Kaspersky Anti-Virus 7.0 Version 7.0.1.321 (MP1)

Improvements:

1. Feature added to check for and download the installer package for the latest version from the Kaspersky Lab web servers when the program installation is started.
2. Data processing speed increasing and proxy server resource consumption reduced.
3. Support added for IP protocol version 6 (IPv6).
4. Option added for skipping trusted remote administration programs (for example, RAdmin) from Kaspersky Anti-Virus self-defense.
5. Improvements made to interface of the program activation wizard.
6. Feature added for testing network connections and updating the program when the connection is restored.
7. Program behavior when changing system time changed: the program continues to run.
8. Support added for Arabic-script languages.
9. Proactive Defense has a new mechanism for detecting next-generation keyloggers.
10. Extended capability for intercepting driver downloads (LoadAndCallImage).
11. Improved program self-defense mechanism for automatic selection of actions in notifications on dangerous object detection.

Vulnerabilities corrected:

The following low risk vulnerabilities were patched in MP1 for Kaspersky Anti-Virus 7.0

• KLV07-11 Kaspersky Anti-Virus License Protection Vulnerability

  Kaspersky Anti-Virus license protection vulnerability could have been used to compromise machines if the date of the computer was set to that of an earlier date than that of the license period. Malicious software could have used this method to disable the product by simply changing the date a year back.

• KLV07-12 Klif.sys driver - NtCreateSection param error vulnerability

  Driver klif.sys incorrectly processed NtCreateSection parameters which causes system failure. This piece of code is now removed from Kaspersky Anti-virus

• KLV07-13 Klif - Haxdoors of the Kaspersky Antivirus 6/7

  Malicious code executed locally caused a system failure due to unsafe code in klif.sys driver. This code has now been removed.

All three of the vulnerabilities listed above were low risk, which means that users need to manually launch the malicious code before computers are at risk. In any case, it is recommend that all users download and install MP1 to patch these vulnerabilities.