Kaspersky Anti-Virus 6.0 for Windows Workstations (all builds)
The proactive defense module was not embedded In the Kaspersky Lab previous versions.
This module protects from Malware whose signatures are not added in the antivirus database yet but who have already activated themselves in the system. Proactive defense controls the following activities:
Dangerous Behaviour: analyzes behaviour of all processes launched in the system, saves the changes in the registry and in the file system. The module warns the user of the set of specific actions in aggregate.
Launching Internet Browser with parameters: intercepts hidden launching of browser with parameters.
Intrusion into another process: intercepts all possible program code intrusions into another process.
Hidden process (rootkit): detects most modern rootkit modifications which can hide from the user files, folders and registry keys, launched programs, system services, drivers, network connections and network activity.
Window Hook: intercepts an intrusion attempt of dynamic library (*.dll) into all active system processes.
Suspicious values in registry: intercepts an attempt to create “hidden” keys in the registry, that are not detected by usual programs (of the regestry editor type)
Suspicious system activities: detects great number of changes in the system. These changes indicate presence of active malicious code.
Rollback changes on detecting system dangerous activity: this technology restores system after malicious actions and rolls it back to the prior infected condition.
The following modules of application activity analyzer were added for Kaspersky Anti-Virus 6.0/ MP1/MP2, Kaspersky Internet Security 6.0 /MP1/MP2 and Kaspersky Anti-Virus 6.0 for Windows Workstations MP2:
Keylogger detection: this activity is used in attempts by malicious programs to read passwords and other confidential information which you have entered using your keyboard.
Microsoft Windows Task Manager protection: Kaspersky Anti-Virus protects Task Manager from malicious modules injecting themselves into it when aimed at blocking Task Manager operation.
Knowledge base
Product Info
System requirements
41 
2009 Jun 02 21:22
