflict damage on your computer. In the result of analysis the wizard will offer you to select from the list the problems you wish to eliminate. The list is divided into three groups:

► Additional actions. Designed to fix vulnerabilities of the browser, which do not pose a current threat but may pose a danger to the computer's security in the future.

► Recommended actions. Help eliminate problems posing a potential threat. ► Strongly recommended actions. Help eliminate problems posing a serious security threat.


20 | 23

The Browser Configuration Wizard checks the following: ► Microsoft Internet Explorer cache. The cache contains confidential data, from which a

history of websites visited by the user can also be obtained. Some malware objects also scan the cache while scanning the disk, and intruders can obtain, for example, the user's email addresses. You are advised to clear the cache every time you close your browser to improve the protection.

► Display of known file types extensions. It is useful to see the file extension. File names of many malicious objects contain combinations of symbols imitating an additional file extension before the real one. If the real file extension is not displayed, users can see just the file name part with the imitated extension. Such scheme is commonly used by cyber criminals. To improve protection, you are advised to enable the display of files of known formats.

► List of trusted websites. Malicious objects can add to this list links to websites created by intruders.

Starting Browser Configuration Wizard To start the Browser Configuration Wizard:



3. In the Tools window in the Browser Configuration section click the Start button:

4. In the welcome window of the Browser Configuration Wizard, only one option Perform diagnostics for Microsoft Internet Explorer is available. To start the search process, click the Next button.


21 | 23

When you start the Wizard next time, you will be able to select from the two options: ► Perform diagnostics for Microsoft Internet Explorer. ► Roll back changes. You can roll back changes if after the Wizard's work some

problems when working on the Internet appear.

5. Wait until the system is being checked. As a result of analysis the list of actions to eliminate the problems is displayed.

6. In the Problems search completed window, check the boxes for problems to be fixed. Click the Next button.

http://support.kaspersky.com/kis2011/tools?qid=208282227#rollback�


22 | 23

7. In the Wizard window, click the Finish button.

Rolling back wizard actions which resulted in problems when working on the Internet If the Wizard's work causes problems with the Internet, you can roll back the changes which were made by the Wizard. In order to do so, perform the following actions:

1. Start the Browser Configuration Wizard.


23 | 23

2. In the welcome window, select the Roll back changes option and then click the Next button.

3. In the Changes search completed window, select the changes for rollback and click the Next button.

4. Wait until the rollback process is completed.

5. In the Changes rollback completed window, click the Finish button.

Make sure problems with the Internet are eliminated.

Date post:	12-Sep-2021
Category:	Documents
Upload:	others
View:	5 times
Download:	0 times