Avira Premium Security Suite manual

Av ir a P r emium Sec ur it y S uit e User Manua l[...]

Trademarks and Copyright Trademarks AntiVir is a r egistered trademark of Avira GmbH. Windows is a regi stered trademark of the Micro soft Corporation in the United States and other countrie s. All other bra nd and product na mes are trademarks or registered trademarks of their respective owners. Protected trademarks are not marked as such in this [...]

ii T abl e of Contents 1 Introdu c tion .......................................................................................................... 1 2 Icons and emphases ................................................................................................ 2 3 Produ c t information..........................................................[...]

Table of Contents iii 6 Scanner::Over view ............................................................................................... 41 7 Updates ................................................................................................................ 42 8 Avir a Firewall::Over view .....................................................[...]

Avira Premium Security Suite iv 13.3.2.3. MailGuard ....................................................................................................... 88 13.3.2.4. Footer .............................................................................................................. 89 13.3.3 Report ..............................................[...]

1 1 Intr oduction Avira Premium Security Suite from Avira GmbH protects yo u computer against viruses, malware, adware and spy ware, unwanted programs and ot her dangers. This manual deals with viruses and software in brief. The manual describes the progra m installation an d operation. Please go to ou r website http://www.avira.com wh ere you can [...]

2 2 Ic ons and emphases The following icons ar e used: Icon / Designation Explanation Placed before a condition whi ch must be fulfilled prior to implementation. Placed before an action step that you implement. Placed before an event that follows the previous action. Warning Placed before a warning of the danger of critical data loss. Note Placed b[...]

3 3 Pr oduct information This chapter contains all info rmation relevant to the pur chase and use ofAvira Premium Security Suite: – see chapter: Delivery scope – see chapter: System requirements – see chapter: Licensing – see chapter: License Manager Avira Premium Security Suite is a comprehens ive and flexible tool you can rely on to prote[...]

Avira Premium Security Suite 4 – Integrated quarantine management to isolate and process suspicious files – Rootkit protection for detecting hidd en malware installed in your computer system (rootkits) (Not available under Windows XP 64 bit) – Direct access to detailed information on the detected viruses an d malware via the Internet – Simp[...]

Product information 5 On Windows 2000 and Windows XP, m any users work with administrator rights. However, this is not desirable from the point of view of security, becaus e it is then easy for viruses and unwanted progra ms to infiltrate computers. For this reason, Microsoft is introducing the "User Account Control" with Windows Vista. T[...]

6 4 Inst allation and uninstallation This chapter contains information relating to the installation and uninstallation of your Avira Premium Security Suite: – see Chapter Installation: Conditions , Installation types, Install – see Chapter Installation modules – see Chapter Modification installation – see Chapter Uninstallation: Uninstall 4[...]

Installation and uninstallation 7 – Using the configuration wizard, you can define custom settings for Pre mium Security Suite and initiate a short system scan which is carried out automatically after installation. Before starting installation  Close your email program. It is also reco mmended to end all running applications.  Make sure tha[...]

Avira Premium Security Suite 8 Note The following actions f or disabling the Windows Fir ewall only apply to the Windows XP operating system.  Start the installation program by double-cli cking on the installation file you have downloaded fr om the Internet or ins ert the program CD. Internet-based installation The dialog box Welcome... appears.[...]

Installation and uninstallation 9 In the following dialog box you can deci de whether to create a desktop sh ortcut and/or a program group in the Start menu.  Click Next .  Skip the following section "Express installation". Express installation If Windows Firewall is installed, a messag e appears indicating it must be disabled to av[...]

Avira Premium Security Suite 10  Skip the following chapter on "Activate by selecting t he option Valid hbedv.key available ". Select the option "Valid hbedv.key available" A box will be opened for loading the license file.  Select the license file hbedv.key with your license data for Premium Security Suite and click Open [...]

Installation and uninstallation 11 parental controls dialog box appears. You can stipul ate the Guard start time. At each computer reboot, the Guar d will be started in the start mode specified. You have the option of assigning diff erent roles – child, young person, ad ult – to computer users for Internet use. You can di sable parental control[...]

Avira Premium Security Suite 12 4.3 Installation modules In a user-defined inst allation or a modifica tion installation, the foll owing installation modules can be selected, added or removed. – Premium Security Suite This module contains all components requ ired for successful installation of Avira Premium Security Suite. – AntiVir Guard The A[...]

Installation and uninstallation 13 The Backup component lets you create mi rror backups of your data manually and automatically. 4.4 Uninstallation If you wish to remove Avira Premium Securi ty Suite from your computer, you can use the option Add or Remove Programs to Cha nge/Remove programs in the Windows Control Panel. To uninstall Avira Premium [...]

14 5 Overvie w of Pr emium Security Suite This chapter contains an overview of th e functionality and operation of Premium Security Suite. – see Chapter Interface and operation – see ChapterHow to...? 5.1 User interface and operation Your operate Premium Securit y Suite via three program interface elements: – Control Center: Monitoring and c [...]

Overview of Premium Security Suite 15 – Navigation area: In the navigation ar ea, you can easily swap between t he individual sections of the Control Ce nter . The individual sections contain information and functions of the prog ram components of Pr emium Security Suite and are arranged in the navigation bar acc ording to activity. Example: Acti[...]

Avira Premium Security Suite 16 – The Status section lets you see at a gla nce which Avira Premium Security Suite modules are active and provides infor matio n on the last update carried out. You can also see whether y ou own a valid license. – The Events section enable s you to view events generated by cert ain Avira Premium Security Suite mod[...]

Overview of Premium Security Suite 17 5.1.2 Configuration You can define Premium Security Suite settings in th e Configuration. After installation, Premium Security Suite is configured with standar d settings, ensuring optimal protection for your computer system. However, your computer system or your specific requirements for Premium Security Suit [...]

Avira Premium Security Suite 18 Navigate in the configuration window as you would in Windows Explorer:  Click on an entry in the tree structure to display this configuration section in the detail window  Click on the plus symbol in front of an en try to expand the conf iguration section and display configuration subsections in the tree struct[...]

Overview of Premium Security Suite 19 On-access scan exceptions On-access scan heuristics Report function setting – MailGuard : Configuration of MailGuard Scan options: Enable the monitoring of POP3 accounts, IMAP accounts, outgoing emails (SMTP) Actions on malware MailGuard scan heuristics AntiBot function: Permitted SMTP servers, permitted emai[...]

Avira Premium Security Suite 20 Password protection for access to th e Control Ce nter and the Configuration Security: Update status displa y, full system scan status display, product protection WMI: Enable WMI support Event log configuration Configuration of report functions Setting of directories used Update: Configuration of co nnection to downl[...]

Overview of Premium Security Suite 21 5.2 How to...? 5.2.1 Activate product To activate Avira Premium Security Suite, you hav e the following options: – Activation with a valid full license To activate Avira Premium Security Suit e with a full license, you need a valid activation key, which holds data of the license you have purchased. You have r[...]

Avira Premium Security Suite 22 5.2.2 Avira Premium Security Suite autom atic update To create a job with the AntiVir Scheduler to update Avira Premium Security Suite automatically:  In the Control Center, select the Management :: Scheduler section.  Click on the Create new job with the wizard icon. The dialog box Name and description of job [...]

Overview of Premium Security Suite 23 Use the following icons to further define your jobs: View properties of a job Modify job Delete job Start job Stop job 5.2.3 Start a manual update You have various options for starting an Av ira Premium Security Suite update manually: When an update is started manually, the vi rus definition file and search eng[...]

Avira Premium Security Suite 24 if the predefined sca n profile corresponds to your requirements. – Customize and apply scan profile (man ual selection) if you want to scan with a customized scan profile. – Create and apply new sca n profile if you want to create your own scan profile. Depending on the operating system, various icon s are avail[...]

Overview of Premium Security Suite 25 The following options ar e available, Select directories: – Directory, including sub-dire ctories (black check mark) – Directory excluding sub-dire ctories (green check mar k) – Sub-directories of one direct ory only (grey check mark, sub- directories have black check marks) – No directory (no check mar[...]

Avira Premium Security Suite 26 5.2.7 On-demand scan: Automatically scan for viruses and malware Note After installation, the scan job Full system scan is created in the Sc heduler: A full system scan is automatically carried ou t at a recommended interval. To create a job to automatically scan for viruses and malware:  In the Control Center, se[...]

Overview of Premium Security Suite 27 Your newly created order appears a s acti vated (check mark) on the homepage of the section Administration :: Scheduler .  Where appropriate, deactivate jobs which are not to be carried out. Use the following icons to further define your jobs: View properties of a job Modify job Delete job Start job Stop job[...]

Avira Premium Security Suite 28 – Automatic In automatic action mode, when a virus or unwanted program is detected, the action you selected in this area is executed automatically. Action options for the Guard: – Interactive In interactive action mode, data access is denie d and a deskto p notification is displayed. In the desktop notification y[...]

Overview of Premium Security Suite 29 The file is overwritten with a default template and then dele ted. It cannot be restored. – Rename The file is renamed with a *.vir exte nsion. Direct access to these files (e.g. with double-click) is therefore n o longer possible. Files can be repaired and given their original name at a later time. – Ignor[...]

Avira Premium Security Suite 30 MailGuard actions: Incoming emails – Move to quarantine The email including all attachments is move d to qua rantine. The affected email is deleted. The body of the text and any at tachments of the email are replac ed by a default text. – Delete The affected email is del eted. The body of the text and any attachm[...]

Overview of Premium Security Suite 31 The website requested from the web server and/ or any data or files transferred are moved to quarantine. The affected file can b e recovered from quarantine manager if it has an informative value or - if necessa ry - sen t to the Avir a Malware R esearch Center. – Ignore The website request ed from the web se[...]

Avira Premium Security Suite 32 A dialog opens with a form for inputting your contact data.  Ente r all the required data.  Select a type: Suspicious file or False positive .  Click OK. The file is uploaded to a Av ira Ma lware Research Cen ter web server in compressed form. Note In the following ca ses, analysis by the Av ira Malware Rese[...]

Overview of Premium Security Suite 33 This icon restores the fil es to a directory of your choice. – In Windows Vista: In Microsoft Windows Vista, the control center at the moment on ly has limited rights, e.g. for access to directories and fi les. Certain actions and file accesses can only be carried out in the control centre with extended admin[...]

Avira Premium Security Suite 34 5.2.12 Quarantine: move suspicio us files to quarantine To move a suspect file t o quarantine manually:  In the Control Center, select the sectio n Administration :: Quarantine .  Click on . . The Windows def ault window for selecting a file appears.  Select the file and confirm. The file is moved to quarant[...]

Overview of Premium Security Suite 35 5.2.15 Events: Fi lter events Events that have been gene rated by Premium Security Suite program components are displayed in the Control Center under Overview :: Eve nts (analogous to the event display of your Windows operating sy stem). The program components are: – Updater – Guard – MailGuard – Scanne[...]

Avira Premium Security Suite 36 for viruses, malware or spam . Warning Only exclude email addresses from t he Mail Guard scan if the send ers are completely trustworthy. Note Under MailGuard :: General :: Exceptions in the configuration, you can add more email addresses to the exclusion list or re move email addresses from the list. 5.2.17 MailGuar[...]

Overview of Premium Security Suite 37 Note The default security level setting for all predefined rules of the Avira Firewall is High To define the security le vel for the Firewall:  Go to Control Center and select the section Online protection :: Firewall .  Move the slider to the required security level. The selected security leve l is appli[...]

Avira Premium Security Suite 38  Highlight the nodes and directories to be saved by clicking on the box of the respective directory level: The following options ar e available, Select directories: – Directory, including sub-dire ctories (black check mark) – Directory excluding sub-dire ctories (green check mar k) – Sub-directories of one d[...]

Overview of Premium Security Suite 39 – Daily – Weekly – Interval – Single – Login – Plug&Play A backup is always create d for the Plug&Play event if t he removable disk selected as the save location of the backup pr ofile is connected to the comput er. The backup event Plug&Play re quires a USB stick to be ent ered as a sav[...]

40[...]

Scanner::Overview 41 6 Sc anner::Overview With the Scanner component, you can carry out targeted scans (on-demand scans) for viruses and unwanted programs. The following options are available for scanni ng for infected files: – On-demand scan via context menu The on-demand-scan via th e context menu (right-hand mouse butt on - entry Scan selected[...]

42 7 Updates The effectiveness of ant i-virus software depends on h ow up-to-date the program is, in particular the virus definition file and th e search engine. To carry out updates, the Updater component is integrated into Premium Security Suite. The Updater ensures that Avira Premium Security Suite is always up-to-date and able to deal with the [...]

43 8 A vira Fir ewall::Ove rview Avira Firewall monitors and regulates inco ming and outgoing data traffic on y our computer system and protects you from a wi de range of attacks and threats from the Internet: Based on s ecurity guidelines, incoming or outgoing data traffic or listening to ports will be allowed or de nied. You will receive a deskto[...]

44 9 Backup There are various options available to you for creating a backup of your data: Backup via the backup tool You can use the backup tool to select or crea te backup profiles and start a backup of a selected profile manually. Backup via a backup job in Scheduler Scheduler gives you the op tion of creating scheduled or event-co ntrolled back[...]

45 10 FA Q , T i p s This chapter provides a collection of frequent ly asked questions (FAQs) relating to Avira Premium Security Suite, a troubleshooting se ction and tips and tricks for using Avira Premium Security Suite. see Chapter Troublesho oting see Chapter Keyboard commands see ChapterWindows Security Center 10.1 Troubleshooting Here you wil[...]

Avira Premium Security Suite 46 Check your settings in the Configuration (expert mode) under Gene ral :: Update. Viruses and malware cannot be moved or deleted. Reason: The file wa s loaded by windows and is active. Update Avira Premium Security Suite. If you use the operating s ystem Wind ows XP, deactivate System Restore. Start the computer in Sa[...]

FAQ, Tips 47 Define a general approval for AntiVir Guard an d AntiVir MailGuard. AntiVir Guard only works with the address 127.0.0.1 (localho st). An Internet connection is not established. The same applies to AntiVir MailGuard. AntiVir MailGuard does not work. Please check correct functioning of AntiVi r MailGuard with the aid of the following che[...]

Avira Premium Security Suite 48 Reason: The virtual machine emulates throug h software a network card. Thi s emulation encapsulates the data pac kages of the guest system in special packages (UDP packages) and routes them via th e external gateway back to the host system. Avira Firewall rejects these packages coming fro m outside, starting from sec[...]

FAQ, Tips 49 Reason: WebGuard checks the data sent comp letely for viruses an d undesired programs first of all, before the data are loaded into the web browser. Durin g a data transfer with ’transfer-encoding= chunked’, WebGuard cannot determine the message length or the data volume. Enter the configuration of the URL of the web chat s as an e[...]

Avira Premium Security Suite 50 10.2.2 In the help Shortcut Description Alt + Space Display system menu. Alt + Tab Shift between the h elp and the other opene d windows. Alt + F4 Close help. Shift + F10 Display context menu of the help. Ctrl + Tab Go to next section in the navigation w i ndow. Ctrl + Shift + Tab Go to previous section in the naviga[...]

FAQ, Tips 51 Shortcut Description Return Properties Quarantine section Shortcut Description F2 Rescan object F3 Restore object F4 Send object F6 Restore object to... Return Properties Ins Add file Del Delete object Scheduler section Shortcut Description F2 Edit job Return Properties Ins Insert new job Del Delete job Reports section Shortcut Descrip[...]

Avira Premium Security Suite 52 10.3 Windows Security Center - Windows XP Service Pack 2 or higher - 10.3.1 General The Windows Security Center checks the status of a comput er for important security aspects. If a problem is detected with one of these im portant points (e.g. an outdated anti-virus program), the Security Center issu es an alert and [...]

FAQ, Tips 53 You may receive the follow ing information from the Windows S ecurity Center with regard to your virus protection. Virus protection NOT FOUND Virus protection OUT OF DATE Virus protection ON Virus protection OFF Virus protection NOT MONITORED Virus protection NOT FOUND This information of the Windows Security Cent er appears when the W[...]

Avira Premium Security Suite 54 Avira Premium Security Suite is now up to date and the AntiVir Guard is enabled. Virus protection OFF You receive the following message if you di sable the AntiVir Guard or stop the Guard service. Note You can enable or dis abled AntiVir Guard in the Overview :: Status section of theAvira Premium Security Suite Contr[...]

55 11 Viruses and mor e 11.1 Extended threat categories Dialers (DIALERS) Certain services available in the Internet ha ve to be paid for. They are invoiced in Germany via dialers with 0190/0900 number s (or via 09x0 numbers in Austria and Switzerland; in Germany, the number is se t to change to 09x0 in the medium term). Once installed on th e comp[...]

Avira Premium Security Suite 56 Studies have shown that the numb er of working hours devoted to computer games has long reached economically significant proporti ons. It is theref ore not surprising that more and more compani es are considering ways of banning computer games from workplace computers. Avira Premium Security Suite detects computer ga[...]

Viruses and more 57 Avira Premium Security Suite detect s "Adware/Spyware". If the option Adware/Spyware is enabled with a check mark in the configuration under Extended threat categories, you receive a correspond ing alert if Avira Pr emi um Security Suite detects such software. Unusual Runtime Compression Tools (PCK) Files that have bee[...]

Avira Premium Security Suite 58 Adware is software that presents banner ads or in pop-up window s through a bar that appears on a computer screen. These advertisements usually cannot be r emoved and are consequently alway s visible. The connection data allo w many conclusions on the usage behavior and are problematic in terms of data security. Back[...]

Viruses and more 59 A honeypot is a service (program or serv er) in stalled in a network. It has the function to monitor a network and to protocol attacks. This service is unknown to the legitimate user - because of this r eason he is never addres sed. If an attacker examines a n etwork for the weak points an d uses the services which are offered b[...]

Avira Premium Security Suite 60 A rootkit is a collection of software tools th at are i nstalled after a computer system has been infiltrated to conceal logins of the i n filtrator, hide proces ses and r ecord data - generally speaking: to make themselves invisible. They attempt to update already installed spy programs and rein stall deleted spywar[...]

61 12 Info and Servic e This chapter contains information on how to contact us. see Chapter Contact address see Chapter Technical support see Chapter Suspicious files see Chapter Report false positives see Chapter Your feedback for mor e security 12.1 Contact address If you have any questions or requests co ncerning the Avira Premi um Security Suit[...]

Avira Premium Security Suite 62 – Send the requ ired file packed (WinZIP, PKZip, Arj etc.) in the att achment of an email to virus-premium-suite@avira.com. As some email gateway s work with anti- virus software, you should also provid e th e file(s) with a password (please remember to tell us the passwo rd). You can also send u s the suspect file[...]

63 13 Refer ence: Configur ation options The configuration reference documents all configuration options available in Avira Premium Security Suite. 13.1 Scanner The Scanner section of the Configuration is responsi ble for the configuration of t he on- demand scan. 13.1.1 Scan Here you define the basic behavior of the scan routine for an on-demand s[...]

Avira Premium Security Suite 64 Note If this option is enabled and you have de leted all entries from the list with file extensions, this is indicated with the te xt "No file extensions" under the button File extensions . File extensions With the aid of this button, a dialog window is opened in which all file extensions are displayed that[...]

Reference: Configuration options 65 Important The option does not include any shortcuts, but refers exclusively to symbolic links (generated by mklink.exe) or Junction Poin ts (generated by junction.exe) which are transparent in the file system. Search for Rootkits before scan If this option is enabled an d a scan is st arted, the scanner sc ans th[...]

Avira Premium Security Suite 66 If this option is enabled, the results of th e Scanner scan are displayed in a dialog b ox. When carrying out a scan with the Scanner, you will receive an alert wit h a list of the affected files at the end of the scan. You can use the content-s ensitive menu to select an action to be execut ed for the various infect[...]

Reference: Configuration options 67 If this option is enabled, the Scanner move s the file to the quarantine . These files can later be repaired or - if necessary - sent to the Avira Malware Research Center. Secondary action The option Secondary action can only be selected if the setting Repair was selected under Primary action . With this option i[...]

Avira Premium Security Suite 68 Limit recursion depth Unpacking and scanning recursive archives can require a great deal of computer time an d resources. If this option i s enabled, you limit the depth of the scan in multi-packed archives to a certain number of packing levels (maximum recursion depth). This saves time and computer resources. Note I[...]

Reference: Configuration options 69 The button opens a window in which you can select the required fi le or the required path. When you have entered a file name with its co mplete path, only this file is not scanned for infection. If you have en tered a file name without a path, all files with this name (irrespective of the path or drive) are not s[...]

Avira Premium Security Suite 70 Medium detection level This setting is activated by default if you have selected the use of this heuristic. High detection level If this option is enabled, Avira Premiu m Security Suite dete cts much more unknown malware, however fal se positives can also be expected. 13.1.2 Report The Scanner has a comprehensive rep[...]

Reference: Configuration options 71 Scan mode Here the time for scanning of a file is defined. Scan when reading If this option is enabled, the Guard scans the files before they ar e read or executed by t he application or the operati ng system. Scan when writing If this option is enabled, the Guard scans a fi le when writing. Y ou can only access [...]

Avira Premium Security Suite 72 Scan archives If this option is enabled, then archives wi ll be scanned. Compressed files are scanned, then decompressed and sc anned again. This op tion is deactivated by default. The archive scan is restricted by th e recursion depth, the number of fil es to be scanned and t he archive size. You can set the maximum[...]

Reference: Configuration options 73 Primary action is the action carried out when the Guard finds a virus or an unwant ed program. If the option repair is selected but a repair of th e file involved is not possible, the action selected under Secondary acti on is carried o ut. Note The option Secondary action can only b e select ed if the option Re [...]

Avira Premium Security Suite 74 If this option is enabled, the Guard renames th e file. Direct access to these files (e.g. with double-click) is therefore n o longer possible . Files can later be re paired and given their original names again. ignore If this option is enabled, a ccess to the file is allowed an d the file is left as it is. Warning T[...]

Reference: Configuration options 75 13.2.1.3. Exceptions With these options you can configure exceptio n objects for the Guard (on-access scan). The relevant objects are t hen not included in the on- access scan. The Guard can ignor e file accesses to these objects during the on-a ccess scan via the list of proc esses to be omitted. This is useful,[...]

Avira Premium Security Suite 76 Note For each drive you can specify a maximum of 20 exceptions by entering the c omplete path (starting with the drive letter). E.g.: C:Program FilesApplicationName.log The maximum number of exceptions without a complete path is 64. For example: *.log The button opens a window in which you can select the file obje[...]

Reference: Configuration options 77 Note You can locate the path Guard uses to scan for infected files in the Guard re port file. Indicate exactly the same path in the list of exceptions. Pr oceed as follows: set the protocol function of Guard to Complet e in the configuration under Guard :: Report. Now access the files, folder s, mounted drives wi[...]

Avira Premium Security Suite 78 Advanced Heuristic Analysis and Detection (AHeAD) enable AHeAD Avira Premium Security Suite contains a very powerful heuristic in the form of AntiVir AheAD technology, which can also detect un known (new) malware. If this option is activated, you can define how "aggressi ve" this heuristic should be. This o[...]

Reference: Configuration options 79 If this option is enabled, AntiVir ProActiv e sends data on the program actions to the Avira databases. After evaluation, these da ta are added to the ProActive behavioral analysis rule sets. In this way, you become part of the Avira ProActive communit y and contribute to the continuous improvement and refinement[...]

Avira Premium Security Suite 80 13.2.2.2. Application filter: Pe rmitted applications The section Application filter: Permitted applications lists the applications excluded from monitoring by the ProActiv component: si gned programs classified as trusted and included in list by default, all applicatio ns classified as trusted and added to the appli[...]

Reference: Configuration options 81 13.2.3 Report Guard includes an extensi ve logging function to prov ide the user or administrator with exact notes about the type and manner of a detection. Guard includes an extensive logging function to provide the user or administrator with exact notes about the type and manner of a detection. This group allow[...]

Avira Premium Security Suite 82 13.3.1 Scan Use MailGuard to scan incoming emails for viruses and mal ware and for spam. Outgoing emails can be scanned f or viruses and malwar e by MailGuard. Outgoing emai ls which are spam sent from an unknown bot on your computer can be blocked by MailGuard to prevent spam. Scan Scan incoming emails If this optio[...]

Reference: Configuration options 83 Note These actions are perf ormed both when a virus is det ected in incoming emails and when a virus is detected in outgoing emails. Action for concerning files Interactive If this option is enabled, a dialog windo w appears when a virus or unwante d program is detected in an email or attachment in which you can [...]

Avira Premium Security Suite 84 If this option is enabled, the attachment is ignored despite dete ction of a virus or unwanted program and delive red. Warning If you select this option, you have no prot ection against viruses and unwanted programs by the MailGuard. Only select this item if you are certain you know what you are doing. Disable the pr[...]

Reference: Configuration options 85 Macrovirus heuristic Activate macrovirus heuristics Avira Premium Security Suite co ntains a highly powerful macro virus heuristic. If this option is enabled, all macros in the relevant document are deleted in the event of a repair, alternatively suspect documents are only reported, i.e. you receive an alert. Thi[...]

Avira Premium Security Suite 86 Note You can find details of the SMTP server used by your email progra m to send emails in your email program under the date t he user account was created. Add You can use this button to include servers specified in the input box in the list of permitted servers. Delete This button deletes a highlighted entry from th[...]

Reference: Configuration options 87 This email address will no l onger be scanned for malware. This email address will not be scanned for malware or spam. Email address Email that is no longer to be scanned. Malware When this option is enabled, the email address is no longer scanned for malware. Spam When this option is enabled, the email address i[...]

Avira Premium Security Suite 88 With this button you can add the email addres s entered in the input box to the list of email addresses not to be scanned. Delete This button deletes a highlighted email address from the list. Import Outlook address book With this button you import the email addr esses from the address book of the MS Outlook email pr[...]

Reference: Configuration options 89 Mark email subje ct When this option is enabled, a note is adde d t o the original subject line when a spam email is detected. Simple If a spam or phishing email is received, an addendum [SPAM] or [P hishing] is added. This option is enabled as the default setting. Detailed The subject line of a spam of phishing [...]

Avira Premium Security Suite 90 Attach this footer If this option is enabled, the text which yo u insert into the input box is displayed as a footer in sent emails. Input box If this option is enabled, the text which yo u insert into the input box is displayed as a footer in sent emails. 13.3.3 Report MailGuard includes an extensive logging func ti[...]

Reference: Configuration options 91 13.4 Firewall The Firewall section of Configuration is re sponsible for configuration of the Avira Firewall. 13.4.1 Adapter rules In the Avira Firewall, an a dapter represents a software simulated hardware device (e.g. miniport, bridge connection, etc.) or a real hardwar e device (e.g. network card). The Avira Fi[...]

Avira Premium Security Suite 92 Outgoing blocked type: no types/several types With a mouse click on the link a list of I CMP packet types is displa yed. From this list you can select the desired outgoing ICMP message types you want to block. Flooding With a mouse click on the link a dialog box is displayed wh ere you can enter the maximum allowed I[...]

Reference: Configuration options 93 With this rule you can defi ne when a UDP port scan is assumed by the Firewall and what should be done in this case. This rule prev ents so-called UDP port scan attacks, which result in a detection of op en UDP ports on your com puter. This kind of attack is used to search a computer for weak sp ots and is ofte n[...]

Avira Premium Security Suite 94 0.0.0.0 if local ports in {135} and remote ports in {0-65535} . Apply for packets of existing connections . Don't log when packet matches rule. Advanced: Discard packets that have following bytes <empty> with mask <empty> at offset 0 . – Deny TCP packets on 135 Deny TCP packets from address 0.0. 0.[...]

Reference: Configuration options 95 65535} and remote ports in {0-65535} . Apply for connection initiation and existing connection packets. Don't log when packet matches rule. Advanced: Discard packets that have following bytes <empty> with mask <empty> at offset 0 . – Deny all TCP packets Deny TCP packets from address 0.0. 0.0 w[...]

Avira Premium Security Suite 96 IP address By clicking on this link wit h the mouse, a dialog window open s in which you can enter the required IP address. IP mask By clicking on this link wit h the mouse, a dialog window open s in which you can enter the required IP mask. Local ports With a mouse click on this link a dialog box appears in which yo[...]

Reference: Configuration options 97 open ports . Don't log when packet matches rule. Advanced: Discard packets that have following bytes <empty> with mask <empty> at offset 0 . – Deny all UDP packets Deny UDP packets from address 0.0. 0.0 with mask 0.0.0.0 if the local port is in range {0-65535} and the remote port is in range {0[...]

Avira Premium Security Suite 98 With a mouse click on this link a dialog bo x appears in which you can define the remote port number(s) or complete port ranges. Application method With a mouse click on this link you have the ch oice to apply this rule to all ports or only to all opened ports. Report file By clicking on the link with the mouse you c[...]

Reference: Configuration options 99 By clicking on this link wit h the mouse, a dialog window open s in which you can enter the required IP address. IP mask By clicking on this link wit h the mouse, a dialog window open s in which you can enter the required IP mask. Report file By clicking on the link with the mouse you can decide whether to write [...]

Avira Premium Security Suite 100 Possible rules for monitoring IP packages based on IP protocols IP packages By clicking on the link with the mouse, you can decide whether y ou want to accept or reject specially defined IP packages. IP address By clicking on this link wit h the mouse, a dialog window open s in which you can enter the required IP ad[...]

Reference: Configuration options 101 13.4.2 Application rules Application rules for user This list contains all user s in the system. If you are logged in as an administrator, you can select the user you want to apply the rules for. If you are not a privileged us er, you can see only the user currently logged on. Application list This table shows t[...]

Avira Premium Security Suite 102 Action Shows the action that the Avira Firewall will automatically take when the applicat ion is using the network, what ever the network usage type is. If you choose Filtering - Simple , you can click the link to select another action type. The action types are Ask , Allow, Deny or Extended . If you choose Filterin[...]

Reference: Configuration options 103 Name Name of the application. Path Full path to the executable file. Buttons Button Description Add application Allows you to create a new appl ication rule. If you press this button, a dialog window is opened. Here you can select t he required application fo r creating a new rule. Remove rule Remove s the selec[...]

Avira Premium Security Suite 104 Note If you remove providers fr om the list and then select Apply the providers will be permanently removed from the list . The change cannot be reversed with Reload . However, you can use the Always trust this provider option in the Network Event popup window to add a provider t o the li st of trusted providers a g[...]

Reference: Configuration options 105 If the option is activated, you will receive a desktop notification if a flooding attack has been detected by the Firewall. Applications blocked If the option is activated, you will receiv e a desktop notification if the Firewall has denied, i.e. block ed, network activity by an application. IP blocked If the op[...]

Avira Premium Security Suite 106 When this option is active, Avira Firewall ga ming mode is automatically activated when an application is executed in full-screen mode on your computer system. In gaming mode, all defined adapter and application rules apply. Applications for which no rules are defined with the Allow or Deny actions are temporarily a[...]

Reference: Configuration options 107 In this group of configuration option s, you can define the status of the Allow priv ileged option in the Network event window. Always enabled If this option is enabled, the Allow privileged option is enabled as the default setting in the Network event window. Always disabled If this option is enabled, the Allow[...]

Avira Premium Security Suite 108 Drive-by protection allows you to make setti ngs to block I-Frames, also known as inline frames. I-Frames are HTM L elements, i.e. el ements of Internet pages that delimit an area of a web page. I-Frames can be used to load and display different web cont ent - usually other URLs - as in dependent documents in a subw[...]

Reference: Configuration options 109 Deny access The website requested from the web server an d/ or any data or files transferred are not sent to your web brow ser. An error message to notify you that acce ss has been denied is displayed in the web browser. WebGuard logs th e det ection to the report file if the report function is activated. WebGua[...]

Avira Premium Security Suite 110 – video = for video files – audio = for sound files – application = for files linked to a particular program Examples: Excluded file and MIME type s – application/octet-stream = application/octet-stream MIME type files (executable files *.bin, *.exe, *.com, *dll, *.class) are blocked by We bGuard. – applic[...]

Reference: Configuration options 111 MIME types skipped by WebGuard In this field you can select the MIME types (content types for the transferred data) to be ignored by WebGuard during scanning. File types/MIME types skipped by WebGuard (user-defined) All MIME types (content types for the tran sferred data) in the list are ignored by WebGuard duri[...]

Avira Premium Security Suite 112 Input box You can specify parts of the URL, us ing leading or concludi ng dots to indicate the domain level: .domainname.de for all pages a nd all subdomains of the do main. Indicate websites with any top-level domain (.com or .net) with a concluding dot: domainname. . If you indicate a string without a lead ing or [...]

Reference: Configuration options 113 Warning Enter the URLs you want t o exclude from the WebGuard sca n as precisely as possible. Avoid specifying an entire top-level domain or parts of a second-l evel domain because there is a risk that Internet pages that di stribute malware and undesirable programs will be excluded from the WebGua rd scan throu[...]

Avira Premium Security Suite 114 13.5.2 Report The WebGuard includes an extensive loggi ng function to provide the user or administrator with exact notes about the type and manne r of a detection. Reporting This group allows for the content of the report file to be determined. Off If this option is enabled, then WebGuard does not create a log. It i[...]

Reference: Configuration options 115 If parental control is ena bled, all the web pages requested by the user while navigat ing in the Internet are chec ked on the basis of the user role. If web pages are prohibit ed, the web page is blocked and a message is displayed i n the browser. If the permitted usage duration is exceeded or if usage occurs o[...]

Avira Premium Security Suite 116 The list shows all added roles. By double-cli cking on a displayed role you can open the dialog fo r defining the role. Input box In this field you enter the name of the role that you want to add to the user roles. Change The Edit button can be used to configure the sele cted role. A dialog box appears in which you [...]

Reference: Configuration options 117 If this option is enabled, the files being saved are scanned for viruses and malware during the backup. Infected files are not save d. This option is enabled as the default setting and is recommended. 13.6.2 Exceptions Under exceptions, you can specif y which file objects a nd file types are saved, and which are[...]

Avira Premium Security Suite 118 Note A file name that contains wildcards ma y not be terminated with a backslash. For example: C:Program FilesApplicationapplic*.exe This entry is not valid and no t treated as an exception! Examples: application.exe Program files C:*.* C:* *.exe *.xl? *.* C:Program FilesApplicationapplication.exe C:Pro[...]

Reference: Configuration options 119 Reporting This group allows for the content of the report file to be determined. Off If this option is enabled, the Backup compon ent does not create a log. Only turn off the logging function in exceptional cases. Default If this option is enabled, the Backup component records important information (on saving, v[...]

Avira Premium Security Suite 120 If this option is enabled, product updates are downloaded an d auto matically installed by the Update component as soon as they become available. Updates to the virus definition file and search engine are carried out in depe ndently of this setting . The conditions for this option are: complete configuration of the [...]

Reference: Configuration options 121 Note Note that your restart settings allow you to choose between two options for executing a product update requiring a computer restart in the configuration under General::Update::Product update. Automatic execution of the product update with the required compute r restart when update is available: the update a[...]

Avira Premium Security Suite 122 The Updater automatically detects which conn ection options are available. Connecti on options which are not available are grayed out and cannot be activated. A dial-up connection can be established manually via a phone book entry in Windows, for example. – User: Enter the user nam e of the selected account. – P[...]

Reference: Configuration options 123 Address: proyx.domain.com Port: 8080 Address: 192.168.1.100 Port: 3128 13.8 General 13.8.1 Extended threat categories Selection of extended threat categories Avira Premium Security Suite protec ts you against computer viruses. In addition, you can scan according to th e f ollowing extended threat categorie s. ?[...]

Avira Premium Security Suite 124 Enter your required password here. For security reasons, th e actual characters you type in this space are replaced by asterisks (*). The password can only have a maximum of 20 chars. Once the password has been issu ed, th e program refuses acce ss if an incorrect password is entered. An em pty box means "No pa[...]

Reference: Configuration options 125 Affected object properties If this option is enabled, a password is required to display the properties of an object. Del ete affected objects If this option is enabled, a password is required to delete an object. Send em ail to Avira If this option is enabled, a password is required to send an object to the Avir[...]

Avira Premium Security Suite 126 Important Password protection is not avai lable for Windows XP 64 Bit ! Warning If process protection is enabled, interact ion problems can occur with other soft ware products. Disable process protection in these cases. Protect files and registry entries from manipulation If this option is enabled, all registry entr[...]

Reference: Configuration options 127 Note You can see where your sy stem saves temporar y files - for example with Windows XP - under: Start | Settings | Control Pane l | System | Tab "Advanced" | Button "Environment Variables". The temporary variables (TEMP, TMP) for the currently registered us er and for system variables (TEMP[...]

Avira Premium Security Suite 128 13.8.8 Acoustic alerts Acoustic alert When a virus or malware is detected by th e Scanner or Guard an acoustic alert is sounded in interactive action mode. You can now choose to activate or deactivate the acoustic alert and select an altern ative wave file for the alert. Note The action mode of the Scanner is set in[...]

Reference: Configuration options 129 If this option is enabled, you will receive a de sktop notification alert if a dialer creates a dial-up connection on your computer via th e teleph one or ISDN net work. There is a danger that the connect ion may have been created b y an unknown and unwant ed dialer and that the conn ection may be chargeable. ( [...]

Av ir a P r emium Sec ur it y S uit e www .avir a .c om Avir a GmbH Lindauer Str . 21 88069 T ettnang Germany T el ephone: +49 (0) 7542-500 0 F ax: +49 (0) 7542-525 10 Internet: http://www .avira.com © Avira GmbH. All rights r eserved. This manual was creat ed with great car e. However , error s in design and contents cannot be e xcluded. The repr[...]