"Cannot load library for language 'JScript' Path: 'c:\program files\symantec shared\script blocking\scrauth.dll' Please contact Kaspersky Lab. for the solution" message. What to do?
This problem arises due to the incorrect Symantec Anti-Virus uninstallation. This string is left after Norton Anti-Virus uninstall. What we can recommend you to do:
1. Load regedit and find key: Hkey_classes_root\JavaScript\CLSID
Remember its value, for example: {f414c260-6ac0-11cf-b6d1-00aa00bbbb58}
2. Find this ID in system registry, for example: Hkey_classes_root\CLSID\{f414c260-6ac0-11cf-b6d1-00aa00bbbb58}\inprocServer32
After KAV installation (default) variable under this location must point to KAV Script Checker path, e.g:
(default) REG_SZ C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus Personal Pro\avpscrch.dll Remove OriginalDll REG_SZ value c:\PROGRAM FILES\COMMON FILES\SYMANTEC SHARED\SCRIPT BLOCKING\SCRAUTH.DLL And reset value to the path to original system jscript.dll, e.g. OriginalDll REG_SZ C:\WINDOWS\System32\jscript.dll
If this instruction seems too complicated for you, please contact Symantec support service.
Problems with Kaspersky AV Mail Checker.
1. After installation of Kaspersky Anti-Virus when I go to menu Start -> Programs -> Kaspersky AV, I can not run Kaspersky Mail Checker component, a text file is opened instead. What can be done about it?
Mail Checker is integrated with Microsoft Outlook 98/2000/XP after the installation it can be set up in MS Outlook drop down menu Tools -> Options.
2. After the installation of Kaspersky Anti-Virus there is no component Kaspersky AV Mail Checker in MS Outlook drop down menu Tools -> Options. How to correct this?
Make sure you are using Microsoft Outlook 98/2000/XP. (Presently Kaspersky AV Mail Checker is not compatible with programs Outlook Express and TheBat!)
First of all try to reisntall Mail Checker component:
Important: During the installation MS Outlook must be closed!
Go to Start -> Settings -> Control Panel -> Add and remove programs -> Kaspersky AV.
Press "change/remove".
In setup Wizard window choose "modify" installation, uncheck "Kaspersky AV Mail Checker" and finish the installation.
Restart your computer.
Again enter Control Panel and install Mail Checker by checking the corresponding check-box.
Restart your PC.
Run MS Outlook and check if bookmark Kaspersky AV Mail Checker is present in menu Tools -> Options.
3. This bookmark is not present, what else can I do?
Try to register Kaspersky AV Mail Checker library manually. Go to menu Start -> Run and here type the following:
C:\Windows\System32\regsvr32.exe "C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus Personal Pro\AVP MailChecker.dll"
The file path to regsvr32.exe utility can be different, for example C:\Windows\System\ in Windows 98.
In the same way check accuracy of the path to AVP MailChecker.dll file
Press Enter.
A message with appear that has "...succeeded" in the end, meaning that neccessary library was successfully registered.
Press "OK"
Open MS Outlook and check that bookmark Kaspersky AV Mail Checker appeared.
In case of error please make sure that you correctly indicated path to regsvr32.exe utility and AVP MailChecker.dll library
How do I introduce a new key file to Kaspersky AV without reinstallation?
To add a new key file (*.key) you need to copy it to folder Program Files\Common Files\KAV (AVP) Shared Files\ and restart your computer. (Or into Program Files\Kaspersky Lab\Kaspersky AV Lite\ for KAV Lite version 4.5)
On Microsoft site (Knowledge Base Article - 294756) it is mentioned that you may be unable to browse your network with KAV installed. Is it true?
Kaspersky Labs released version 4.0.4.0 of KasperskyR Anti-Virus for Windows workstations in March 2002. The default settings for Kaspersky Anti-Virus Monitor were set to monitor both the local machine and network connections. This caused problems for users working on machines running MS Windows XP Home and XP Professional. Specifically, problems arose with speed during active browsing on local networks where significant amounts of data were open for shared use.
We recommend that users who have version 4.0.4.0 installed re-set KasperskyR Anti-Virus Monitor and turn off network monitoring (Objects; Network). Default settings for versions later than 4.0.4.0 have been changed to exclude network connection monitoring.
In addition to this, Kaspersky Labs released a patch within two weeks after Microsoft identified the issue, which solved the problem with slow data exchange in all versions later than 4.0.4.0 (including current version 4.5). Nevertheless, Microsoft Knowledge Base Article No. 294756, which identified the issue about a year and a half ago, has yet to be revised.
I can not uninstall Kaspersky Anti-Virus via Control Panel -> Add and remove programs or/and after uninstallation of the old version and during installation of the new version there is a message 'Another version of Kaspersky Anti-Virus is installed, can not continue with the installation'
Please send a request to Technical Support Service at the address support@kaspersky.com. Indicate your registration number or attach your key file and you will be sent a special utility, which you will need to run to remove possible remaining files of the programs.
My compute is infected with virus I-Worm.Swen. What can I do?
You have to do the following actions:
1) If you did not delete any infected files start "CLRAV /rpt /s". In this case the utillity will delete all infected files.
2) If any infected files were deleted manually and you can not start any of executable files take the following actions:
for NT OS:
a) rename clrav.com to clrav.cmd and start it via start/run,
b) start "CLRAV /rpt /s" again.
for 9X OS:
a) start any of *.exe or *.com files and remember a name of the inquired file. Copy clrav.com to the link wich was asked when starting executable file.
b) infect your system again with I-worm.swen and run clrav (not recommended) I remind you that you would have to do all these actions only if the infected files were deleted manually.
For all OS: If you get the same error message while starting clrav.com you have to rename clrav.com to tit.com and follow the all the instructions as for clrav.com.
How to remove I-Worm.Klez
Every PC must be disconnected from LAN and cured with the help of clrav.com utility (you can download it from ftp.avp.ru/utils/ ) and then scan with Kaspersky AV.
1) disconnect the infected PC from the local network (if there's one)
2) download clrav.com
3) run clrav.com file If the program says "nothing to clean" - run clrav.com from a command line with parameter /s (this will force the program to scan all command files)
4) re-boot your PC in Safe Mode At the start-up of the computer press periodically F-8 untill a menu shows up where you can select Safe Mode
5) run clrav.com again
6) reinstall the anti-virus package and update the anti-virus database Make sure your key file (xxxxxxx.key) is stored in a safe place, so that you are able to use it during the installation. If you happen not to have your program installation file you may freely download it from ftp://ftp.avp.ru/products/release/ and install with your digital key file.
7) run anti-virus scanning and check all the hard drives
How to remove a virus in mail?
To get rid of viruses in your mailboxes you should do the following:
- temporarily disable your Monitor;
- delete the infected message(s) from all mailboxes manually using your mail program;
- compact all folders (If Outlook Express: menu File -> Folder -> Compact all folders; if TheBat!: menu Folder -> Compact folders) - enable Monitor again.
A virus is constantly found and not deleted in folder Program files\Kaspersky Lab\Kaspersky Anti-Virus\Infected\
You need to delete files in this folder manually. In folder Infected are stored back-up copies of infected files, anti-virus program can not delete files in this folder. Before you proceed to deletion of the files, unload KAV Monitor.
A virus is constantly found and not deleted in folder Program files\Kaspersky Lab\Kaspersky Anti-Virus\Infected\
You need to delete files in this folder manually. In folder Infected are stored back-up copies of infected files, anti-virus program can not delete files in this folder. Before you proceed to deletion of the files, unload KAV Monitor.
How to renew version of Kaspersky Anti-Virus?
You need: In order to update your version of Kaspersky Anti-Virus please follow the steps listed below:
1. Make a back-up copy of your key file on a clean formatted floppy disk. (this file is located in Program Files\Common Files\KAV (AVP) Shared files and the name of this file is õõõõõõõõ.key where xx is a combination of digits and letters).
2. Un-install your current version. Open Start->Settings->Control Panel->Add/Remove programs, select Kaspersky Anti-Virus and press change/remove button. In the dialog window select "Remove" and confirm by pressing Ok button. Reboot your system after completing this step.
3. Install new version from the installation package following the installation wizard. During the installation you'll be asked for a key file. Use your previously saved key file on the floppy. Or, skip the key file installation by pressing "Next" button and install the key file manually by copying this file manually from your floppy to the destination folder Program Files\Common Files\KAV Shared Files\
How to fight Win32.FunLove virus?
You can cure your PC with the help of special utility KL Anti-FunLove version 3.1.2 (can be downloaded from our site ftp://ftp.kaspersky.com/utils) and then protect your PC from further infection with the help of KAV Monitor. Kindly bear in mind that this utility does not work in background scanning mode, i.e. it will not protect against further infection, though it scans memory and can scan hard drives on demand or in case memory is infected.
Recommended steps to cure computers in the network:
1) infected PC must be disconnected from the network.
2) run KL Anti-FunLove utility.
3) on the screen you will see a utility window with two buttons "Cancel" and "Deinstall" (deinstall - if you already have some version of this utility) or "Install"
4) In case if "Deinstall" button is active, when you press this button the utility will deinstall old version and restart the compter. After a restart you will need to run the utility one more time. In this case it will show "Install" button.
5) if you have button "Install" active, the utility will install onto your computer necessary files, register them and restart the PC.
6) When computer started the utility will scan memory, hard drives (the scanning process and its result will be visible on the screen).
7) after computer is successfully cured it is recommended to restart the system. 8) after restart you will have to reinstall Kaspersky Anti-Virus.
9) Enable KAV Monitor on the computer and connect it to the network. After this you can cure another computer and this PC will be protected by KAV Monitor.
How to restart my PC in Safe Mofe?
To start the computer in safe mode You should print these instructions before continuing. They will not be available after you shut your computer down in step 2.
1. Click Start, click Shut Down, and then, in the drop-down list, click Shut down.
2. In the Shut Down Windows dialog box, click Restart, and then click OK. If you have a dual boot or multiple-boot system, proceed to step
4. If you use only one operating system go to step 3.
3. Press F8 right after your Monitor goes black. Press it periodically until you see a menu (white letters on black screen) and choose Safe Mode.
4. When you see the message "Please select the operating system to start", press F8. Use the arrow keys to highlight the appropriate safe mode option, and then press ENTER. If you have a dual-boot or multiple-boot system, choose the installation that you need to access using the arrow keys, and then press ENTER.
What is a key file?
- Key file is your personal 'key', where is stored all official information, needed for work of Kaspersky Anti-Virus, namely:
- Information about the resaller of this version (name of the company, address, phone numbers)
- Support information (who provides support and where you can get it);
- Key issue date;
- License name and number;
- Table of different components functionality;
- Given license life time.
- Is the key file is not installed anti -virus will work in DEMO mode.
How to check efficiency of Kaspersky Anti-Virus
Download a test virus eicar.com (ftp://ftp.kaspersky.com/eicar/) and save it somewhere on the hard drive. If anti-virus Monitor works you will get an alert message on the screen.
What is a test virus Eicar, what is it for and where can I get it to check efficienct of Kaspersky Anti-Virus?
Under "Eicar-test-file" we detect eicar.com file (68Kb) which is not a virus itself, it only displays a text message and finishes its work.
Some time ago several Antivirus developers added a detection of such files which are not viruses but which are detected as viruses in their Antivirus databases. It has been caused by the interest on the part of users who have no "alive" viruses, but wish to look, how the antivirus reacts to viruses, what messages it displays and also what actions are suggested to make to the user. After a while developers of Anti-virus programs have decided to develop the uniform standard on similar "virus simulator", and then they came to a conclusion, that this program should consist only of text messages. It is necessary that the most curious users could create it independently (for example, under dictation by phone or having copied from the documentation).
In result this COM-file looks like: X5O!P%@AP[4\PZX54(P^)7CC)7}$EICAR-STANDARD-ANTIVIRUS-TEST-FILE!$H+H">X5O!P%@AP[4\PZX54(P^)7CC)7}$EICAR-STANDARD-ANTIVIRUS-TEST-FILE!$H+H*
If to cut this string out it a line or to type in console "COPY CON TEST.COM" the received COM-file at start displays the following message:
EICAR-STANDARD-ANTIVIRUS-TEST-FILE!
Then returns management to OS - and does nothiing more, but many anti-virus programs will detect it as "EICAR test file".
Kaspersky Antivirus detects this file only with the base EICAR.AVC. This record was moved to a separate base at users requests.
You can download Eicar test file here: ftp.kaspersky.com/eicar/
How to make a screen-shot (screen-dump)?
When you see a situation which you would like to 'photograph', press once 'Print Screen' button on the keyboard. You can find this button near 'Scroll Lock' and 'Pause' buttons.
2. Click Start -> Programs -> Accessories -> Paint (Brush)
3. In menu 'Edit' press 'Paste'.
4. In menu 'File' choose 'Save as'. In 'name of the file' field enter the name; in 'file type' if possible choose JPEG (*.jpg, *.jpeg). In case the only option is *.bmp you will have to compress the file with an archiver, such as WinZip or WinRar, if you have a slow (modem) Internet connection.
5. Find the saved file, right-click on it and choose "send to" -> "mail recipient"
6. In the "to" field type "support@kaspersky.com" and press "send".
During work a messages pops up 'csrss.exe process tries to terminate anti-virus Monitor service'. What does this mean?
The csrss.exe is a standard program of MS Windows. One function of it is termination of applications and services. Most likely KAV Monitor was busy at the moment when system was sending request to it, therefore system realized this behavior as hanged and was going to terminate the KAV Monitor service as well. It is a known but not hazardous occurrence. It is a characteristic property of system. Our developers are trying to avoid this occurrence.
I have Lovesan virus, my PC constantly reboots, what can I do?
All necessary instructions you can find here: http://www.kaspersky.ru/news.html?id=1319733
Why can not I enter Control Center or run Monitor when several users work in 'switch user' mode in Windows XP?
Control Center and Monitor in current version are not fully compatible with 'switch user' mode in Windows XP: when switching users Control Center and Monitor continue to work and even successfully find virus for new user, but there is not access to GUI (graphical user interface), e.g. there are no icons in system tray and all dialog windows are shown on deactivated user desktop.
Program Corel Draw gives an error message when opening project. How to solve this problem?
This problem can be solved by excluding from monitoring by anti-virus Monitor a folder where Corel Draw stores its TMP files (you can see a path to this catalogue in file corelapp.ini).
There are problems with connected network drives: their icons in My Computer are marked with cross and there is no possibility to save a file to a network drive.
To solve this problem it is enough to change user account under which Kaspersky Monitor service is started from local system to a named user with the rights to do network operations.
When using Large disks (more than 20 Gb) with function 'scan sectors' enabled in Monitor there can be a significant decrease in system performance.
It is recommended in this case to uncheck in Monitor's properties this option 'scan sectors' and scan sectors with the help of anti-virus Scanner.
Virus is found in C:\_RESTORE and can not be deleted.
Ñ:\_RESTORE folder is a peculiarity of Windows Me. You need to turn off System Restore. You can do it the following way: right-click on 'My computer' and choose 'properties'. On one of the tabs press 'File System'. In the appeared window go to tab 'Troubleshooting' and remove a checkmark in the last option 'System Restore'. Close all windows and restart your system. After this delete these infected files. This is not always possible. If you fail to do this, unfortunately it will not be possible to delete the files at all (only operating system reinstallation will help) - it is peculiarity of Windows Me. Anyway viruses will not spred from within this folder. There is no danger. For more information please refer to Windows Me documentation. This folder is used for emergency back-up in case of a failure. Any access is restricted for all applications. After some time files will be overwritten in this folder automatically and the virus will be gone.
Trojan program can not be deleted in normal way.
Sometimes it is not possible to remove a Trojan program by means of Kaspersky Anti-Virus or manually, because the file is locked by the system and can not be deleted. There are two variants how you could solve this problem:
1. Restart your computer in Safe Mode and run scanning to delete the virus.
2. If you are using Kaspersky Anti-Virus Personal/Personal Pro you can create KAV Rescue Disks, boot your PC from them, check hard drive and delete the virus.
What files contain reports of Scanner and Monitor?
Scanner's report file is named avp32.rpt (avp32.rep, report.txt). Monitor's - avpm.rpt