PDA

View Full Version : Kaspersky internet security 2009 settings


littleblue62
August 5th, 2008, 10:37 AM
I'll trialed Kaspersky INS 7.0 a few months ago and really liked it, but I went with Norton 360 because it involved less user involvement. User involvement is not a problem for me. The rest of my household would have issues. No problems with Norton 360 except for occasional error messages at shutdown. Computer did run a little smoother with Kaspersky. I read on another post that the new Kaspersky is more user friendly. If I wanted to give it another try, what should I know about the settings so the rest of my household dosen't have to mess with it too much? We're average home users. Keep computers clean and surf safely.
Thanks.

trjam
August 5th, 2008, 11:25 AM
I set everything to its highest setting for protection and detection. Now saying that, until you load 2009 you are not going to be able to equate what I am saying when you are thinking of an older version.

emperordarius
August 5th, 2008, 02:58 PM
Just set setting to high for maximum protection, and change to automatic mode when other people have problems configuring ;)

trjam
August 5th, 2008, 05:01 PM
setting and understanding the results are 2 different issues. My god, reading and understanding the report section was like reading War and Peace. It is totally ridiculous.

lodore
August 5th, 2008, 05:15 PM
-{ Quote: "setting and understanding the results are 2 different issues. My god, reading and understanding the report section was like reading War and Peace. It is totally ridiculous." }-
hi jeff,
the reports section is very well laid out.
you can group it.

trjam
August 5th, 2008, 05:18 PM
-{ Quote: "hi jeff,
the reports section is very well laid out.
you can group it." }-
yes you can, I just want to know what was detected. No offense, only time will tell if I am right or wrong, but I would bet the house and camper on this one.

lodore
August 5th, 2008, 05:22 PM
-{ Quote: "yes you can, I just want to know what was detected. No offense, only time will tell if I am right or wrong, but I would bet the house and camper on this one." }-
try the "detected button"?

Macstorm
August 5th, 2008, 05:26 PM
-{ Quote: "If I wanted to give it another try, what should I know about the settings so the rest of my household dosen't have to mess with it too much? We're average home users. Keep computers clean and surf safely.
Thanks." }-
Given that, i'd highly recommend selecting the 'automatic mode' instead of 'interactive' and leave the general settings at default while installing Kaspersky.

Jin K
August 5th, 2008, 05:56 PM
-{ Quote: "yes you can, I just want to know what was detected. No offense, only time will tell if I am right or wrong, but I would bet the house and camper on this one." }-

click on active threat its just like that ;D

Monkey_Feces
August 6th, 2008, 04:14 AM
Can I just set and forget the default 2009 installation, or should I configure the on demand scan settings (full scan and quick scan) to highest? There must be a reason why the recommended setting is "recommended". I notice the highest setting substantially increases scan times, but how does it scale in accuracy? I'm willing to bet it's not even a 1% improvement in accuracy vs recommended, but easily 2-3x as much time taken per scan.

After all, nod 32 scans really fast, but it's still one of the most accurate AVs.

emperordarius
August 6th, 2008, 06:29 AM
-{ Quote: "Can I just set and forget the default 2009 installation, or should I configure the on demand scan settings (full scan and quick scan) to highest? There must be a reason why the recommended setting is "recommended". I notice the highest setting substantially increases scan times, but how does it scale in accuracy? I'm willing to bet it's not even a 1% improvement in accuracy vs recommended, but easily 2-3x as much time taken per scan.

After all, nod 32 scans really fast, but it's still one of the most accurate AVs." }-

I assure you that with Highest settings after the first full scan of your computer, it will take less than an hour for a full system scan, without draining much resources, so the computer is completely usable during the full scan, but only after you perform it the first time.

Note that the Scan at recommended settings uses low heuristics while High uses Medium one. I personally prefer using High heuristics, and also using the Deep Rootkit scan(disabled by default in recommended and high modes).You won't lose any 'accuracy' even with highest settings, even if you use Maximum heuristics I doubt you'll have any false positive.

nasdaqms
August 6th, 2008, 07:06 AM
i have installed 2009 on my pc,and i install another av in virutual machine.

but the av in vm report a known worm from my pc this afternoon..

and i analyze it and found it really is a worm..

2009 really improve a lot of things,but this maybe a mistake..

nasdaqms
August 6th, 2008, 07:09 AM
this worm is writed by delephi..i know the malware name is different between two or more av softwares..can they named this or other malwares to a same name.this will help the users..

i think so..

emperordarius
August 6th, 2008, 07:10 AM
-{ Quote: "i have installed 2009 on my pc,and i install another av in virutual machine.

but the av in vm report a known worm from my pc this afternoon..

and i analyze it and found it really is a worm..

2009 really improve a lot of things,but this maybe a mistake.." }-

Two questions:

What were your heuristic settings(light, medium, deep)?

nasdaqms
August 6th, 2008, 09:42 AM
medium

does it make any sense?

emperordarius
August 6th, 2008, 09:52 AM
-{ Quote: "medium

does it make any sense?" }-

Maybe with high heuristics you could have got an heuristic alert?
Anyway Kaspersky should at least have alerted when you executed the worm, using HIPS.

and how was the worm's exact name?

nasdaqms
August 6th, 2008, 10:04 AM
the worm name is different between two av softwares.
and i think the proactive defense function and the monitors can detect the malwares(includes worm or others),maybe it is just a small mistake .
i will check the pc on my office.i will leave the message to you ..ok?:)

emperordarius
August 6th, 2008, 10:09 AM
-{ Quote: "the worm name is different between two av softwares.
and i think the proactive defense function and the monitors can detect the malwares(includes worm or others),maybe it is just a small mistake .
i will check the pc on my office.i will leave the message to you ..ok?:)" }-

right:thumb:

littleblue62
August 6th, 2008, 10:53 AM
Thanks for all your replies. I have Kaspersky IS 2009 installed and am very pleased. Have set high and automatic just to see how it all works. Very nice. Smooth hardly any impact on performance that I can notice. Any thing else that I should know about this program? Thanks again!

emperordarius
August 6th, 2008, 10:56 AM
-{ Quote: "Thanks for all your replies. I have Kaspersky IS 2009 installed and am very pleased. Have set high and automatic just to see how it all works. Very nice. Smooth hardly any impact on performance that I can notice. Any thing else that I should know about this program? Thanks again!" }-

If you are using 8.0.0.454 enable Banner and Ad blocker if you want it, because it's disabled by default ;)

Zombini
August 6th, 2008, 11:48 AM
-{ Quote: "If you are using 8.0.0.454 enable Banner and Ad blocker if you want it, because it's disabled by default ;)" }-

Its disabled by default but it causes performance issues and web page compatibility issues. Sneaky Kaspersky.

emperordarius
August 6th, 2008, 11:53 AM
-{ Quote: "Its disabled by default but it causes performance issues and web page compatibility issues. Sneaky Kaspersky." }-

I have it on and didn't have any problem. The only browsing slowdown I have is if I use maximum heuristics in web traffic protection.

CountryGuy
August 6th, 2008, 12:11 PM
The only changes I made beyond the recommended settings were to max out the settings for Full Scans (Max Heuristics, Deep Scan, etc.), added "Other Programs" to threats searched for, and to turn off the setting to trust files in digitally signed packages.

Am I leaving myself exposed by not turning everything else up to max? I'm really happy with performance thus far, but I don't want to miss something getting through the defenses either.

nasdaqms
August 7th, 2008, 07:41 AM
-{ Quote: "right:thumb:" }-
worm name is worm.win32.del.cv,it create some remains on my virtual machine named gamesetup.exe...my partner cleans the pc,so i can't find the speciment..
sorry

emperordarius
August 7th, 2008, 09:04 AM
-{ Quote: "worm name is worm.win32.del.cv,it create some remains on my virtual machine named gamesetup.exe...my partner cleans the pc,so i can't find the speciment..
sorry" }-
I made a google search and searched on viruslist but there's not entry with that name... Only if I google gamesetup.exe some Fujack variants...

BTW maybe KIS 2009 was in automatic mode?

Jin K
August 7th, 2008, 09:05 AM
-{ Quote: "worm name is worm.win32.del.cv,it create some remains on my virtual machine named gamesetup.exe...my partner cleans the pc,so i can't find the speciment..
sorry" }-

i will try to get a sample of it and i will send it to the lab

nasdaqms
August 7th, 2008, 09:39 AM
-{ Quote: "I made a google search and searched on viruslist but there's not entry with that name... Only if I google gamesetup.exe some Fujack variants...

BTW maybe KIS 2009 was in automatic mode?" }-
i checked with my 2009,the heuristic is set for light.and thatis why the false positve is happend.
i guess kis2009 is heuristic 1st line defense,and proactive defense 2nd line defense.and the monitor is weaken.and why the proactive is 2nd?i think the heuristic is strong enough.and the proactive defense is depend on the single rule to judge if it is good or not.
does it so?tell me

emperordarius
August 7th, 2008, 09:54 AM
-{ Quote: "i checked with my 2009,the heuristic is set for light.and thatis why the false positve is happend.
i guess kis2009 is heuristic 1st line defense,and proactive defense 2nd line defense.and the monitor is weaken.and why the proactive is 2nd?i think the heuristic is strong enough.and the proactive defense is depend on the single rule to judge if it is good or not.
does it so?tell me" }-

Actually the defense is like: Signature>>Heuristic>>HIPS>>Proactive Protection
The heuristic detection is strong indeed but heuristics are nowadays easily bypassed, while behavioural detections(provided by HIPS and Proactive Protection) are not.

You are talking about v 2009, right? So was it installed in Automatic or Interactive mode?

nasdaqms
August 7th, 2008, 10:11 AM
-{ Quote: "Actually the defense is like: Signature>>Heuristic>>HIPS>>Proactive Protection
The heuristic detection is strong indeed but heuristics are nowadays easily bypassed, while behavioural detections(provided by HIPS and Proactive Protection) are not.

You are talking about v 2009, right? So was it installed in Automatic or Interactive mode?" }-
certainly..interactive ...

emperordarius
August 7th, 2008, 10:31 AM
-{ Quote: "certainly..interactive ..." }-

Then I guess it was light heuristic's fault...Anyway these things can happen, the important thing is that the infection was removed.;D

nasdaqms
August 7th, 2008, 10:40 AM
-{ Quote: "Then I guess it was light heuristic's fault...Anyway these things can happen, the important thing is that the infection was removed.;D" }-
if i found the related thing again. i will leave it to you ..ok
?
;D

emperordarius
August 7th, 2008, 11:46 AM
-{ Quote: "if i found the related thing again. i will leave it to you ..ok
?
;D" }-

Sure, after 2 weeks, back from holidays8)