IT Security

9

Cu ceva timp in urma anuntam aparitia KIS 2012 beta. Astfel ca m-am decis sa prezint produsul si sa vad cat de bine protejeaza acest software de securitate un PC.

Instalarea decurge usor iar la sfarsit activarea trial genereaza un Activation Code valabil 90 de zile.

Interfata si functii

Programul are o interfata noua, moderna si intuitiva care usureaza folosirea de catre orice utilizator a functiilor inglobate in Kaspersky:

• Scan
• Update
• Quarantine
• Tools
• Virtual Keyboard
• Applications Activity
• Safe Run for Applications
• Network Monitor
• Digital Identity Protection
• Parental Control
• Safe Run for Website

Am ingrosat Safe Run for Applications. Aceasta noua facilitate este un SandBox avansat in care puteti executa fisiere suspecte sau de-a dreptul virusate intr-un mediu sigur. Computerul dumneavoastra va ramane protejat intrucat fisierele sunt rulate intr-un computer virtual, separat de cel real.

Programul este avid dupa memoria RAM dar si dupa resursele procesorului dupa cum puteti observa mai jos. Asta in conditiile in care am oprit toate scuturile pentru a putea copia linistit cativa GB de virusi.

Setarile pot fi accesate din coltul din dreapta sus si sunt usor customizabile pentru fiecare modul de protectie in parte. Nu are sens sa insistam aici. Setarile din fabrica sunt potrivite pentru oricine.

TEST

Mai jos am pregatit un test al protectiei oferite de Kaspersky Internet Security 2012.
Testul cuprinde doua parti:

• scanare la cerere asupra unui set de 2123 de virusi (scuturi oprite)
• executare fisiere nedetectate (scuturi pornite si setate pe High)

Virusi ramasi: 86 => rata detectiei= (2123-86)/2123≈95.95%
De notat viteza mica de scanare si incetinirea sistemului pe parcursul scanarii.

Am inceput sa execut pe rand cei 86 de virusi, Kaspersky blocand doar cateva dintre executii. Aproape de final m-am pomenit cu BSOD iar PC ramanea blocat in faza de dinainte de Log-in.
Am restartat PC in Safe Mode with Networking, am instalat Malwarebytes' Anti-Malware si am scanat sistemul complet.
Rezultat:

Registry Keys Infected:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\SETUP.EXE (Adware.Agent) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\The Time Master (Adware.Agent) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\°¢Ó¶¨Ê±×Ô¶¯¹Ø»úÆ÷ (Adware.Agent) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\maxclicks12 (Adware.Agent) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\avp.exe (Security.Hijack) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\ialdnwxf (Malware.Trace) -> Quarantined and deleted successfully.

Registry Values Infected:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\wuaclt.exe (Trojan.Qhost) -> Value: wuaclt.exe -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\Microsoft (Trojan.Agent) -> Value: Microsoft -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\wmplayer (Trojan.Downloader) -> Value: wmplayer -> Quarantined and deleted successfully.

Files Infected:
c:\WINDOWS\video_tarjeta.com (Trojan.Qhost) -> Quarantined and deleted successfully.
c:\WINDOWS\microsoft\windefender.exe (Trojan.Agent) -> Quarantined and deleted successfully.
c:\documents and settings\administrator\application data\eose.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
c:\documents and settings\administrator\local settings\Temp\infotab__if96.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
c:\documents and settings\administrator\local settings\Temp\8B.tmp\b2e.exe (Trojan.KillAV) -> Quarantined and deleted successfully.
c:\documents and settings\administrator\local settings\Temp\nflusw\setup.exe (Adware.Agent) -> Quarantined and deleted successfully.
c:\documents and settings\administrator\local settings\Temp\RarSFX10\AdobeARM.exe (Trojan.Agent) -> Quarantined and deleted successfully.
c:\documents and settings\administrator\local settings\Temp\RarSFX10\jusched.exe (Trojan.Agent) -> Quarantined and deleted successfully.
c:\documents and settings\administrator\local settings\Temp\RarSFX10\Pack.exe (Trojan.Agent) -> Quarantined and deleted successfully.
c:\documents and settings\administrator\local settings\Temp\RarSFX10\realsched.exe (Trojan.Agent) -> Quarantined and deleted successfully.
c:\documents and settings\administrator\local settings\Temp\RarSFX10\unlockerassistant.exe (Trojan.Agent) -> Quarantined and deleted successfully.
c:\program files\the time master\Keymaker.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
c:\program files\the time master\uninst.exe (Adware.Agent) -> Quarantined and deleted successfully.
c:\program files\°¢óⶨê±×ô¶¯¹ø»úæ÷\uninst.exe (Adware.Agent) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\SouGoo.ime (Malware.Gen) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\xaudio2_3.dll (Spyware.OnlineGames) -> Quarantined and deleted successfully.
c:\WINDOWS\Tasks\systems_nt.job (Malware.Trace) -> Quarantined and deleted successfully.

Concluzii:
Kaspersky Internet Security 2012 este un produs complet care ofera protectie si incredere in navigarea pe Internet. Rata mare a detectiei compenseaza minusurile lasate de protectia proactiva iar atentia utilizatorului poate face diferenta.
Consumul mare al memoriei este un dezavantaj; solutia de securitate trebuie sa ramana un program auxiliar activitatii unui PC, NU sa ocupe atentia si resursele sale. Cei care au memorie RAM se pot considera fericiti daca aleg acest software de protectie.