Kaspersky™ Anti-Virus  Personal

Version 4.5.0.49   Dated: 11.09.2003

Improvements:

  1. Improved performance of on-access scanning.

  2. Program deadlocks are excluded

  3. The Help files in all components of Kaspersky Anti-Virus have been updated.

Changes:

  1. The Kaspersky Anti-Virus Mail Chacker functionality was changed. We have turned off scanning of message bodies. That was done because of many complaints to changing mail contents during the check. Provided that recent versions of Microsoft Outlook perform automatic blocking of scripts we turned off checking of mail bodies. We will turn on the scanning of message bodies in the version 5.0 of Kaspersky Anti-Virus.

    2.

    There are some changes in MailChecker component behavior and settings (in order to fix some problems with Outlook XP in average and highly loaded environments). In those cases we are not able to modify messages and attachments. To solve these issues and some others we changed MC logic to the following:

    1. All incoming messages are scanned
    2. If they are clean, the message is delivered to the user
    3. In case of detection the program determines whether it can modify the message (for instance it could be impossible to do so if the traffic is high) and whether the virus could be disinfected by AV database. Depending on those factors the program performs the following:
    •  If the message can be modified and the virus could be disinfected, we perform disinfection and deliver disinfected content
    • If the message can be modified, but the virus couldn't be disinfected (e.g.: trojan), we remove infected parts of message (but not entire message)
    • If the message cannot be modified, we remove the entire message.

    The same applies to the outcoming messages with one exception. Should the program detect that the user attempts to send infected message, it shows popup message to inform user that the computer is infected. The user can turn off the notification using settings dialog of KAV MailChecker. For incoming messages there are no popup windows due to issues with Preview functions of Outlook.

    To implement such behavior the settings dialog was reworked. Now there are only two options available:

    • Enable Protection - enables scanning and curing of both incoming and outcoming mails
    • Popup Alert Message box upon detection - enables notification popup window for outcoming messages

    Advanced Options have been disabled, as now there is unified approach to handling infected messages.

Fixes: The following vulnerabilities in the software components have been eliminated:

Kaspersky™ Anti-Virus Scanner    Version 4.5.0.49

  1. Incorrect disinfecting (2 passages) of the infected TORAJA-B.XS1 and TORAJA-B.XS2 files.

Kaspersky™ Anti-Virus Monitor    Version 4.5.0.49

  1. Modified settings of the Monitor program started from Control Center come into effect within several minutes (approx. 2 min) after the corresponding command was applied. During this time period the Monitor program may ignore calls to infected files.

  2. The anti-virus doesn’t overwrite Boot-sector (MBR on the hard drive) after it has been disinfected. The report file doesn’t contain any data about this operation.

  3. AutoCad works improperly under Win9x when Monitor works.

  4. The problem with the long path and system names.

  5. The problem with StrongDisk Pro 3.0.

  6. Windows Explorer (kernel 32) is aborted running on Windows 9x operating system. While working or after restarting Windows 9x there is sometimes the abnormally termination of Windows Explorer, if you run Kaspersky Anti-Virus on Windows 9x operating system.

Kaspersky™ Anti-Virus Updater    Version 4.5.0.49

  1. When Updater starts alone the wrong message about incorrect program operating occurs.

Kaspersky™ Anti-Virus Mail Checker    Version 4.5.0.49

  1. If the message had plaintext body and didn't have corresponding Html body then erroneous situation occurred. As a result the program corrupted message body.

  2. Error occured when reading embedded message.

Known issues:

  1. A leak of OS handles on WinNT, Win2K, WinXP. On Windows NT, Windows 2000 and XP: On large collections of infected files there is a leak of OS handles. You should reboot after the desinfection.

  2. The problems with Monitor starting on Win95. For Windows 95 users only: On Windows 95 only there are some problems (very long start of monitor component, system sometimes hangs for several minutes after disinfection of a virus).

  3. Issue with stopping scanner running to a folder with many infected files. If you have started scanning of a folder with very large number of infected files you probably will be not able to stop it immediately. If you see disinfection dialog, please do not click on stop scanning while virus dialog is open.