Kaspersky Internet Security Suite 5.0

Kaspersky ships a personal security software suite known as Kaspersky Internet Security Suite 5.0. This package includes various personal security software programs, including a firewall and anti-virus software.

Kaspersky's anti-virus software is the primary focus of this article. Like many other anti-virus software, Kaspersky Anti-Virus provides both manual and real-time scanning capabilities.

Kaspersky's anti-virus system (KAV) employs various unsafe techniques in its kernel mode components. Some of these techniques may lead to a compromise of system security.

• The Problems
  • Patching system services at runtime
  • Improper Validation of User-mode Pointers
  • Hiding Threads from User-mode
  • Improper Validation of Kernel Object Types
  • Patching non-exported, non-system-service kernel functions
  • Allowing User-mode Code to Access Kernel Memory
  
  
• The Solution