Avira ANTIVIR PROFESSIONAL Support 03-2010

Avira AntiVir Professional

Support

March 2010

www.avira.com

Errors in design and contents cannot be excluded

© Avira GmbH

Content

1. Setup...................................................................................................................... 3

2. Configuration ...................................................................................................... 11

2.1. Installing modules / uninstalling modules .............................................................11

2.2. Configuration of the Update to the Internet Update Manager ...............................11

2.3 Configuration of Product Updates ..........................................................................14

2.4 Setting exceptions ....................................................................................................14

2.4. Configuration Profiles .............................................................................................16

3. Creating jobs in the scheduler .......................................................................... 19

4. Different scan profiles ........................................................................................ 21

5. Quarantine ........................................................................................................... 24

6. Quick Tips ........................................................................................................... 28

Avira AntiVir Professional | HowTo

This document will support you to install and configure Avira AntiVir Professional in
an optimal way. It contains important and helpful configuration possibilities and
recommendations of the Avira Support. Also the given tips e.g. for procedures in
case of virus attacks are very useful.

You will find all necessary files for installation and the manuals as PDF files ready for
download on our website:

http://www.avira.com (http://www.avira.com/en/download/index.html).

1. Setup

On our website you will find two setup packages. The so-called web loader with
approx. 800 KB and the complete installation package with approx. 45 MB.

1.1 Web loader

The web loader downloads all the up-to-date program files from the web servers
before the installation is executed. This procedure guarantees that Avira AntiVir
Professional is installed with the up-to-date virus definition files.

1.2 Complete Installation Package

The installation package contains the installation program as well as all necessary
program files. This installation package doesn’t offer a language selection for the
Avira AntiVir Professional. So you have to select our English website first. On the
English website the corresponding software package is offered. Here the included
files might not be up-to-date.
We recommend an update immediately after the installation to make sure that all the
files are up-to-date.

After having downloaded the installation files of the Avira AntiVir Professional,
please, first start the installation of Avira AntiVir Professional with a double click:
(avira_antivir_professional.exe or avira_antivir_professional_en.exe)

Please, click on next in the menu of the assistant that appears afterwards. In case
you have chosen the web loader you can now select the language version you need.

Status: March 2010 3

Avira AntiVir Professional | HowTo

Now the web loader downloads the necessary program files and virus definition files.

Status: March 2010 4

Avira AntiVir Professional | HowTo

Afterwards you can choose a setup type:

Express:

• Avira AntiVir Professional will be installed completely with all program
components (modules)

• The program files are installed in the given default directory:
C:\Program Files\Avira\AntiVir Desktop

Custom:

• You can choose a target folder for the program files which have to be installed

• You have the possibility to choose program components / modules for the

installation

• You can deactivate the creation of a desktop icon and a program group in the
start menu

In the custom setup you can choose the following modules.

• AntiVir Guard (permanent scanning of all file accesses in real time)

• AntiVir MailGuard (permanent scanning of all incoming and outgoing emails

(POP3, IMAP, SMTP) including attachments)

• AntiVir ProAcitv (Rule-based control over incoming and outgoing Internet
traffic)

• AntiVir WebGuard (permanent protection against viruses and malware via
browser)

• Shell Extension (direct scanning of files and directories in the Windows
Explorer)

Status: March 2010 5

Avira AntiVir Professional | HowTo

Avira AntiVir ProActiv is a new behavior based detection technology developed by
Avira which is integrated from Version 10 on. ProActiv protects your computer
against new and unknown malware which isn’t yet detected by virus definitions and
heuristics.

Avira AntiVir ProActiv monitors the system in real time and detects attacks as soon
as they are started. Sensors are continuously supervising the system and look for
unusual behavior. The ProActiv component uses rule sets in order to identify
malicious behavior. These rule sets have been developed by the Avira Malware
Research Center and are constantly provided with new data by the Avira data base.
Avira AntiVir ProActiv sends information about detected suspicious programs to the
data base. You have the possibility to deactivate this data transfer to the Avira data
base. In case a program shows a malicious behavior, it is treated and reported just
as malware.

Hint: The ProActiv Technology is not yet available for 64 bit systems. Windows 2000
is not supported.

Status: March 2010 6

Avira AntiVir Professional | HowTo

The MailGuard is needed if you receive and send your emails via POP3, SMTP or
IMAP.

You can delete the MailGuard as a module in case one of the following points is
fulfilled:

• If you have the email traffic already scanned on an email server, e.g. by
AntiVir Exchange or AntiVir MailGate

• If you receive emails via webaccess, that means e.g. you get your emails
directly on gmx.com or web.com etc.

You protect yourself against viruses and malware which are downloaded on your
computer from websites with the WebGuard.

• The WebGuard can be deleted as a module, if the http traffic is already
scanned, e.g. by AntiVir ISA Server or AntiVir MailGate

Afterwards the windows “Install license” appears.
Choose the directory where you have saved the license file “hbedv.key”.

As soon as you have finished the installation, the configuration assistant appears.
The assistant leads you through the basic settings of the Avira AntiVir Professional.
In the next dialogue window you can configure the engine and choose the detection
level for the AHeAD technology. The chosen detection level is used for the settings of
the AHeAD technology of the scanner (direct scan) and of the guard (real-time scan).

Status: March 2010 7

Avira AntiVir Professional | HowTo

Please, be aware that a high detection level detects a large quantity of
unknown malware, but it also increases the risk of false positives.

What does heuristic mean?

Heuristic is a method of detection which is able to detect unknown viruses. A
profound analysis of the code looks for functions which are typical for viruses. In case
the examined code has suspicious characteristics, AntiVir indicates the suspicious
file. This doesn’t mean that the code is really a virus, false positives are possible.

In the following menu you can choose the extended threat categories, which will be
detected:

These options are activated by default as the risks of adware/spyware and back-door
control software, phishing and dialers are very high. However, many administrator
tools are detected by Avira as “Security Privacy Risk”. AntiVir cannot distinguish if a
suspicious program is used intentionally by an admin. This is why we excluded
application, SPR and games from the default settings.

You can find an overview of all threat categories and their meaning in the quick tips
at the end of this document.

Status: March 2010 8

Avira AntiVir Professional | HowTo

Please, choose the start mode of the AntiVir Guard afterwards. You can choose
between the normal and the safe start.

Using the “normal” start the guard gets started in the normal, automatic mode. This is
the recommended start mode.

Using the “safe start” the guard is loaded as soon as possible. This increases the
security level but the start needs more time.

Some viruses are loaded directly with the operation system. So they might be already
active before the AntiVir Guard is loaded.

Using the safe start, the guard is started at first. Not until the guard is loaded
completely and works the start of the other component is continued. So there is more
time needed for the system start.
In the following configuration dialogue you can enter the server settings for the
emails.

Avira AntiVir Professional forwards its emails via SMTP in order to send email alerts
from the different modules, guard, scanner and updater. In case you don’t know the
data of your SMTP server or you don’t want to use this option, you can leave the
relevant boxes empty.

Status: March 2010 9

Avira AntiVir Professional | HowTo

Afterwards you can choose the option “Short system scan after installation” in order
to scan your computer directly after the installation.

Status: March 2010 10