Norman SandBox technology for detection of new and unknown viruses, worms and trojans
Norman SandBox technology detects new and unknown computer viruses, including trojans and worms. Today, an email worm can infect tens of thousands of workstations in a matter of seconds. The antivirus vendors are expected to find the cure, update the virus definition files, and distribute these to their customers immediately. The need for speed is paramount. Norman SandBox is a virtual world where everything is emulated. An emulator provides an 
environment where possible virus infected executables “run” just as they would do on a real system. When execution stops, the SandBox is analyzed for changes. The SandBox is particularly tuned to find new email–, network– and peer–to–peer worms.
Real–time blocking of spyware and adware
The real time monitor goes beyond what other security suites offer by adding a proactive layer of protection to your system. It runs silently in the background, watching for malware/parasites that try to install on or modify your system.
While the real–time monitor detects and cleans your system from known malware and advertising parasites, our real–time monitor goes even further by catching these programs before they can integrate into your system, acing like a “spyware” firewall.
You can lock the start–up sections of your registry, block possible and actual browser hijack attempts, block suspicious processes, lock executable file associations, block malicious cookies, block pop–ups, and using the all new CSI technology it can protect you from unknown variants as well
On–access scanning
On–access scanning involves constant monitoring of the file system on the workstations. For antivirus software, it is imperative to detect and block malware before it is activated. Whenever a file is accessed in a read/write operation, or a program is executed, the on–access scanner is notified and scans the file automatically. If malware is found the following options are available:
- clean
- remove
- warn only
- ignore
Email and newsgroup scanning
Norman Virus Control scans all in– and outgoing emails as well as postings to and from newsgroups to ensure that they do not contain malware of any kind. In addition, attachments can be blocked based on file extension or specific file name to further increase security. The email scanning feature works with most email programs currently available.
Norman Internet Protection (NIP) scans all traffic on ports for POP3, SMTP and NNTP. NIP minimizes the threat from both new and existing email worms with both the best in virus scanning and plain attachment blocking. We recommended that Norman SandBox is enabled to increase protection against known and unknown malware.
Connection security to prevent unauthorised access to and from your computer
Norman Internet Control closely monitors every application that attempts a connection to the Internet/network. Each application is automatically assigned its own «guard» for monitoring. Applications that do not use the Internet/network are free from any kind of monitoring. No longer will you connect to the Internet/network and have to worry that some applications in your system will send out information without your knowledge.
Trojans that seek to control your system from an incoming connection will be detected, as will scripts that attempt to send emails using your name. You can control who can view and access your shared folders and even prevent others from detecting your computer’s presence on the network.
Parental Control module preventing access to web sites with inappropriate content
This feature allows parents/adults to set up user accounts with different access rights to web sites. Using the parental control module, parents can ensure that children are not visiting sites containing inappropriate content.
kaspersky.blogspace.cc
