AVG 8.5 INTERNET SECURITY - V 85.8, 8.5 INTERNET SECURITY User Manual

Page 1
1
Document revision 85.8 (26.10.2009)
Copyright AVG Technologies CZ, s.r.o. All rights reserved. All other trademarks are the property of their respective owners.
This product uses RSA Data Security, Inc. MD5 Message-Digest Algorithm, Copyright (C) 1991-2, RSA Data Security, Inc. Created 1991. This product uses code from C-SaCzech library, Copyright (c) 1996-2001 Jaromir Dolecek (dolecek@ics.muni.cz). This product uses compression library zlib, Copyright (c) 1995-2002 Jean-loup Gailly and Mark Adler. This product uses compression library libbzip2, Copyright (c) 1996-2002 Julian R. Seward.
AVG 8.5 Internet Security
User Manual
Page 2
2
Contents
........................................................................................................................ 8
1. Introduction
........................................................................................................................ 9
2. AVG Installation Requirements
.......................................................................................................... 9
2.1 Operation Systems Supported
.......................................................................................................... 9
2.2 Minimum Hardware Requirements
........................................................................................................................ 10
3. AVG Installation Options
........................................................................................................................ 11
4. AVG Download Manager
.......................................................................................................... 11
4.1 Language Selection
.......................................................................................................... 11
4.2 Connectivity Check
.......................................................................................................... 13
4.3 Proxy Settings
.......................................................................................................... 14
4.4 Select License Type
.......................................................................................................... 15
4.5 Download Files to Install
........................................................................................................................ 16
5. AVG Installation Process
.......................................................................................................... 16
5.1 Installation Launch
.......................................................................................................... 17
5.2 License Agreement
.......................................................................................................... 18
5.3 Checking System Status
.......................................................................................................... 19
5.4 Select Installation Type
.......................................................................................................... 19
5.5 Activate your AVG License
.......................................................................................................... 21
5.6 Custom Installation - Destination Folder
.......................................................................................................... 22
5.7 Custom Installation - Component Selection
.......................................................................................................... 23
5.8 AVG Security Toolbar
.......................................................................................................... 24
5.9 Windows Firewall
.......................................................................................................... 25
5.10 Setup Summary
.......................................................................................................... 25
5.11 Application Termination
.......................................................................................................... 26
5.12 Installing AVG
.......................................................................................................... 27
5.13 Installation Complete
........................................................................................................................ 28
6. AVG First Run Wizard
.......................................................................................................... 28
6.1 Introducing the AVG First Run Wizard
.......................................................................................................... 29
6.2 Schedule regular scans and updates
.......................................................................................................... 29
6.3 Help us to identify new online threats
.......................................................................................................... 30
6.4 Configure the AVG Security Toolbar
.......................................................................................................... 31
6.5 Update AVG protection
Page 3
3
.......................................................................................................... 31
6.6 AVG Configuration finished
........................................................................................................................ 33
7. Firewall Configuration Wizard
.......................................................................................................... 33
7.1 Network Connection Options
.......................................................................................................... 34
7.2 Scan for Internet Applications
.......................................................................................................... 35
7.3 Select Profile to Activate
.......................................................................................................... 36
7.4 Configuration Review
........................................................................................................................ 37
8. After Installation
.......................................................................................................... 37
8.1 Product Registration
.......................................................................................................... 37
8.2 Access to User Interface
.......................................................................................................... 37
8.3 Scanning of the whole computer
.......................................................................................................... 37
8.4 Eicar Test
.......................................................................................................... 38
8.5 AVG Default Configuration
........................................................................................................................ 39
9. AVG User Interface
.......................................................................................................... 40
9.1 System Menu
.......................................................................................................... 40
9.1.1 File
.......................................................................................................... 40
9.1.2 Components
.......................................................................................................... 40
9.1.3 History
.......................................................................................................... 40
9.1.4 Tools
.......................................................................................................... 40
9.1.5 Help
.......................................................................................................... 43
9.2 Security Status Info
.......................................................................................................... 44
9.3 Quick Links
.......................................................................................................... 45
9.4 Components Overview
.......................................................................................................... 46
9.5 Statistics
.......................................................................................................... 47
9.6 System Tray Icon
........................................................................................................................ 48
10. AVG Components
.......................................................................................................... 48
10.1 Anti-Virus
.......................................................................................................... 48
10.1.1 Anti-Virus Principles
.......................................................................................................... 48
10.1.2 Anti-Virus Interface
.......................................................................................................... 50
10.2 Anti-Spyware
.......................................................................................................... 50
10.2.1 Anti-Spyware Principles
.......................................................................................................... 50
10.2.2 Anti-Spyware Interface
.......................................................................................................... 51
10.3 Anti-Spam
.......................................................................................................... 51
10.3.1 Anti-Spam Principles
.......................................................................................................... 51
10.3.2 Anti-Spam Interface
.......................................................................................................... 53
10.4 Anti-Rootkit
Page 4
4
.......................................................................................................... 53
10.4.1 Anti-Rootkit Principles
.......................................................................................................... 53
10.4.2 Anti-Rootkit Interface
.......................................................................................................... 54
10.5 System Tools
.......................................................................................................... 54
10.5.1 Processes
.......................................................................................................... 54
10.5.2 Network Connections
.......................................................................................................... 54
10.5.3 Autostart
.......................................................................................................... 54
10.5.4 Browser Extensions
.......................................................................................................... 54
10.5.5 LSP Viewer
.......................................................................................................... 60
10.6 Firewall
.......................................................................................................... 60
10.6.1 Firewall Principles
.......................................................................................................... 60
10.6.2 Firewall Profiles
.......................................................................................................... 60
10.6.3 Firewall Interface
.......................................................................................................... 64
10.7 E-mail Scanner
.......................................................................................................... 64
10.7.1 E-mail Scanner Principles
.......................................................................................................... 64
10.7.2 E-mail Scanner Interface
.......................................................................................................... 64
10.7.3 E-mail Scanner Detection
.......................................................................................................... 68
10.8 License
.......................................................................................................... 69
10.9 Link Scanner
.......................................................................................................... 69
10.9.1 Link Scanner Principles
.......................................................................................................... 69
10.9.2 Link Scanner Interface
.......................................................................................................... 69
10.9.3 AVG Search-Shield
.......................................................................................................... 69
10.9.4 AVG Active Surf-Shield
.......................................................................................................... 72
10.10 Web Shield
.......................................................................................................... 72
10.10.1 Web Shield Principles
.......................................................................................................... 72
10.10.2 Web Shield Interface
.......................................................................................................... 72
10.10.3 Web Shield Detection
.......................................................................................................... 76
10.11 Resident Shield
.......................................................................................................... 76
10.11.1 Resident Shield Principles
.......................................................................................................... 76
10.11.2 Resident Shield Interface
.......................................................................................................... 76
10.11.3 Resident Shield Detection
.......................................................................................................... 80
10.12 Update Manager
.......................................................................................................... 80
10.12.1 Update Manager Principles
.......................................................................................................... 80
10.12.2 Update Manager Interface
.......................................................................................................... 82
10.13 AVG Security Toolbar
........................................................................................................................ 85
11. AVG Advanced Settings
.......................................................................................................... 85
11.1 Appearance
.......................................................................................................... 87
11.2 Ignore Faulty Conditions
Page 5
5
.......................................................................................................... 89
11.3 Virus Vault
.......................................................................................................... 89
11.4 PUP Exceptions
.......................................................................................................... 91
11.5 Anti-Spam
.......................................................................................................... 91
11.5.1 Settings
.......................................................................................................... 91
11.5.2 Performance
.......................................................................................................... 91
11.5.3 RBL
.......................................................................................................... 91
11.5.4 Whitelist
.......................................................................................................... 91
11.5.5 Blacklist
.......................................................................................................... 91
11.5.6 Advanced Settings
.......................................................................................................... 103
11.6 Web Shield
.......................................................................................................... 103
11.6.1 Web Protection
.......................................................................................................... 103
11.6.2 Instant Messaging
.......................................................................................................... 106
11.7 Link Scanner
.......................................................................................................... 107
11.8 Scans
.......................................................................................................... 107
11.8.1 Scan Whole Computer
.......................................................................................................... 107
11.8.2 Shell Extension Scan
.......................................................................................................... 107
11.8.3 Scan Specific Files or Folders
.......................................................................................................... 107
11.8.4 Removable Device Scan
.......................................................................................................... 112
11.9 Schedules
.......................................................................................................... 112
11.9.1 Scheduled Scan
.......................................................................................................... 112
11.9.2 Virus Database Update Schedule
.......................................................................................................... 112
11.9.3 Program Update Schedule
.......................................................................................................... 112
11.9.4 Anti-Spam Update Schedule
.......................................................................................................... 122
11.10 E-mail Scanner
.......................................................................................................... 122
11.10.1 Certification
.......................................................................................................... 122
11.10.2 Mail Filtering
.......................................................................................................... 122
11.10.3 Logs and Results
.......................................................................................................... 122
11.10.4 Servers
.......................................................................................................... 131
11.11 Resident Shield
.......................................................................................................... 131
11.11.1 Advanced Settings
.......................................................................................................... 131
11.11.2 Exceptions
.......................................................................................................... 134
11.12 Anti-Rootkit
.......................................................................................................... 135
11.13 Update
.......................................................................................................... 135
11.13.1 Proxy
.......................................................................................................... 135
11.13.2 Dial-up
.......................................................................................................... 135
11.13.3 URL
.......................................................................................................... 135
11.13.4 Manage
.......................................................................................................... 141
11.14 Remote Administration
Page 6
6
........................................................................................................................ 143
12. Firewall Settings
.......................................................................................................... 143
12.1 General
.......................................................................................................... 144
12.2 Security
.......................................................................................................... 145
12.3 Areas and Adapters Profiles
.......................................................................................................... 146
12.4 Logs
.......................................................................................................... 147
12.5 Profiles
.......................................................................................................... 147
12.5.1 Profile Information
.......................................................................................................... 147
12.5.2 Defined Adapters
.......................................................................................................... 147
12.5.3 Defined Networks
.......................................................................................................... 147
12.5.4 Defined Services
.......................................................................................................... 147
12.5.5 Applications
.......................................................................................................... 147
12.5.6 System Services
........................................................................................................................ 163
13. AVG Scanning
.......................................................................................................... 163
13.1 Scanning Interface
.......................................................................................................... 164
13.2 Predefined Scans
.......................................................................................................... 164
13.2.1 Scan Whole Computer
.......................................................................................................... 164
13.2.2 Scan Specific Files or Folders
.......................................................................................................... 170
13.3 Scanning in Windows Explorer
.......................................................................................................... 171
13.4 Command Line Scanning
.......................................................................................................... 171
13.4.1 CMD Scan Parameters
.......................................................................................................... 174
13.5 Scan Scheduling
.......................................................................................................... 174
13.5.1 Schedule Settings
.......................................................................................................... 174
13.5.2 How to Scan
.......................................................................................................... 174
13.5.3 What to Scan
.......................................................................................................... 181
13.6 Scan Results Overview
.......................................................................................................... 183
13.7 Scan Results Details
.......................................................................................................... 183
13.7.1 Results Overview Tab
.......................................................................................................... 183
13.7.2 Infections Tab
.......................................................................................................... 183
13.7.3 Spyware Tab
.......................................................................................................... 183
13.7.4 Warnings Tab
.......................................................................................................... 183
13.7.5 Rootkits Tab
.......................................................................................................... 183
13.7.6 Information Tab
.......................................................................................................... 190
13.8 Virus Vault
........................................................................................................................ 192
14. AVG Updates
.......................................................................................................... 192
14.1 Update Levels
.......................................................................................................... 192
14.2 Update Types
Page 7
7
.......................................................................................................... 192
14.3 Update Process
........................................................................................................................ 194
15. Event History
........................................................................................................................ 195
16. FAQ and Technical Support
Page 8
8
1. Introduction
This user manual provides comprehensive documentation for AVG 8.5 Internet Security.
Congratulations on your purchase of AVG 8.5 Internet Security!
AVG 8.5 Internet Security is one of a range of award winning AVG products
designed to provide you with peace of mind and total security for your PC. As with all AVG products AVG 8.5 Internet Security has been completely re-designed, from the ground up, to deliver AVG’s renowned and accredited security protection in a new, more user friendly and efficient way.
Your new AVG 8.5 Internet Security product has a streamlined interface combined with more aggressive and faster scanning. More security features have been automated for your convenience, and new ‘intelligent’ user options have been included so that you can fit our security features to your way of life. No more compromising usability over security!
AVG has been designed and developed to protect your computing and networking activity. Enjoy the experience of full protection from AVG.
Page 9
9
2. AVG Installation Requirements
2.1. Operation Systems Supported
AVG 8.5 Internet Security is intended to protect workstations with the following
operating systems:
Windows 2000 Professional SP4 + Update Rollup 1
Windows XP Home Edition SP2
Windows XP Professional SP2
Windows XP Professional x64 Edition SP1
Windows Vista (x86 and x64, all editions)
(and possibly higher service packs for specific operating systems).
2.2. Minimum Hardware Requirements
Minimum hardware requirements for AVG 8.5 Internet Security are as follows:
Intel Pentium CPU 1,2 GHz
250 MB of free hard drive space (for installation purposes)
256 MB of RAM memory
Page 10
10
3. AVG Installation Options
AVG can be installed either from the installation file available on your installation CD, or you can download the latest installation file from the AVG website (www.avg.com).
Before you start installing AVG, we strongly recommend that you visit the
AVG website to check for a new installation file. This way you can be sure to
install the latest available version of AVG 8.5 Internet Security.
We recommend you to try out our new AVG Download Manager tool that will help you select the proper installation file!
During the installation process you will be asked for your license/sales number. Please make sure you have it available before starting the installation. The sales number can be found on the CD packaging. If you purchased your copy of AVG on-line, your license number will have been delivered to you via e-mail.
Page 11
11
4. AVG Download Manager
AVG Download Manager is a simple tool that helps you select the proper
installation file for your AVG product. Based on your input data, the manager will select the specific product, license type, desired components, and language. Finally, AVG Download Manager will go on to download and launch the appropriate
installation process.
Following please find a brief description of each single step you need to take within the AVG Download Manager:
4.1. Language Selection
In this first step of AVG Download Manager select the installation language from the roll-down menu. Note, that your language selection applies only to the installation process; after the installation you will be able to change the language directly from program settings. Then press the Next button to continue.
4.2. Connectivity Check
In the next step, AVG Download Manager will attempt to establish an Internet connection so that updates can be located. You will not be allowed to advance the download process until the AVG Download Manager is able to complete the connectivity test.
Page 12
12
If the test shows no connectivity, make sure you are really connected to
Internet. Then click the Retry button
If you are using a Proxy connection to the Internet, click the Proxy Settings
button to specify your proxy information:
Page 13
13
If the check has been successful, press the Next button to continue.
4.3. Proxy Settings
Page 14
14
If AVG Download Manager was not able to identify your Proxy settings you have to specify them manually. Please fill in the following data:
Server - enter a valid proxy server name or IP address
Port - provide the respective port number
Use proxy authentication - if your proxy server requires authentication, tick
this check box.
Select authentication - from the drop-down menu select the authentication
type. We strongly recommend that you keep to the default value (the proxy server will then automatically convey its requirements to you). However, if you are a skilled user, you can also choose Basic (required by some servers) or NTLM (required by all ISA Servers) option. Then, enter a valid Username and Password (optionally).
Confirm your settings by pressing the Apply button to follow to the next step of AVG
Download Manager.
4.4. Select License Type
In this step you are prompted to choose the license type of the product you would like to download. The description provided will allow you to select the one that suits you
Page 15
15
most:
Full version - i.e. AVG Anti-Virus, AVG Anti-Virus plus Firewall, or AVG
Internet Security
Trial version - provides you an opportunity to use all the features of AVG full
product for the limited time period of 30 days
Free version - provides protection to home users free of charge, however
the application functions are limited! Also, the free version only includes some of the features available in the paid product.
4.5. Download Files to Install
Now, you have provided all information needed for the AVG Download Manager to start the installation package download, and launch the installation process. Further, advance to the AVG Installation Process.
Page 16
16
5. AVG Installation Process
To install AVG on your computer, you need to get the latest installation file. You can use the installation file from the CD that is a part of your box edition but this file might be out-of-date.
Therefore we recommended getting the latest installation file online. You can download the file from the AVG website (at www.avg.com) / Downloads section. Or, you can make use of our new AVG Download Manager tool that helps you create and download the installation package you need, and launch the installation process.
The installation is a sequence of dialog windows with a brief description of what do at each step. In the following, we offer an explanation for each dialog window:
5.1. Installation Launch
The installation process starts with the Welcome to the AVG Setup Program window. In here you select the language used for the installation process. In the lower part of the dialog window find the Choose your setup language item, and select the desired language from the drop down menu. Then press the Next button to confirm and continue to the next dialog.
Attention: Here, you are selecting the language for the installation process only. You are not selecting the language for the AVG application - that can be specified later on during the installation process!
Page 17
17
5.2. License Agreement
The License Agreement dialog provides the full wording of the AVG license agreement. Please read it carefully and confirm that you have read, understood and accept the agreement by pressing the Accept button. If you do not agree with the license agreement press the Don't accept button, and the installation process will be terminated immediately.
Page 18
18
5.3. Checking System Status
Having confirmed the license agreement, you will be redirected to the Checking System Status dialog. This dialog does not require any intervention; your system is
being checked before the AVG installation can start. Please wait until the process has finished, then continue automatically to the following dialog.
Page 19
19
5.4. Select Installation Type
The Select Installation Type dialog offers the choice of two installation options: standard and custom installation.
For most users, it is highly recommended to keep to the standard installation that installs AVG in fully automatic mode with settings predefined by the program vendor. This configuration provides maximum security combined with the optimal use of resources. In the future, if the need arises to change the configuration, you will always have the possibility to do so directly in the AVG application.
Custom installation should only be used by experienced users who have a valid reason to install AVG with non-standard settings. E.g. to fit specific system requirements.
5.5. Activate your AVG License
In the Activate your AVG License dialog you have to fill in your registration data. Type in your name (User Name field) and the name of your organization (Company Name field).
Then enter your license/sales number into the License/Sales Number text field. The sales number can be found on the CD packaging in your AVG box. The license number will be in the confirmation email that you received after purchasing your AVG on-line. You must type in the number exactly as shown. If the digital form of the license
Page 20
20
number is available (in the email), it is recommended to use the copy and paste method to insert it.
Press the Next button to continue the installation process.
If in the previous step you have selected the standard installation, you will be redirected directly to the Installation Summary dialog. If custom installation was selected you will continue with the Destination Folder dialog.
Page 21
21
5.6. Custom Installation - Destination Folder
The Destination Folder dialog allows you to specify the location where AVG should be installed. By default, AVG will be installed to the program files folder located on drive C:. If you want to change this location, use the Browse button to display the drive structure, and select the respective folder. Press the Next button to confirm.
Page 22
22
5.7. Custom Installation - Component Selection
The Component Selection dialog displays an overview of all AVG components that can be installed. If the default settings do not suit you, you can remove/add specific components.
However, you can only select from components that are included in your purchased AVG edition. Only those components will be offered to be installed within the Component Selection dialog!
Within the list of components to be installed, you can define which language(s) AVG should be installed in. Check the Additional installed languages item and then select the desired languages from the respective menu.
Click the E-mail Scanner item to open and decide on what plug-in is to be installed to guarantee your electronic mail security. By default, Plugin for Microsoft Outlook will be installed. Another specific option is the Plugin for The Bat! If you use any other e-mail client (MS Exchange, Qualcomm Eudora, ...), go for the Personal E-mail Scanner option to secure your e-mail communication automatically no matter what e-mail program you run.
Continue by pressing the Next button.
Page 23
23
5.8. AVG Security Toolbar
In the AVG Security Toolbar dialog, decide whether you want to install the AVG
Security Toolbar - if you do not change the default settings, this component will be
installed automatically into your Internet browser; in conjunction with AVG 8.0 and AVG XPL technologies to provide you with comprehensive online protection while surfing the Internet.
Page 24
24
5.9. Windows Firewall
The license number you have provided in one of the previous setup steps responds to AVG 8.5 Internet Security edition that includes AVG Firewall. AVG Firewall cannot run parallelly with another installed firewall. In this dialog please confirm you want to install AVG Firewall , and you wish to deactivate the Windows Firewall at the same time.
Press the Next button to continue.
Page 25
25
5.10. Setup Summary
The Setup Summary dialog provides an overview of all parameters of the installation process. Please make sure all the information is correct. If so, press the Finish button to continue. Otherwise, you can use the Back button to return to the respective dialog and correct the information.
5.11. Application Termination
Before the installation process starts, you might be invited to terminate some of the currently running applications that might collide with the AVG installation process. In such a case, you will see the following Application Termination dialog. This dialog is only to inform you and does not require any intervention - if you agree to having closed the listed programs automatically, press Next to continue:
Page 26
26
Note: Please make sure you have saved all your data before you confirm you want to have the running application closed.
5.12. Installing AVG
The Installing AVG dialog shows the progress of the installation process, and does not require any intervention:
Page 27
27
Please wait until the installation is complete, then you will be redirected to the
Installation Complete dialog.
5.13. Installation Complete
The Installation is complete! dialog is the last step of the AVG installation process. AVG is now installed on your computer and fully functional. The program is running in the background in fully automatic mode.
After the installation, AVG Basic Configuration Wizard will be launched automatically and in a few steps will lead you through the AVG 8.5 Internet Security elementary configuration. Despite the fact the AVG configuration is accessible any time during AVG run, we deeply recommend to use this option and set up the basic configuration with the wizard's help.
Page 28
28
6. AVG First Run Wizard
When you first install AVG on your computer, the AVG Basic Configuration Wizard pops up to help you with initial AVG 8.5 Internet Security settings. Though you can set all of the suggested parameters later on, it is recommended that you take the wizard’s tour to secure your computer’s protection simply and immediately. Follow the steps described in each of the wizard’s windows:
6.1. Introducing the AVG First Run Wizard
The Introducing the AVG First Run Wizard welcome window briefly summarizes the status of AVG on your computer, and suggests the steps to be taken to complete protection. Click on the Next button to continue.
Page 29
29
6.2. Schedule regular scans and updates
In the Schedule regular scans and updates dialog set up the interval for new update files accessibility check-up, and define time when the scheduled scan should be launched. It is recommended to keep the default values. Press the Next button to continue.
6.3. Help us to identify new online threats
Page 30
30
In the Help us to identify new threats dialog decide whether you want to activate the option of reporting of exploits and bad sites found by users either via AVG Surf- Shield / AVG Search-Shield features of the LinkScanner component to feed the database collecting information on malicious activity on the web. It is recommended to keep the default value and have the reporting activated. Press the Next button to continue.
6.4. Configure the AVG Security Toolbar
In the Configure the AVG Security Toolbar dialog you can tick the check box to define you want Yahoo! to become your default search engine.
Page 31
31
6.5. Update AVG protection
The Update AVG protection dialog will automatically check and download the latest
AVG updates. Click on the Next button to download the latest update files and
perform the update.
6.6. AVG Configuration finished
Page 32
32
Now your AVG 8.5 Internet Security has been configured; press the Finish button to start working with AVG.
Page 33
33
7. Firewall Configuration Wizard
Firewall Configuration Wizard launches automatically right after the AVG 8.5 Internet Security installation. Though you can configure the component’s
parameters later on, it is recommended that you take the wizard’s tour to ensure the
Firewall works properly.
Firewall Configuration Wizard can also be called directly from the Firewall
interface by pressing the Configuration wizard button.
7.1. Network Connection Options
In this dialog, the Firewall Configuration Wizard asks how your computer is connected to the Internet. For instance, your notebook, that connects to the Internet from many different locations (airports, hotel rooms, etc.) requires security rules that are stricter than those of a computer in a domain (company network, etc.). Based on the selected connection type the Firewall default rules will be defined with a different security level.
You have three options to select from:
Standalone computer
Computer in domain (company network)
Computer on the move (typically a notebook)
Page 34
34
Small home or office network
In this dialog please choose the connection type(s), that suit your normal computer usage. You can tick more than one choice that corresponds to your current usage. Confirm your selection by pressing the Next button and proceed to the next dialog.
7.2. Scan for Internet Applications
To set the initial Firewall configuration it is necessary to scan your computer and define all applications and system services that need to communicate over the network. Initial Firewall rules should be created for all those applications and services.
Note: The wizard detects all generally known applications communicating over the network, and defines rules for these applications. However, it will not detect all such applications.
Within the Scan for Internet applications dialog you have to decide whether you want to run:
Quick search - text this option is only active if you have configured the
Firewall previously, and only applications that are currently saved within the
existing Firewall configuration will be searched for. New default configuration (i.e. manufacturer recommended) will then be applied to these. Please note that no new applications will be detected! We recommend this option if you already have Firewall rules defined, and want to avoid repeating the whole scanning process.
Page 35
35
Complete scan - scan all local hard drives of your computer
Common directories - (by default) scan program and Windows directories
only, scanning time is significantly shorter
Selected areas scan - specify selected hard drives to be scanned
7.3. Select Profile to Activate
The Select profile to activate dialog informs you about the Firewall configuration set up in the previous dialogs.
Before closing the Firewall Configuration Wizard it is necessary that you select a profile you want to use on your computer. You can choose from up to three options (standalone computer, computer in domain, and computer on the move) based on the connection parameters you have specified in the first dialog (Network Connection
Options) of this wizard. You can then later on switch between the pre-defined Firewall profiles according to the current state of your computer.
At the moment simply select the desired profile from the list and activate it by pressing the Next button:
If you do not want to set up the profiles manually you can switch on the function of profile's automatic detection. In that case Firewall will automatically select the most appropriate profile based on where and how your computer currently connects to the network. The automatic profile selection guarantees maximum security! To select this option, tick the Assign profile later by network area detection and automatic profile switch item in the upper part of the dialog:
Page 36
36
This way the profile list will get deactivated and you just press the Next button to continue to the following wizard's dialog.
7.4. Configuration Review
The Configuration Review dialog closes the Firewall Configuration Wizard. Press the Finish button to finalize the Firewall's initial settings. If you would like to see a review of set up parameters, or to continue with the detailed configuration of the
Firewall component press the Open review button to switch to the Firewall Settings editing interface.
Page 37
37
8. After Installation
8.1. Product Registration
Having finished the AVG 8.5 Internet Security installation, please register you product online on the AVG website, Registration page (follow the instruction provided directly in the page). After the registration you will be able to gain full access to your AVG User account, the AVG Update newsletter, and other services provided exclusively for registered users.
8.2. Access to User Interface
The AVG User Interface is accessible in several ways:
double-click the AVG icon on the system tray
double-click the AVG icon on the desktop
from the menu Start/All Programs/AVG 8.0/AVG User Interface
8.3. Scanning of the whole computer
There is a potential risk that a computer virus has been transmitted to your computer prior to AVG 8.5 Internet Security installation. For this reason you should run a
Scan of the whole computer to make sure there are no infections on your PC.
For instructions on running a Scan of the whole computer please consult the chapter AVG Scanning.
8.4. Eicar Test
To confirm that AVG 8.5 Internet Security has been installed correctly you can perform the EICAR test.
The EICAR test is a standard and absolutely safe method used to test antivirus system functioning. It is safe to pass around, because it is not an actual virus, and does not include any fragments of viral code. Most products react to it as if it were a virus (though they typically report it with an obvious name, such as "EICAR-AV-Test" ). You can download the EICAR virus from the EICAR website at www.eicar.com, and you will also find all necessary EICAR test information there.
Page 38
38
Try to download the eicar.com file, and save it on your local disk. Immediately after you confirm downloading of the test file, the Web Shield will react to it with a warning. This Web Shield notice demonstrates that AVG is correctly installed on your computer.
If AVG fails to identify the EICAR test file as a virus, you should check the program configuration again!
8.5. AVG Default Configuration
The default configuration (i.e. how the application is set up right after installation) of AVG 8.5 Internet Security is set up by the software vendor so that all components and functions are tuned up to achieve optimum performance.
Unless you have a real reason to do so, do not change the AVG configuration! Changes to settings should only be performed by an experienced user.
Some minor editing of AVG components settings is accessible directly from the specific component user interface. If you feel you need to change the AVG configuration to better suit your your needs, go to AVG Advanced Settings: select the system menu item Tools/Advanced settings and edit the AVG configuration in the newly opened AVG Advanced Settings dialog.
Page 39
39
9. AVG User Interface
AVG 8.5 Internet Security open with the main window:
The main window is divided into several sections:
System Menu (top system line in the window) is the standard navigation that
allows you to access all AVG components, services, and features - details >>
Security Status Info (upper section of the window) provides you with
information on the current status of your AVG program - details >>
Quick Links (left section of the window) allow you to quickly access the most
important and most frequently used AVG tasks - details >>
Components Overview (central section of the window) offer an overview of
all installed AVG components - details >>
Page 40
40
Statistics (left bottom section of the window) provide you with all statistical
data regarding the programs operation - details >>
System Tray Icon (bottom right corner of the monitor, on the system tray)
indicates the AVG current status - details >>
9.1. System Menu
The System menu is the standard navigation used in all Windows applications. It is located horizontally in the very top part of the AVG 8.5 Internet Security main window. Use the system menu to access specific AVG components, feature, and services.
The system menu is divided into five main sections:
9.1.1. File
Exit - closes the AVG 8.5 Internet Security's user interface. However, the
AVG application will continue running in the background and your computer will still be protected!
9.1.2. Components
The Components item of the system menu includes links to all installed AVG components, opening their default dialog page in the user interface:
System overview - switch to the default user interface dialog with the
overview of all installed components and their status
Anti-Virus - opens the default page of the Anti-Virus component
Anti-Rootkit - opens the default page of the Anti-Rootkit component
Anti-Spyware - opens the default page of the Anti-Spyware component
Firewall - opens the default page of the Firewall component
System Tools - opens the default page of the System Tools
Anti-Spam - opens the default page of the Anti-Spam component
E-mail Scanner - opens the default page of the E-mail Scanner component
License - opens the default page of the License component
Page 41
41
LinkScanner - opens the default page of the LinkScanner component
Web Shield - opens the default page of the Web Shield component
Resident Shield - opens the default page of the Resident Shield component
Update Manager - opens the default page of the Update Manager
component
9.1.3. History
Scan results - switches to the AVG testing interface, specifically to the Scan
Results Overview dialog
Resident Shield Detection - open a dialog with an overview of threats
detected by Resident Shield
E-mail Scanner Detection - open a dialog with an overview of mail
messages attachments detected as dangerous by the E-mail Scanner component
Web Shield findings - open a dialog with an overview of threats detected by
Web Shield
Virus Vault - opens the interface of the quarantine space (Virus Vault) to
where AVG removes all detected infections that cannot be healed automatically for some reason. Inside this quarantine the infected files are isolated and your computer's security is guaranteed, and at the same time the infected files are stored for possible future repair.
Event History Log - opens the history log interface with an overview of all
logged AVG 8.5 Internet Security actions.
Firewall - opens the Firewall settings interface on the Logs tab with a
detailed overview of all Firewall actions
9.1.4. Tools
Scan computer - switches to the AVG scanning interface and launches a scan
of the whole computer
Scan selected folder - switches to the AVG scanning interface and allows you
to define within the tree structure of your computer which files and folders should be scanned
Page 42
42
Scan file - allows you to run an on-demand test over a single file selected
from the tree structure of your disk
Update - automatically launches the update process of AVG 8.5 Internet
Security
Update from directory - runs the update process from the update files
located in a specified folder on your local disk. However, this option is only recommended as an emergency, e.g. in situations where there is no connection to the Internet (for example, your computer is infected and
disconnected from the Internet; your computer is connected to a network with no access to the Internet, etc.). In the newly opened window select the folder
where you have previously placed the update file, and launch the update process.
Advanced settings - opens the AVG advanced settings dialog where you
can edit the AVG 8.5 Internet Security configuration. Generally, it is recommended to keep the default settings of the application as defined by the software vendor.
Firewall settings - open a standalone dialog for advanced configuration of
the Firewall component
9.1.5. Help
Contents - opens the AVG help files
Get Help Online - opens the AVG website at the customer support center
page
Your AVG Web - opens the AVG homepage (at www.avg.com)
About Viruses and Threats - opens the online Virus Encyclopedia where
you can look up detailed information on the identified virus
Reactivate - opens the Activate AVG dialog with the data you have entered
in the Personalize AVG dialog of the installation process. Within this dialog you can enter your license number to either replace the sales number (the
number you have installed AVG with), or to replace the old license number (e. g. when upgrading to a new AVG product).
Register now - connects to the registration website at www.avg.com. Please
fill in your registration data; only customers who register their AVG product can receive free technical support.
Page 43
43
About AVG - opens the Information dialog with five tabs providing data on
program name, program and virus database version, system info, license agreement, and contact information of AVG Technologies CZ.
9.2. Security Status Info
The Security Status Info section is located in the upper part of the AVG main window. Within this section you will always find information on the current security status of your AVG 8.5 Internet Security. Please see an overview of icons possibly depicted in this section, and their meaning:
The green icon indicates that your AVG is fully functional. Your computer is completely protected, up to date and all installed components are working properly.
The orange icon warns that one or more components are incorrectly configured and you should pay attention to their properties/settings. There is no critical problem in AVG and you have probably decided to switch some component off for some reason. You are still protected by AVG. However, please pay attention to the problem component's settings! Its name will be provided in the Security Status Info section.
This icon also appears if for some reason you have decided to ignore a
component's error status (the "Ignore component state" option is available
from the context menu opened by a right-click over the respective component's icon in the component overview of the AVG main window). You may need to use this option in a specific situation but it is strictly recommended to switch off the "Ignore component state" option as soon as possible.
The red icon indicates that AVG is in critical status! One or more components does not work properly and AVG cannot protect your computer. Please pay immediate attention to fixing the reported problem. If you are not able to fix the error yourself, contact the AVG technical support team.
It is strongly recommended that you pay attention to Security Status Info and in case the report indicates any problem, go ahead and try to solve it immediately. Otherwise your computer is at risk!
Page 44
44
Note: AVG status information can also be obtained at any moment from the system
tray icon.
9.3. Quick Links
Quick links (in the left section of the AVG User Interface) allow you to immediately access the most important and most frequently used AVG features:
Overview - use this link to switch from any currently opened AVG interface to
the default one with an overview of all installed components - see chapter
Components Overview >>
Computer scanner - use this link to open the AVG scanning interface where
you can run tests directly, schedule scans, or edit their parameters - see chapter AVG Tests >>
Update now - this link open the updating interface, and launches the AVG
update process immediately - see chapter AVG Updates >>
These links are accessible from the user interface at all times. Once you use a quick link to run a specific process, the GUI will switch to a new dialog but the quick links are still available. Moreover, the running process is further graphically depicted - see picture 2.
Page 45
45
9.4. Components Overview
The Components Overview section is located in the central part of the AVG User
Interface. The section is divided into two parts:
Overview of all installed components consisting of a panel with the
component's icon and the information of whether the respective component is active or inactive
Description of a selected component
Within the AVG 8.5 Internet Security the Components Overview section contains information on the following components:
Anti-Virus ensures that your computer is protected from viruses trying to
enter your computer - details >>
Anti-Spyware scans your applications in the background as you run them -
details >>
Anti-Spam checks all incoming e-mail messages and marks unwanted
e-mails as SPAM - details >>
Anti-Rootkit detects programs and technologies trying to camouflage
malware - details >>
Page 46
46
System Tools offers a detailed summary of the AVG environment - details
>>
Firewall controls how your computer exchanges data with other computers
on the Internet or local network - details >>
E-mail Scanner checks all incoming and outgoing mail for viruses - details
>>
License provides full wording of the AVG License Agreement - details >>
LinkScanner checks the search results displayed in your internet browser -
details >>
Web Shield scans all data being downloaded by a web browser - details >>
Resident Shield runs in the background and scans files as they are copied,
opened or saved - details >>
Update Manager controls all AVG updates - details >>
Single-click any component's icon to highlight it within the components overview. At the same time, the component's basic functionality description appears in the bottom part of the user interface. Double-click the icon to open the components own interface with a list of basic statistical data.
Right-click you mouse over a component's icon to expand a context menu: besides opening the component's graphic interface you can also select to Ignore component state. Select this option to express you are aware of the component's error state but for some reason you wish to keep your AVG so and you do not want to be warned by the grey color of the system tray icon.
9.5. Statistics
The Statistics section is located in the left bottom part of the AVG User Interface. It offers a list of information regarding the program's operation:
Last scan - provides the date when the last scan was performed
Last update - provides the date when the last update was launched
Virus DB - informs you about the currently installed version of the virus
database
Page 47
47
AVG version - informs you about the AVG version installed (the number is in
the form of 8.0.xx, where 8.0 is the product line version, and xx stands for the number of the build)
License expires - provides the date of your AVG license expiration
9.6. System Tray Icon
System Tray Icon (on your Windows taskbar) indicates the current status of your
AVG 8.5 Internet Security. It is visible at all times on your system tray, no matter whether your AVG main window is opened or closed.
If in full color , the System Tray Icon indicates that all AVG components are active and fully functional. Also, AVG system tray icon can be displayed in full color if AVG is in error state but you are fully aware of this situation and you have deliberately decided to Ignore the component state.
A gray icon coloring with an exclamation mark indicates a problem (inactive component, error status, etc.). Double-click the System Tray Icon to open the main window and edit a component.
The system tray icon further informs on current AVG activities and possible status changes in the program (e.g. automatic launch of a scheduled scan or update, Firewall profile switch, a component's status change, error status occurrence, ...) via a pop-up window opened from the AVG system tray icon:
The System Tray Icon can also be used as a quick link to access the AVG main window at any time - double click on the icon. By right-click on the System Tray Icon you open a brief context menu with the following options:
Open AVG User Interface - click to open the AVG User Interface
Update - launches an immediate update
Exit - click to close AVG (You only close the user interface, AVG continues to
run in the background and your computer is still fully protected!)
Page 48
48
10. AVG Components
10.1. Anti-Virus
10.1.1. Anti-Virus Principles
The antivirus software's scanning engine scans all files and file activity (opening/closing files, etc.) for known viruses. Any detected virus will be blocked from taking any action and will then be cleaned or quarantined. Most antivirus software also uses heuristic scanning, where files are scanned for typical virus characteristics, so called viral signatures. This means that the antivirus scanner can detect a new, unknown virus, if the new virus contains some typical characteristics of existing viruses.
The important feature of antivirus protection is that no known virus can run on the computer!
Where just a single technology might fall short of detecting or identifying a virus, Anti-Virus combines several technologies to ensure that your computer is protected from viruses:
Scanning - searching for character strings that are characteristic of a given
virus
Heuristic analysis - dynamic emulation of the scanned object’s instructions in a
virtual computer environment
Generic detection - detection of instructions characteristic of the given
virus/group of viruses
AVG is also able to analyze and detect executable applications or DLL libraries that could be potentially unwanted within the system. We call such threats Potentially Unwanted Programs (various kinds of spyware, adware etc.). Furthermore, AVG scans your system registry for suspicious entries, temporary Internet files and tracking cookies, and allows you to treat all potentially harmful items in the same way as any other infection.
Page 49
49
10.1.2. Anti-Virus Interface
The Anti-Virus component's interface provides some basic information on the component's functionality, information on the component's current status (Anti-Virus component is active.), and a brief overview of Anti-Virus statistics:
Infection definitions - number provides the count of viruses defined in the
up-to-date version of the virus database
Latest database update - specifies when and at what time the virus
database was last updated
Database version - defines the number of the latest virus database version;
and this number increases with every virus base update
There is just one operating button available within this component's interface (Back)
- press the button to return to the default AVG user interface (components overview).
Please note: The software vendor has set up all AVG components to give optimum performance. Unless you have a real reason to do so, do not change the AVG configuration. Any changes to settings should only be performed by an experienced user. If you need to change AVG configuration, select the system menu item Tools / Advanced settings and edit the AVG configuration in the newly opened AVG
Advanced Settings dialog.
Page 50
50
10.2. Anti-Spyware
10.2.1. Anti-Spyware Principles
Spyware is usually defined as a type of malware, i.e. software, that gathers information from a user's computer without the user's knowledge or consent. Some spyware applications may also be installed on purpose and often contain advertisements, window pop-ups or different types of unpleasant software.
Currently, the most common source of infection is websites with potentially dangerous content. Other methods of transmission, such as via e-mail or transmission by worms and viruses are also prevalent. The most important protection is to use an always-on background scanner, Anti-Spyware, that works like a resident shield and scans your applications in the background as you run them.
There is also the potential risk that malware has been transmitted to your computer prior to AVG installation, or that you have neglected to keep your AVG 8.5 Internet Security up-to-date with the latest database and program updates. For this reason, AVG allows you to fully scan your computer for malware/spyware using the scanning feature. It also detects sleeping and non-active malware, i.e. malware that has been downloaded but not yet activated.
10.2.2. Anti-Spyware Interface
Page 51
51
The Anti-Spyware component's interface provides a brief overview on the component's functionality, information on the component's current status (Anti- Spyware component is active.), and some Anti-Spyware statistics:
Spyware definitions - number provides the count of spyware samples
defined in the latest spyware database version
Latest database update - specifies when and at what time the spyware
database was updated
Database version - defines the number of the latest spyware database
version; and this number increases with every virus base update
There is just one operating button available within this component's interface (Back)
- press the button to return to the default AVG user interface (components overview).
Please note: The software vendor has set up all AVG components to give optimum performance. Unless you have a real reason to do so, do not change the AVG configuration. Any changes to settings should only be performed by an experienced user. If you need to change AVG configuration, select the system menu item Tools / Advanced settings and edit the AVG configuration in the newly opened AVG
Advanced Settings dialog.
10.3. Anti-Spam
10.3.1. Anti-Spam Principles
Spam refers to unsolicited e-mail, mostly advertising a product or service that is mass mailed to a huge number of e-mail addresses at a time, filling recipients’ mail boxes. Spam does not refer to legitimate commercial e-mail for which consumers have given their consent. Spam is not only annoying, but also can often be a source of scams, viruses or offensive content.
Anti-Spam checks all incoming e-mail messages and marks unwanted e-mails as SPAM. It uses several analyzing methods to process each e-mail message, offering maximum possible protection against unwanted e-mail messages.
Page 52
52
10.3.2. Anti-Spam Interface
In the Anti-Spam component's dialog you will find a brief text describing the component's functionality, information on its current status (Anti-Spam component is active.), and the following statistics:
Database release - specifies when and at what time the spam database was
updated and published
Spamcatcher version - defines the number of the latest version of the anti-
spam engine
There is just one operating button available within this component's interface (Back)
- press the button to return to the default AVG user interface (components overview).
Please note: The software vendor has set up all AVG components to give optimum performance. Unless you have a real reason to do so, do not change the AVG configuration. Any changes to settings should only be performed by an experienced user. If you need to change AVG configuration, select the system menu item Tools / Advanced settings and edit the AVG configuration in the newly opened AVG
Advanced Settings dialog.
Page 53
53
10.4. Anti-Rootkit
10.4.1. Anti-Rootkit Principles
Anti-Rootkit is a specialized tool detecting and effectively removing dangerous rootkits, i.e. programs and technologies that can camouflage the presence of malicious software on your computer.
A rootkit is a program designed to take fundamental control of a computer system, without authorization by the system's owners and legitimate managers. Access to the hardware is rarely required as a rootkit is intended to seize control of the operating system running on the hardware. Typically, rootkits act to obscure their presence on the system through subversion or evasion of standard operating system security mechanisms. Often, they are also Trojans as well, thus fooling users into believing they are safe to run on their systems. Techniques used to accomplish this can include concealing running processes from monitoring programs, or hiding files or system data from the operating system.
10.4.2. Anti-Rootkit Interface
The Anti-Rootkit user interface provides a brief description of the component's functionality, informs on the component's current status (Anti-Rootkit component is active.) and also brings information on the last time the Anti-Rootkit test was
Page 54
54
launched.
In the bottom part of the dialog you can find the Anti-Rootkit settings section where you can set up some elementary functions of the rootkit presence scanning. First, mark up the respective check-boxes to specify objects that should be scanned:
Scan applications
Scan DLL libraries
Scan drivers
Further you can pick the rootkit scanning mode:
Quick rootkit scan - scans only the system folder (typically c:\Windows)
Full rootkit scan - scans all accessible disks except for A: and B:
Control buttons available:
Search for rootkits - since the rootkit scan is not an implicit part of the
Scan of the whole computer, you can run the rootkit scan directly from the
Anti-Rootkit interface using this button
Save changes - press this button to save all changes made in this interface
and to return to the default AVG user interface (components overview)
Cancel - press this button to return to the default AVG user interface
(components overview) without having saved any changes you made
10.5. System Tools
System Tools refer to tools offering a detailed summary of the AVG 8.5 Internet Security environment. The component displays an overview of running processes,
applications launched at operating system start up, active network connections, etc. Specific overviews can also be edited but this is only recommended for highly experienced users!
Page 55
55
10.5.1. Processes
The Processes dialog contains a list of processes (i.e. running applications) that are currently active on your computer. The list is divided into several columns:
Process name - name of the running process
Path - physical path to the running process
Window - if applicable, indicates application Window name
Internet - indicates if the running process also connects to the Internet (
Yes/No)
Service - shows if the running process is a service (Yes/No)
PID - process identification number is a unique Windows internal process
identifier
You can select one or more applications and then terminate them by pressing the
Terminate Process button. The Back button switches you back to the default AVG
user interface (components overview).
We strongly suggest not to terminate any applications, unless you are absolutely sure that they represent a real threat!
Page 56
56
10.5.2. Network Connections
The Network Connections dialog contains a list of currently active connections. The list is divided into the following columns:
Application - name of the application related to the connection. This
information is only available on Windows XP.
Protocol - transmission protocol type used for the connection:
o
TCP - protocol used in conjunction with Internet Protocol (IP) to transmit information over the Internet
o
UDP - alternative to TCP protocol
Local address - IP address of the local computer and the port number used
Remote address - IP address of the remote computer and the port number
connected to. If possible, it will also look up the host name of the remote computer.
State - indicates the most probable current state (Connected, Server should
close, Listen, Active close finished, Passive close, Active close)
Page 57
57
To list only external connections, tick the Hide local connections checkbox.
The control buttons available are:
Terminate Connection - closes one or more connections selected in the list
Terminate Process - closes one or more applications related to connections
selected in the list (this button is only available on systems running Windows XP)
Back - switch back to the default AVG user interface (components
overview).
Sometimes it is possible to terminate only applications that are currently in the connected state. We strongly suggest not to terminate any connections, unless you are absolutely sure that they represent a real threat!
10.5.3. Autostart
The Autostart dialog shows a list of all applications that are executed during Windows system start-up. Very often, several malware applications add themselves automatically to the start-up registry entry.
You can delete one or more entries by selecting them and pressing the Remove
Page 58
58
selected button. The Back button switches you back to the default AVG user
interface (components overview).
We strongly suggest not to delete any applications from the list, unless you are absolutely sure that they represent a real threat!
10.5.4. Browser Extensions
The Browser Extensions dialog contains a list of plug-ins (i.e. applications) that are installed inside your Internet browser. This list may contain regular application plug-ins as well as potential malware programs. Click on an object in the list to obtain more information (in the bottom section of the dialog).
We strongly suggest not to delete any plug-ins from the list, unless you are absolutely sure that they represent a real threat!
The Back button switches you back to the default AVG user interface (components overview).
Page 59
59
10.5.5. LSP Viewer
The LSP Viewer dialog shows a list of Layered Service Providers (LSP).
A Layered Service Provider (LSP) is a system driver linked into the networking services of the Windows operating system. It has access to all data entering and leaving the computer, including the ability to modify this data. Some LSPs are necessary to allow Windows to connect you to other computers, including the Internet. However, certain malware applications may also install themselves as an LSP, thus having access to all data your computer transmits. Therefore, this review may help you to check all possible LSP threats.
Under certain circumstances, it is also possible to repair broken LSPs (for example when the file has been removed but the registry entries remain untouched). A new button for fixing the issue is displayed once a repairable LSP is discovered.
To include Windows LSP in the list, uncheck the Hide Windows LSP checkbox. The Back button switches you back to the default AVG user interface (components overview).
Page 60
60
10.6. Firewall
10.6.1. Firewall Principles
Firewall is a system that enforces an access control policy between two or more networks by blocking/permitting traffic. Firewall contains a set of rules that protect the internal network from attacks originating outside (typically from the Internet) and controls all communication on every single network port. The communication is evaluated according to the defined rules, and then either allowed or forbidden. If Firewall recognizes any intrusion attempts, it “blocks” the attempt and does not allow the intruder access to the computer.
Firewall is configured to allow or deny internal/external communication (both ways, in or out) through defined ports, and for defined software applications. For example, the firewall could be configured to only permit web data to flow in and out using Microsoft Explorer. Any attempt to transmit web data by any other browser would be blocked.
Firewall protects your personally-identifiable information from being sent from your computer without your permission. It controls how your computer exchanges data with other computers on the Internet or local network. Within an organization, the firewall also protects the single computer from attacks initiated by internal users on other computers in the network.
Note: AVG Firewall is not intended for server platforms!
How does AVG Firewall work
In AVG, the Firewall component controls all traffic on every network port of your computer. Based on the defined rules, the Firewall evaluates applications that are either running on your computer (and want to connect to the Internet/local network), or applications that approach your computer from outside trying to connect to your PC. For each of these applications the Firewall then either allows or forbids the communication on the network ports. By default, if the application is unknown (i.e. has no defined Firewall rules), the Firewall will ask you if you wish to allow or block the communication attempt.
What the Firewall can do:
Allow or block communication attempts of known applications automatically,
or ask you for confirmation
Page 61
61
Use complete profiles with predefined rules, according to your needs
Keep an archive of all defined profiles and settings
Switch profiles automatically when connecting to various networks, or using
various network adapters
10.6.2. Firewall Profiles
The Firewall allows you to define specific security rules based on whether your computer is located in a domain, or it is a standalone computer, or even a notebook. Each of these options requires a different level of protection, and the levels are covered by the respective profiles. In short, a Firewall profile is a specific configuration of Firewall component, and you can use a number of such predefined configurations.
Available profiles
Allow all - a Firewall system profile that has been pre-set by the
manufacturer and is always present. When this profile is activated, all network communication is allowed and no safety policy rules are applied, as if the
Firewall protection was switched off (i.e. all applications are allowed but
packets are still being checked - to completely disable any filtering you need to disable Firewall). This system profile cannot be duplicated, deleted, and its
settings cannot be modified.
Block all - a Firewall system profile that has been pre-set by the
manufacturer and is always present. When this profile is activated, all network communication is blocked, and the computer is neither accessible from outer networks, nor can communicate outside. This system profile cannot be duplicated, deleted, and its settings cannot be modified.
Custom profiles - profiles generated through the Firewall Configuration
Wizard. The maximum of three custom profiles can be generated through the
Wizard:
o
Standalone computer – suitable for common desktop home computers connected directly to the Internet.
o
Computer in domain – suitable for computers in a local network, e.g. school or corporate network. It is assumed that the network is protected by some additional measures so that the security level can be lower than for a standalone computer.
Page 62
62
o
Small home or office network – suitable for computers in a small network, e.g. at home or in a small business, typically only several computers connected together, without a "central" administrator.
o
Computer on the move – suitable for notebooks. It is supposed that, as a handheld travel computer, it connects to the Internet from various unknown and therefore totally insecure places (Internet café, hotel room etc.), and the highest security level is set.
Profile switching
The profile switching feature allows the Firewall to switch automatically to the defined profile when using a certain network adapter, or when connected to a certain type of network. If no profile has been assigned to a network area yet, then upon next connection to that area, the Firewall will display a dialog asking you to assign a profile.
You can assign profiles to all local network interfaces or areas and specify further settings in the Areas and Adapters Profiles dialog, where you can also disable the feature if you do not wish to use it (then, for any kind of connection, the default profile will be used).
Typically, users who have a notebook and use various types of connection will find this feature useful. If you have a desktop computer, and only ever use one type of connection (e.g. cable connection to the Internet), you do not have to bother with profile switching as most likely you will never use it.
Page 63
63
10.6.3. Firewall Interface
The Firewall component's interface provides some basic information on the component's functionality, and a brief overview of Firewall statistics:
Firewall has been enabled for - time elapsed since Firewall was last
launched
Blocked packets - number of blocked packets from the entire amount of
packets checked
Overall packets - number of all packets checked during the Firewall run
Firewall settings section
Select Firewall profile - from the roll-down menu select one of the defined
profiles - two profiles are available at all times (the default profiles named
Allow all and Block all), other profiles were added as you went through the
Firewall Configuration Wizard or by profile editing in the Profiles dialog in Firewall Settings.
Firewall status:
o
Firewall enabled - select this option to allow communication to those applications that are assigned as 'allowed' in the set of rules defined
Page 64
64
within selected Firewall profile
o
Firewall disabled - this option switches Firewall off completely, all network traffic is allowed but not checked!
o
Emergency mode (block all internet traffic) - select this option to block all traffic on every single network port; Firewall is still running but all network traffic is stopped
Enable gaming mode - Check this option to ensure that when running
full-screen applications (games, PowerPoint presentations etc.), the Firewall will not display dialogs asking you whether you want to allow or block communication for unknown applications. In case an unknown application tries to communicate over the network at that time, the Firewall will allow or block the attempt automatically according to settings in the current profile.
Please note: The software vendor has set up all AVG components to give optimum performance. Unless you have a real reason to do so, do not change the AVG configuration. Any changes to settings should only be performed by an experienced user. If you need to change Firewall configuration, select the system menu item
File / Firewall settings and edit the Firewall configuration in the newly opened
Firewall Settings dialog.
Control buttons available are:
Configuration wizard - press the button to launch the Firewall
configuration wizard that will lead you step by step through the Firewall
component configuration
Save changes - press this button to save and apply any changes made in
this dialog
Cancel - press this button to return to the default AVG user interface (
components overview)
10.7. E-mail Scanner
10.7.1. E-mail Scanner Principles
One of the most common sources of viruses and trojans is via e-mail. Phishing and spam make e-mail an even greater source of risks. Free e-mail accounts are more likely to receive such malicious e-mails (as they rarely employ anti-spam technology), and home users rely quite heavily on such e-mail. Also home users, surfing unknown
Page 65
65
sites and filling in online forms with personal data (such as their e-mail address) increase exposure to attacks via e-mail. Companies usually use corporate e-mail accounts and employ anti-spam filters etc, to reduce the risk.
The E-mail Scanner component checks every e-mail sent or received, providing much needed protection from e-mail borne threats. AVG supports all leading e-mail clients including MS Outlook, The bat!, Eudora and all other SMTP/POP3 based email clients such as Outlook Express. Encrypted connections using SSL are also supported.
Note: AVG E-mail Scanner is not intended for server platforms!
When detected, viruses are quarantined in Virus Vault immediately. Some e-mail clients may support messages with text certifying that sent and received e-mail has been scanned for viruses.
10.7.2. E-mail Scanner Interface
In the E-mail Scanner component's dialog you can find a brief text describing the component's functionality, information on its current status (E-mail Scanner is active. ), and the following statistics:
Total e-mails scanned - how many e-mail messages were scanned since
the E-mail Scanner was last launched (if needed, this value can be reset; e. g. for statistic purposes - Reset value)
Page 66
66
Threats found and blocked - provides the number of infections detected in
e-mail messages since the last E-mail Scanner launch
Installed e-mail protection - information about a specific e-mail protection
plug-in referring to your default installed e-mail client
Basic component configuration
In the bottom part of the dialog you can find the section named E-mail Scanner settings where you can edit some elementary features of the component's
functionality:
Scan incoming messages - check the item to specify that all e-mails
delivered to your account should be scanned for viruses (by default, this item is on, and it is recommended not to change this setting!)
Scan outgoing messages - check the item to confirm all e-mail sent from
your account should be scanned for viruses (by default, this item is off)
Display notification icon while E-mail is being scanned - during the
scanning the E-mail Scanner component displays a notification dialog informing on an actual task the component is processing (connecting to server, downloading a message, scanning the message, ...)
The advanced configuration of the E-mail Scanner component is accessible via the File/Advanced settings item of the system menu; however advanced configuration is recommended for experienced users only!
Please note: The software vendor has set up all AVG components to give optimum performance. Unless you have a real reason to do so, do not change the AVG configuration. Any changes to settings should only be performed by an experienced user. If you need to change AVG configuration, select the system menu item Tools / Advanced settings and edit the AVG configuration in the newly opened AVG
Advanced Settings dialog.
Control buttons
The control buttons available within the E-mail Scanner interface are as follows:
Save changes - press this button to save and apply any changes made in
this dialog
Page 67
67
Cancel - press this button to return to the default AVG user interface
(components overview)
10.7.3. E-mail Scanner Detection
In the E-mail Scanner detection dialog (accessible via system menu option History / E-mail Scanner detection) you will be able to see a list of all findings
detected by the E-mail Scanner component. For each detected object the following information is provided:
Infection- description (possibly even name) of the detected object
Object - object location
Result - action performed with the detected object
Object Type - type of the detected object
In the bottom part of the dialog, under the list, you will find information on total number of detected objects listed above. Further you can export the entire list of detected objects in a file (Export list to file) and delete all entries on detected objects (Empty list).
Page 68
68
10.8. License
In the Licence component interface you will find a brief text describing the component's functionality, information on its current status (License component is active.), and the following information:
License number - provides the exact form of your license number. When
entering your license number, you have to be absolutely precise and type it exactly as shown. For your comfort, the License dialog offers the Copy license number button: press the button to copy the license number into the clipboard, and then you can simply paste it anywhere you like (CTRL+V).
License type - specifies the product edition defined by your license number.
License expires - this date determines the period of validity of your license.
If you want to go on using AVG after this date you have to renew your license. The license renewal can be performed online on the AVG website.
Number of seats - how many workstations on which you are entitled to
install your AVG.
Page 69
69
Control buttons
Copy license number - press the button to insert the currently used license
number into clipboard (just like with CTRL+C), and you can paste it wherever needed
Re-activate - opens the Activate AVG dialog with the data you have entered
in the Personalize AVG dialog of the installation process. Within this dialog you can enter your license number to either replace the sales number (the
number you have installed AVG with), or to replace the old license number (e. g. when upgrading to a new AVG product).
Register - connects to the registration website at www.avg.com. Please fill in
your registration data; only customers who register their AVG product can receive free technical support.
Back - press this button to return to the default AVG user interface
(components overview)
10.9. Link Scanner
10.9.1. Link Scanner Principles
LinkScanner consists of two features: AVG Active Surf-Shield and AVG Search
Shield.
AVG Active Surf-Shield prevents you from accidentally becoming infected by drive-
by downloads and other exploits, ensuring the web pages you visit are safe at the only time that really matters - when you are about to click the link.
AVG Search Shield works with Google, Yahoo! and MSN search engines to deliver a
real-time safety verdict on all search results, including search ads, displaying an icon to show the safety rating for each site.
Note: AVG Link Scanner is not intended for server platforms!
Page 70
70
10.9.2. Link Scanner Interface
The LinkScanner component consists of two parts that you can switch on/off in the LinkScanner component interface:
Enable AVG Search-Shield - (on by default): advisory notifying icons on
searches performed in Google, Yahoo or MSN having checked ahead the content of sites returned by the search engine.
Enable AVG Active Surf-Shield - (on by default): active (real-time)
protection against exploitive sites as they are accessed. Known malicious site connections and their exploitive content is blocked as they are accessed by the user via a web browser (or any other application that uses HTTP).
Back reporting of exploiting web sites - mark this item to allow back
reporting of exploits and bad sites found by users either via Safe Surf or Safe Search to feed the database collecting information on malicious activity on the web.
10.9.3. AVG Search-Shield
When searching Internet with the AVG Search-Shield on, all search results returned from the most popular search engines like Yahoo!, Google, MSN, etc. are evaluated for dangerous or suspicious links. By checking these links and marking the bad links, the AVG Security Toolbar warns you before you click on dangerous or suspicious
Page 71
71
links, so you can ensure you only go to safe websites.
While a link is being evaluated on the search results page, you will see a graphic sign next to the link informing that the link verification is in progress. When the evaluation is complete, the respective informative icon will be displayed:
The linked page is safe (with Yahoo! search engine within AVG Security
Toolbar this icon will not be displayed!).
The linked page does not contain threats but is somewhat suspicious (
questionable in origin or motive, therefore not recommended for e-shopping etc.
).
The linked page can be either safe itself, but containing further links to positively dangerous pages; or suspicious in code, though not directly employing any threats at the moment.
The linked page contains active threats! For your own safety, you will not be allowed to visit this page.
The linked page is not accessible, and so could not be scanned.
Hovering over an individual rating icon will display details about the particular link in question. Information include additional details of the threat (if any), the IP address of the link and when the page was scanned by AVG:
10.9.4. AVG Active Surf-Shield
This powerful protection will block malicious content of any webpage you try to open, and prevent it from being downloaded to your computer. With this feature enabled, clicking a link or typing in a URL to a dangerous site will automatically block you from opening the web page thus protecting you from inadvertently being infected. It is important to remember that exploited web pages can infect your computer simply by visiting the affected site, for this reason when you request a dangerous webpage
Page 72
72
containing exploits or other serious threats, the AVG Security Toolbar will not allow your browser to display it.
If you do encounter a malicious web site, within your web browser the AVG Security
Toolbar will warn you with a screen similar to:
If you still wish to visit the infected page, a link to the page is available on this screen, but continuing to these pages in not recommended!
10.10. Web Shield
10.10.1. Web Shield Principles
Web Shield is a type of a real time resident protection; it scans the content of visited web pages (and possible files included in them) even before these are displayed in your web browser or downloaded to your computer.
Web Shield detects that the page you are about to visit includes some dangerous javascript, and prevents the page from being displayed. Also, it recognizes malware contained in a page and stops its downloading immediately so that it never gets to your computer.
Note: AVG Web Shield is not intended for server platforms!
10.10.2. Web Shield Interface
The Web Shield component's interface describes the behavior of this type of protection. Further you can find information on the component's current status (Web Shield is active and fully functional.). In the bottom part of the dialog you will then find the elementary editing options of this component's functionality.
Page 73
73
Basic component configuration
First of all, you have the option to immediately switch on/off the Web Shield by checking the Enable Web Shield item. This option is enabled by default, and the Web Shield component is active. However, if you do not have a good reason to change this settings, we recommend to keep the component active. If the item is checked, and the Web Shield is running, more configuration options are available and editable on two tabs:
Web - you can edit the component's configuration regarding the scan of the
website content. The editing interface allows you to configure the following elementary options:
o
Web protection - this option confirms that the Web Shield should perform scanning of the www pages content. Provided this option is on ( by default), you can further switch on/off these items:
Check archives - scan the content of archives possibly included in the www page to be displayed
Scan Potentially Unwanted Programs - scan potentially unwanted programs (executable programs that can operate as spyware or adware) included in the www page to be displayed
Page 74
74
Use heuristic analysis - scan the content of the page to be displayed using the heuristic analysis method (dynamic emulation of
the scanned object’s instructions in a virtual computer environment ­see chapter Anti-Virus Principles)
Maximum file size to be scanned - if included files are present in the displayed page you can also scan their content even before these are downloaded to your computer. However, scanning of large files takes quite some time and the web page download might be slowed significantly. You can use the slide bar to specify the maximum size of a file that is still to be scanned with Web Shield. Even if the downloaded file is bigger than specified, and therefore will not be scanned with Web Shield, you are still protected: in case the file is infected, the Resident Shield will detect it immediately.
Instant Messaging - allows you to edit the components settings referring to
instant messaging (e.g. ICQ, MSN Messenger, Yahoo ...) scanning.
-
o
Instant Messaging protection - check this item if you wish that the Web Shield verifies the on-line communication is virus free. Provided this option is on, you can further specify which instant messaging application you want to control - currently AVG 8.5 Internet Security supports the ICQ, MSN, and Yahoo applications.
Page 75
75
Please note: The software vendor has set up all AVG components to give optimum performance. Unless you have a real reason to do so, do not change the AVG configuration. Any changes to settings should only be performed by an experienced user. If you need to change AVG configuration, select the system menu item Tools / Advanced settings and edit the AVG configuration in the newly opened AVG
Advanced Settings dialog.
Control buttons
The control buttons available within the Web Shield interface are as follows:
Save changes - press this button to save and apply any changes made in
this dialog
Cancel - press this button to return to the default AVG user interface (
components overview)
10.10.3. Web Shield Detection
Web Shield scans the content of visited web pages and possible files included in them even before these are displayed in your web browser or downloaded to your computer. If a threat is detected, you will be warned immediately with the following dialog:
The suspect web page will not be opened, and the threat detection will be logged in the list of Web Shield findings (accessible via system menu History / Web Shield findings).
Page 76
76
10.11. Resident Shield
10.11.1. Resident Shield Principles
The Resident Shield scans files as they are copied, opened or saved. When the Resident Shield discovers a virus in a file that is accessed, it stops the operation
currently being performed and does not allow the virus to activate itself. The Resident Shield, loaded in the memory of your computer during system startup, also provides vital protection for the system areas of your computer.
10.11.2. Resident Shield Interface
Besides an overview of the most important statistical data and the information on the component's current status (Resident Shield is active and fully functional), the Resident Shield interface offers some elementary component settings options, too. The statistics is as follows:
Resident Shield has been active for - provides the time since the latest
component's launch
Threats detected and blocked - number of detected infections that were
prevented from being run/opened (if needed, this value can be reset; e.g. for statistic purposes - Reset value)
Page 77
77
Basic component configuration
In the bottom part of the dialog window you will find the section called Resident Shield settings where you can edit some basic settings of the component's
functionality (detailed configuration, as with all other components, is available via the File/Advanced settings item of the system menu).
The Resident Shield is active option allows you to easily switch on/off resident protection. By default, the function is on. With resident protection on you can further decide how the possibly detected infections should be treated (removed):
o
either automatically (Remove all threats automatically)
o
or only after the user's approval (Ask me before removing threats)
This choice has no impact on the security level, and it only reflects your preferences.
In both cases, you can still select whether you want to Remove cookies automatically. In specific cases you can switch this option on to achieve maximum security levels, however it is switched off by default. (cookies = parcels of text sent
by a server to a web browser and then sent back unchanged by the browser each time it accesses that server. HTTP cookies are used for authenticating, tracking, and maintaining specific information about users, such as site preferences or the contents of their electronic shopping carts).
Please note: The software vendor has set up all AVG components to give optimum performance. Unless you have a real reason to do so, do not change the AVG configuration. Any changes to settings should only be performed by an experienced user. If you need to change AVG configuration, select the system menu item Tools / Advanced settings and edit the AVG configuration in the newly opened AVG
Advanced Settings dialog.
Control buttons
The control buttons available within the Resident Shield interface are as follows:
Manage exceptions - opens the Resident Shield - Directory Excludes
dialog where you can define folders that should be left out from the Resident
Shield scanning
Save changes - press this button to save and apply any changes made in
this dialog
Page 78
78
Cancel - press this button to return to the default AVG user interface
(components overview)
10.11.3. Resident Shield Detection
Resident Shield scans files as they are copied, opened or saved. When a virus or any kind of threat is detected, you will be warned immediately via the following dialog:
The dialog provides information on the threat detected, and it invites you to decide what action should be taken now:
Heal - if a cure is available, AVG will heal the infected file automatically; this
option is the recommended action to be taken
Move to Vault - the virus will be moved to AVG Virus Vault
Ignore - we strictly recommend NOT TO use this option unless you have a
very good reason to do so!
Page 79
79
The Resident Shield detection offers an overview of objects that were detected by the Resident Shield, evaluated as dangerous and either cured or moved to the
Virus Vault. For each detected object the following information is provided:
Infection- description (possibly even name) of the detected object
Object - object location
Result - action performed with the detected object
Object Type - type of the detected object
Process - what action was performed to call out the potentially dangerous
object so that it could be detected
In the bottom part of the dialog, under the list, you will find information on total number of detected objects listed above. Further you can export the entire list of detected objects in a file (Export list to file) and delete all entries on detected objects (Empty list). The Refresh list button will update the list of finding detected by Resident Shield. The Back button switches you back to the default AVG user
interface (components overview).
Page 80
80
10.12. Update Manager
10.12.1. Update Manager Principles
No security software can guarantee true protection from various types of threats unless it is regularly updated! Virus writers are always looking for new flaws that they can exploit in both software and operating systems. New viruses, new malware, new hacking attacks appear daily. For this reason, software vendors are continually issuing updates and security patches, to fix any security holes that are discovered.
It is crucial to update your AVG regularly!
The Update Manager helps you to control regular updating. Within this component you can schedule automatic downloads of update files either from the Internet, or the local network. Essential virus definition updates should be daily if possible. Less urgent program updates can be weekly.
Note: Please pay attention to the AVG Updates chapter for more information on update types and levels!
10.12.2. Update Manager Interface
The Update Manager's interface displays information about the component's
Page 81
81
functionality and its current status (Update manager is active.), and provides the relevant statistical data:
Latest update - specifies when and at what time the database was updated
Virus database version - defines the number of the latest virus database
version; and this number increases with every virus base update
Basic component configuration
In the bottom part of the dialog you can find the Update Manager settings section where you can perform some changes to the rules of the update process launch. You can define whether you wish the update files to be downloaded automatically (Start automatic updates) or just on demand. By default, the Start automatic updates option is switched on and we recommend to keep it that way! Regular download of the latest update files is crucial for proper functionality of any security software!
Further you can define when the update should be launched:
o
Periodically - define the time interval
o
At a specific time - define the exact day and time
By default, the update is set for every 4 hours. It is highly recommended to keep this setting unless you have a true reason to change it!
Please note: The software vendor has set up all AVG components to give optimum performance. Unless you have a real reason to do so, do not change the AVG configuration. Any changes to settings should only be performed by an experienced user. If you need to change AVG configuration, select the system menu item Tools / Advanced settings and edit the AVG configuration in the newly opened AVG
Advanced Settings dialog.
Control buttons
The control buttons available within the Update Manager interface are as follows:
Update now - launches an immediate update on demand
Save changes - press this button to save and apply any changes made in
this dialog
Page 82
82
Cancel - press this button to return to the default AVG user interface
(components overview)
10.13. AVG Security Toolbar
The AVG Security Toolbar is designed to work with MS Internet Explorer (version
6.0 or greater) and Mozilla Firefox (version 1.5 or greater).
Note: AVG Security Toolbar is not intended for server platforms!
Once installed the AVG Security Toolbar will by default be located just under your browsers address bar:
The AVG Security Toolbar consists of the following:
AVG logo button - provides access to general toolbar items. Click the logo
button to get redirected to the AVG website (www.avg.com). Clicking the pointer next to the AVG icon will open the following:
o
Toolbar Info - link to the AVG Security Toolbar home page with detailed information on the toolbar's protection
o
Launch AVG 8.0 - opens the AVG 8 user interface
o
Options - opens a configuration dialog where you can adjust your AVG Security Toolbar settings to suit your needs; the dialog is divided into
two tabs:
General - on this tab you can find two sections named Buttons and Ratings.
The Buttons section allows you to configure which buttons are visible or hidden on the AVG Security Toolbar. By default all buttons are visible.
The Ratings section allows you to determine what type of ratings do you want to be displayed for your search results. By default all ratings are visible but you may hide some of them (when searching from the Yahoo! search box, only safe results are displayed).
Page 83
83
Advanced - on this tab you can edit the AVG Security Toolbar protection features. By default, both the AVG Search-Shield and
AVG Active Surf-Shield features are enabled.
o
Update - checks for new updates for your AVG Security Toolbar
o
Help - provides options to open the help file, contact AVG technical
support, or view the details of the current version of the toolbar
Yahoo! powered search box - easy and safe way to search the web using
Page 84
84
Yahoo! search. Enter a word or phrase into the search box press Search to start the search on the Yahoo! server directly, no matter what page is currently displayed. The search box also lists your search history. Searches done through the search box are analyzed using the AVG Search-Shield protection.
AVG Active Surf-Shield button - on/off button controls the status of the
AVG Active Surf-Shield protection
AVG Search-Shield button - on/off button controls the status of the AVG
Search-Shield protection
AVG Info button - provides links to important security information located
on the AVG website (www.avg.com)
Page 85
85
11. AVG Advanced Settings
The advanced configuration dialog of AVG 8.5 Internet Security opens in a new window named Advanced AVG Settings. The window is divided into two sections: the left part offers a tree-arranged navigation to the program configuration options. Select the component you want to change the configuration of (or its specific part) to open the editing dialog in the right-hand section of the window.
11.1. Appearance
The first item of the navigation tree, Appearance, refers to the general settings of the AVG user interface and a few elementary options of the application's behavior:
Language selection
In the Language selection section you can chose your desired language from the drop-down menu; the language will then be used for the entire AVG user interface. The drop-down menu only offers those languages you have previously selected to be installed during the installation process (see chapter Custom Installation - Component
Selection). However, to finish switching the application to another language you have
Page 86
86
to restart the user interface; follow these steps:
Select the desired language of the application and confirm your selection by
pressing the Apply button (right-hand bottom corner)
Press the OK button to close the Advanced AVG Settings editing dialog
Close the AVG user interface via the system menu item option File/Exit
Re-open the AVG user interface by one of these options: double-click the AVG
system tray icon, double-click the AVG icon on your desktop, or via the menu
Start/All Programs/AVG 8.0/AVG User Interface (see chapter Access to
User Interface). The user interface will then be displayed in the newly
selected language.
Balloon tray notifications
Within this section you can suppress display of system tray balloon notifications on the status of the application. By default, the balloon notifications are allowed to be displayed, and it is recommended to keep this configuration! The balloon notifications typically inform on some AVG component's status change, and you should pay attention to them!
However, if for some reason you decide you do not wish these notifications to be displayed, or you would like only certain notifications (related to a specific AVG component) to be displayed, you can define and specify your preferences by checking/unchecking the following options:
Display system tray notifications - by default, this item is checked (
switched on), and notifications are displayed. Uncheck this item to completely turn off the display of all balloon notifications. When turned on, you can further select what specific notifications should be displayed:
o
Display tray notifications about update - decide whether information regarding AVG update process launch, progress, and finalization should be displayed;
o
Display tray notifications about scanning - decide whether information upon automatic launch of the scheduled scan, its progress and results should be displayed;
o
Display Resident Shield related tray notifications - decide whether information regarding file saving, copying, and opening processes
Page 87
87
should be displayed or suppressed;
o
Display components state change notifications - decide whether information regarding component's activity/inactivity or its possible problem should be displayed. When reporting a component's fault status, this option equals to the informative function of the system tray
icon (color changing) reporting a problem in any AVG component.
o
Display Firewall related tray notifications - decide whether information concerning Firewall status and processes, e.g. component's activation/deactivation warnings, possible traffic blocking etc. should be displayed;
o
Display E-mail Scanner related tray notifications - decide whether information upon scanning of all incoming and outgoing e-mail messages should be displayed.
11.2. Ignore Faulty Conditions
In the Ignore faulty components conditions dialog you can tick those components that you do not want to get informed about:
Page 88
88
By default, no component is selected in this list. It means that if any component get to an error status, you will be informed about it immediately via:
system tray icon - while all parts of AVG are working properly, the icon is
displayed in four colors; however, if an error occurs, the icon appears with a yellow exclamation mark,
text description of the existing problem in the Security Status Info section
of the AVG main window
There might be a situation that for some reason you need to switch a component off temporarily (this is not recommended, you should try to keep all components permanently on and in default configuration, but it may be happen). In that case the system tray icon automatically reports the component's error status. However, in this very case we cannot talk about an actual error since you have deliberately induced it yourself, and you are aware of the potential risk. At the same time, once being displayed in grey color, the icon cannot actually report any possible further error that might appear.
For this situation, within the above dialog you can select components that may be in an error state (or switched off) and you do not wish to get informed about it. The same option of Ignoring component state is also available for specific components directly from the components overview in the AVG main window.
Page 89
89
11.3. Virus Vault
The Virus Vault maintenance dialog allows you to define several parameters regarding the administration of objects stored in the Virus Vault:
Limit Virus vault size - use the slider to set up the maximum size of the
Virus Vault. The size is specified proportionally compared to the size of your
local disk.
Automatic file deletion - in this section define the maximum length of time
that objects should be stored in the Virus Vault (Delete files older than ...
days), and the maximum number of files to be stored in the Virus Vault ( Maximum number of files to be stored)
11.4. PUP Exceptions
AVG is able to analyze and detect executable applications or DLL libraries that could be potentially unwanted within the system. In some cases the user may wish to keep certain unwanted programs on the computer, (programs that were installed on purpose). Some programs, especially free ones, include adware. Such adware might be detected and reported by AVG as a potentially unwanted program. If you wish
Page 90
90
to keep such a program on your computer, you can define it as a potentially unwanted program exception:
The Potentially Unwanted Programs Exceptions dialog displays a list of already defined and currently valid exceptions from potentially unwanted programs. You edit, delete, or add new exception.
Control buttons
Edit - opens an editing dialog (identical with the dialog for new exception
definition, see below) of an already defined exception, where you can change
the exception's parameters
Remove - deletes the selected item from the list of exceptions
Add exception - open an editing dialog where you can define parameters of
the new exception to be created:
Page 91
91
o
File - type the full path to the file that you want to mark as an exception
o
Checksum - displays the unique 'signature' of the chosen file. This checksum is an automatically generated string of characters, which allows AVG to unequivocally distinguish the chosen file from other files. The checksum is generated and displayed after successful addition of the file.
o
File Info - displays any additional information available about the file (
license/version information etc.)
o
Any location - do not use full path - if you want to define this file as an exception only for the specific location, then leave this checkbox unchecked
11.5. Anti-Spam
Page 92
92
11.5.1. Settings
In the Engine performance settings dialog you can check the Turn on Anti-Spam protection checkbox to allow/forbid the anti-spam scanning of e-mail
communication.
In this dialog you can also select more or less aggressive scoring measures. The Anti-
Spam filter assigns each message a score (i.e. how similar the message content is to SPAM) based on several dynamic scanning techniques. You can adjust the Mark message as spam if score is greater than setting by either typing the value (0 to
100) or by moving the slider left or right (using the slider, the range of values is limited to 50-90).
Generally we recommended setting the threshold between 50-90, or if you are really unsure, to 90. Here is a general review of the scoring threshold:
Value 90-99 - Most incoming e-mail messages will be delivered normally
(without being marked as spam). The most easily identified spam will be filtered out, but a significant amount of spam may still be allowed through.
Value 80-89 - E-mail messages likely to be spam will be filtered out. Some
non-spam messages may be incorrectly filtered as well.
Page 93
93
Value 60-79 - Considered as a quite aggressive configuration. E-mail
messages that are possibly spam will be filtered out. Non-spam messages are likely to be caught as well.
Value 1-59 - Very aggressive configuration. Non-spam e-mail messages are
as likely to be caught as real spam messages. This threshold range is not recommended for normal use.
Value 0 - In this mode, you will only receive e-mail messages from senders in
your Whitelist. Any other e-mail messages will be considered as spam. This
threshold range is not recommended for normal use.
In the Engine performance settings dialog you can further define how the detected spam e-mail messages should be treated:
Move message to junk folder - mark this check box to specify that each
detected spam message should be automatically moved to the specific junk folder within your e-mail client;
Add recipients of sent e-mails to whitelist - tick this check box to confirm that
all recipients of sent e-mails can be trusted, and all e-mail messages coming from their e-mail accounts can be delivered;
Modify subject for messages marked as spam - tick this check box if you
would like all messages detected as spam to be marked with a specific word or character in the e-mail subject field; the desired text can be typed in the activated text field.
Control buttons
Train Anti-Spam button open the Anti-Spam training wizard described in details in the next chapter.
The first dialog of the Anti-Spam Training Wizard asks you to select the source of e-mail messages you want to use for training. Usually, you will want to use either e-mails that have been incorrectly marked as SPAM, or spam messages that have not been recognized.
Page 94
94
There are the following options to choose from:
A specific e-mail client - if you use one of the listed e-mail clients (MS
Outlook, Outlook Express, The Bat!, Mozilla Thunderbird), simply select the
respective option
Folder with EML files - if you use any other e-mail program, you should first
save the messages to a specific folder (in .eml format), or make sure that you know the location of your e-mail client message folders. Then select Folder with EML files, which will enable you to locate the desired folder in the next step
For faster and easier training process, it is a good idea to sort the e-mails in the folders beforehand, so that the folder you will use for training contains only the training messages (either wanted, or unwanted). However, it is not necessary, as you will be able to filter the e-mails later on.
Select the appropriate option and click Next to continue the wizard.
Dialog displayed in this step depends on your previous selection.
Folders with EML files
Page 95
95
In this dialog, please select the folder with the messages you want to use for training. Press the Add folder button to locate the folder with the .eml files (saved e-mail messages). The selected folder will then be displayed in the dialog.
In the Folders contain drop-down menu, set one of the two options - whether the selected folder contains wanted (HAM), or unsolicited (SPAM) messages. Please note that you will be able to filter the messages in the next step, so the folder does not have to contain only training e-mails. You can also remove unwanted selected folders from the list by clicking the Remove folder button.
When done, click Next and proceed to Message filtering options.
Specific e-mail client
Once you confirm one of the options, new dialog will appear.
Page 96
96
Note: In case of Microsoft Office Outlook, you will be prompted to select the MS Office Outlook profile first.
In the Folders contain drop-down menu, set one of the two options - whether the selected folder contains wanted (HAM), or unsolicited (SPAM) messages. Please note that you will be able to filter the messages in the next step, so the folder does not have to contain only training e-mails. A navigation tree of the selected e-mail client is already displayed in the main section of the dialog. Please locate the desired folder in the tree and highlight it with your mouse.
When done, click Next and proceed to Message filtering options.
Page 97
97
In this dialog, you can set filtering of the e-mail messages.
If you are sure that the selected folder contains only messages you want to use for training, select the All messages (no filtering) option.
If you are unsure about the messages contained in the folder, and you want the wizard to ask you about every single message (so that you can determine whether to use it for training or not), select the Ask for each message option.
For more advanced filtering, select the Use filter option. You can fill in a word (name ), part of a word, or phrase to be searched for in the e-mail subject and/or the sender's field. All messages matching exactly the entered criteria will be used for the training, without further prompting.
Attention!: When you fill in both text fields, addresses that match just one of the two conditions will be used, too!
When the appropriate option has been selected, click Next. The following dialog will be informative only, telling you that the wizard is ready to process the messages. To start training, click the Next button again. Training will then start according to previously selected conditions.
Page 98
98
11.5.2. Performance
The Engine performance settings dialog (linked to via the Performance item of the left navigation) offers the Anti-Spam component performance settings. Move the
slider left or right to change the level of scanning performance ranging between Low memory / High performance modes.
Low memory - during the scanning process to identify spam, no rules will be
used. Only training data will be used for identification. This mode is not recommended for common use, unless the computer hardware is really poor.
High performance - this mode will consume large amount of memory.
During the scanning process to identify spam, the following features will be used: rules and spam database cache, basic and advanced rules, spammer IP addresses and spammer databases.
The Enable on-line checking item is on by default. It results in more precise spam detection via communication with the Mailshell servers, i.e. the scanned data will be compared with Mailshell databases online.
Generally it is recommended to keep the default settings and only change them if you have a valid reason to do so. Any changes to this configuration
Page 99
99
should only be done by expert users!
11.5.3. RBL
The RBL item open an editing dialog called Realtime Blackhole Lists:
In this dialog you can switch on/off the Query RBL servers function.
The RBL (Realtime Blackhole List) server is a DNS server with an extensive database of known spam senders. When this feature is switched on, all e-mail messages will be verified against the RBL server database and marked as spam if identical to any of the database entries. The RBL servers databases contain the latest up-to-the-minute spam fingerprints, to provide the very best and most accurate spam detection. This feature is especially useful for users who receive large amounts of spam that is not being normally detected by the Anti-Spam engine.
The RBL servers list allows you to define specific RBL server locations.
Note: Enabling this feature may, on some systems and configurations, slow down the e-mail receiving process, as every single message must be verified against the RBL server database.
Page 100
100
No personal data is sent to the server!
11.5.4. Whitelist
The Whitelist item opens a dialog with a global list of approved sender e-mail addresses and domain names whose messages will never be marked as spam.
In the editing interface you can compile a list of senders that you are sure will never send you unwanted messages (spam). You can also compile a list of full domain names (e.g. avg.com), that you know do not generate spam messages.
Once you have such a list of senders and/or domain names prepared, you can enter them by either of the following methods: by direct entry of each e-mail address or by importing the whole list of addresses at once. The following control buttons are available:
Edit - press this button to open a dialog, where you can manually enter a list
of addresses (you can also use copy and paste). Insert one item (sender, domain name) per line.
Import - if you already have a text file of email addresses/domain names
prepared, you can simply import it by selecting this button. The input file
Loading...