1. Manuals
  2. Brands
  3. AVIRA Manuals
  4. Software
  5. ANTIVIR SERVER FOR WINDOWS
  6. User manual

AVIRA ANTIVIR SERVER FOR WINDOWS User Manual

Hide thumbs Also See for ANTIVIR SERVER FOR WINDOWS:
Table of Contents

Advertisement

Quick Links

Download this manual
Avira AntiVir
Server
|
Windows
User Manual

Advertisement

Table of Contents
loading

Related Manuals for AVIRA ANTIVIR SERVER FOR WINDOWS

Summary of Contents for AVIRA ANTIVIR SERVER FOR WINDOWS

  • Page 1 Avira AntiVir Server Windows User Manual...
  • Page 2 Copyright information A code provided by a third party has been used for Avira AntiVir Server. We thank the copyright owners for making the code available to us. For detailed information on copyright, please refer to in the help of Avira AntiVir Server under the...

  • Page 3: Table Of Contents

    Table of Contents Introduction ......................1 Icons and emphases ....................2 Product information....................3 Functionality..........................3 Delivery scope........................4 System requirements......................5 Licensing ..........................6 3.4.1 License models ......................6 Installation and uninstallation ................7 Installation..........................7 Uninstallation ........................9 Installation and uninstallation on the network..............9 4.3.1 Installation on the network..................9 4.3.2 Uninstallation on the network................10...
  • Page 4 Table of Contents 10.2.3 Exceptions ......................40 10.2.4 Products........................43 10.2.5 Heuristic .........................43 10.2.6 Report ........................44 10.3 General ..........................44 10.3.1 Extended threat categories..................44 10.3.2 Password.........................45 10.3.3 Security........................46 10.3.4 WMI ........................46 10.3.5 Events ........................46 10.3.6 Reports ........................47 10.3.7 Directories ......................47 10.4 Update ..........................48 10.4.1 Update ........................48 10.4.2 File server .......................50 10.4.3 Proxy........................50...

  • Page 5: Introduction

    Please go to our website http://www.avira.com where you can download the Avira AntiVir Server manual in PDF from, update Avira AntiVir Server or renew your license. You can also find information on our website such as telephone numbers for technical support and information on how to subscribe to our newsletter.

  • Page 6: Icons And Emphases

    Placed before a warning of the danger of critical data loss. Warning Placed before a link to particularly important information or Note a tip which makes Avira AntiVir Server easier to use. The following emphases are used: Emphasis Explanation File name or path data.

  • Page 7: Product Information

    3.1 Functionality The protection package Avira AntiVir Server includes the Avira AntiVir Server service and the AntiVir Server Console. The Avira AntiVir Server service protects your Windows Server from viruses and malware. The AntiVir Server Console is used for administration, control and monitoring of the servers to be protected or of the AntiVir services on the servers to be protected.

  • Page 8: Delivery Scope

    – Configuration and operation from separate computer possible: User interface (AntiVir Server Console) can be installed separately from the AntiVir server service – Network administration via the Avira Security Management Center (SMC) – Scanner (on-demand scan) with profile-controlled and configurable scan for all known types of viruses and malware –...

  • Page 9: System Requirements

    Windows Server 2003 64 bit) – Support for Windows Management Instrumentation 3.3 System requirements Avira AntiVir Server has the following requirements for successful use of the Avira AntiVir Server service and the AntiVir Server Console: – Computer as from Pentium, at least 266 MHz –...

  • Page 10: Licensing

    You require a license to use Avira AntiVir Server. Activate your license for Avira AntiVir Server with the license file hbedv.key. You can obtain the license file by email from Avira GmbH. The license file contains the license for all products that you have ordered in one order process.

  • Page 11: Installation And Uninstallation

    – No destination folder can be selected for the program files to be installed. User-defined – You can select whether you want to install the Avira AntiVir Server service and/or the AntiVir Server Console. – You have the option to select and install additional functions for the Avira...
  • Page 12 – Licensing of AntiVir Server: Load the license file or select a 30-day test license – Installation of Avira AntiVir Server service and/or AntiVir Server Console If you have installed the Avira AntiVir Server service, a configuration wizard opens after the installation has been completed. You have the option of configuring the most important settings of the installed Avira AntiVir Server service.

  • Page 13: Uninstallation

    Please note that a Avira AntiVir Server installation package is required for installation via a network. An installation file for internet-based installation cannot be used. Avira AntiVir Server can be easily shared on the network with a server login script or via SMS.

  • Page 14: Uninstallation On The Network

    You must have administrator rights (also required in batch mode)  Configure the parameter of the file setup.inf and save the file.  Begin installation of Avira AntiVir Server with the parameter /inf or integrate the parameter into the login script of the server.
  • Page 15 Installation and uninstallation Destination path, in which Avira AntiVir Server is installed. It has to be included to the script. The environment variable cannot be used. Example: InstallPath="%PROGRAMFILES%\Avira\AntiVir Server\" – LicenseFile=<Path and file name of the license file> AntiVir Server will be installed with the license. If you enter the file name only, the license file will be searched in the source folder of the setup only.
  • Page 16 Avira AntiVir Server 0: Do not install Shell extension – Systray= 0 | 1 Installs the Systray tool. A AntiVir Server tray icon is visible in the notification area of the protected server. The tray icon enables you to monitor the status of AntiVir Server and gives you access to other AntiVir Server functions.

  • Page 17: User Interface And Operation

    5 User interface and operation 5.1 User interface: AntiVir Server console The Avira AntiVir Server service that is installed on the servers to be protected is administered via theAntiVir Server Console. The AntiVir Server Console is a snap-in of the Microsoft Management Console (MMC). You can create any number of servers to be protected on the AntiVir Server Console in order to configure and monitor them on the AntiVir Server Console.
  • Page 18 Quarantine – Display of the objects in quarantine – Actions: Display object properties, restore object, add file to quarantine, send object to Avira Malware Research Center, delete object Scheduler – Display of all created scanning and update jobs – Actions: insert new jobs, display job properties, edit job, delete job Reports –...

  • Page 19: User Interface: Tray Icon

    User interface and operation – Display all events of the Avira AntiVir Server service on the server to be protected – Actions: display events, export events, delete events Settings – Configuration of the Avira AntiVir Server service on the server to be protected Configuration sections: –...
  • Page 20 Avira AntiVir Server 1. Installation Install the Avira AntiVir Server service on the servers that you want to protect against viruses and unwanted programs. Install the AntiVir Server Console on at least one computer on your network. see ch. Installation 2.

  • Page 21: Scanner

    6 Scanner 6.1 Scanner With the Scanner component, you can carry out targeted scans (on-demand scans) for viruses and unwanted programs. The following options are available for scanning for infected files: – Scan in Scheduler (remote and local) The scheduler gives you the option to schedule the times at which scan jobs are to be executed on the protected server.

  • Page 22: Updates

    You can obtain updates via the following servers: – directly from the Internet via a web server of Avira GmbH – via a web server or file server on an intranet, which downloads the update files from the Internet as the master server and supplies them to other servers.

  • Page 23: Viruses And More

    8 Viruses and more 8.1 Viruses and other malware Adware Adware is software that presents banner ads or in pop-up windows through a bar that appears on a computer screen. These advertisements usually cannot be removed and are consequently always visible. The connection data allow many conclusions on the usage behavior and are problematic in terms of data security.
  • Page 24 Avira AntiVir Server For several years, Internet and other network users have received alerts about viruses that are purportedly spread via email. These alerts are spread per email with the request that they should be sent to the highest possible number of colleagues and to other users, in order to warn everyone against the "danger".
  • Page 25 Viruses and more A computer virus is a program that is capable to attach itself to other programs after being executed and cause an infection. Viruses multiply themselves unlike logic bombs and Trojans. In contrast to a worm, a virus always requires a program as host, where the virus deposits his virulent code.

  • Page 26: Extended Threat Categories

    Avira AntiVir Server detects computer games. If the Games option is enabled with a check mark in the configuration under Extended threat categories, you receive a corresponding alert if Avira AntiVir Server detects a game. The game is now over in the truest sense of the word, because you can simply delete it.
  • Page 27 Thanks to the extension of its scanning and identification routines, Avira AntiVir Server is able to detect joke programs and eliminate them as unwanted programs if required. If the option Jokes is enabled with a check mark in the configuration under Extended threat categories, a corresponding alert is issued if a joke program is detected.
  • Page 28 "Internet crawling spiders" and then used without your permission to commit fraud or other crimes. Avira AntiVir Server detects "Phishing". If the option Phishing is enabled with a check mark in the configuration under Extended threat categories, you receive a corresponding alert if Avira AntiVir Server detects such behavior.

  • Page 29: Info And Service

    Chapter Report false positives see Chapter Your feedback for more security 9.1 Technical Support Avira AntiVir Server support provides reliable assistance in answering your questions or solving a technical problem. All necessary information on our comprehensive support service can be obtained from our website http://www.avira.de/en/support.

  • Page 30: Reporting False Positives

    Avira AntiVir Server 9.3 Reporting false positives If you believe that Avira AntiVir Server reports something about a file that is most likely "clean", send the required file packed (WinZIP, PKZip, Arj etc.) in the attachment of an email to virus@avira.com. As some email gateways work with anti-virus software, you should also provide the file(s) with a password (please remember to tell us the password).

  • Page 31: Reference: Configuration Options

    If this option is enabled, the selection of the files scanned for viruses or unwanted programs is automatically chosen by Avira AntiVir Server. This means that Avira AntiVir Server decides whether the files are scanned or not based on their content. This procedure is somewhat slower than Use file extension list, but more secure, since not only on the basis of the file extension is scanned.
  • Page 32 Avira AntiVir Server With the aid of this button, a dialog window is opened in which all file extensions are displayed that are scanned in Use file extension list mode. Default entries are set for the extensions, but entries can be added or deleted.

  • Page 33: Action For Concerning Files

    The back-up copy is saved in quarantine, where the file can be restored if it is of informative value. You can also send the backup copy to the Avira Malware Research Center for further investigation. Primary action Primary action is the action carried out when the Scanner finds a virus or an unwanted program.
  • Page 34 Quarantine If this option is enabled, the Scanner moves the file to the quarantine. These files can later be repaired or - if necessary - sent to the Avira Malware Research Center. Secondary action The option Secondary action can only be selected if the setting Repair was selected under Primary action.

  • Page 35: Further Actions

    Reference: Configuration options 10.1.2 Further actions Launch program following detection After the on-demand scan, the Scanner can open a file of your choice (for example a program) if at least one virus or unwanted program has been detected, for example an email program, so that you can inform other users or the administrator.

  • Page 36: Exceptions

    Avira AntiVir Server If this option is enabled, the Scanner detects whether a file is a packed file format (archive), even if the file extension differs from the usual extensions, and scans the archive. However, for this every file must be opened - which reduces the scanning speed.

  • Page 37: Heuristic

    Macrovirus heuristics Macrovirus heuristics Avira AntiVir Server contains a highly powerful macro virus heuristic. If this option is enabled, all macros in the relevant document are deleted in the event of a repair, alternatively suspect documents are only reported, i.e. you receive an alert. This option is enabled as the default setting and is recommended.

  • Page 38: Report

    Avira AntiVir Server Avira AntiVir Server contains a very powerful heuristic in the form of AntiVir AheAD technology, which can also detect unknown (new) malware. If this option is activated, you can define how "aggressive" this heuristic should be. This option is enabled as the default setting.
  • Page 39 If this option is enabled, the selection of the files scanned for viruses or unwanted programs is automatically chosen by Avira AntiVir Server. This means that Avira AntiVir Server decides whether the files are scanned or not based on their content. This procedure is somewhat slower than Use file extension list, but more secure, since not only on the basis of the file extension is scanned.
  • Page 40 Avira AntiVir Server Note Please note that the file extension list may vary from version to version. Archives Scan archives If this option is enabled, then archives will be scanned. Compressed files are scanned, then decompressed and scanned again. This option is deactivated by default. The archive scan is restricted by the recursion depth, the number of files to be scanned and the archive size.

  • Page 41: Action For Concerning Files

    Guard moves the file to the quarantine folder. The file can be recovered from quarantine manager if it has an informative value or - if necessary - sent to the Avira Malware Research Center. Depending on the file, further selection options may be available in the Quarantine Manager.
  • Page 42 The backup copy is saved in quarantine. It can be restored via the Quarantine manager if it is of informative value. You can also send the backup copy to the Avira Malware Research Center. Depending on the object, there are more selection possibilities in the Quarantine manager.

  • Page 43: Further Actions

    Quarantine If this option is enabled, the Guard moves the file to the quarantine. The files in this directory can later be repaired or - if necessary - sent to the Avira Malware Research Center. Secondary action The option Secondary action can only be selected if the option Repair was selected under Primary action.

  • Page 44: Exceptions

    Avira AntiVir Server Event log Use event log When this option is enabled, an entry is added to the event log for every detection. The administrator can identify detections and react accordingly. This option is enabled as the default setting.
  • Page 45 Reference: Configuration options Note The entries in the list must have no more than 6000 characters in total. Note For each drive you can specify a maximum of 20 exceptions by entering the complete path (starting with the drive letter). E.g.: C:\Program Files\Application\Name.log The maximum number of exceptions without a complete path is 64.
  • Page 46 Avira AntiVir Server Note With regard to exceptions on connected network drives, please note the following: if you use the drive letter of the connected network drive, the files and folders specified are NOT excluded from the Guard scan. If the UNC path in the list of exceptions differs from the UNC path used to connect to the network drive (IP address specification in the list of exceptions –...

  • Page 47: Products

    Macrovirus heuristics Macrovirus heuristics Avira AntiVir Server contains a highly powerful macro virus heuristic. If this option is enabled, all macros in the relevant document are deleted in the event of a repair, alternatively suspect documents are only reported, i.e. you receive an alert. This option is enabled as the default setting and is recommended.

  • Page 48: Report

    If this option is enabled, the configuration of the on-access scan is recorded in the report file. 10.3 General 10.3.1 Extended threat categories Selection of extended threat categories Avira AntiVir Server protects you against computer viruses. In addition, you can scan according to the following extended threat categories.

  • Page 49: Password

    Reference: Configuration options – Backdoor Clients (BDC) – Dialer (DIALER) – Games (GAMES) – Jokes (JOKES) – Security Privacy Risk (SPR) – Adware/Spyware (ADSPY) – Unusual runtime packers (PCK) – Double Extension Files (HEUR-DBLEXT) – Phishing – Application (APPL) By clicking on the relevant box, the selected type is enabled (check mark set) or disabled (no check mark).

  • Page 50: Security

    In this box you can enter the maximum number of days allowed to have passed since the last update of Avira AntiVir Server. If this number of days has passed, a red icon is displayed for the update status in the status overveiw .

  • Page 51: Reports

    10.3.7 Directories Temporary path In this input box, enter the path where Avira AntiVir Server will store its temporary files. Use default system settings If this option is enabled, the settings of the system are used for handling temporary files.

  • Page 52: Update

    Avira AntiVir Server This box contains the path to the quarantine directory of Avira AntiVir Server. The button opens a window in which you can select the required directory. Default The button restores the predefined path to the quarantine directory.
  • Page 53 If you do not specify a port, port 80 will be used. By default, the accessible web servers of Avira GmbH are specified for updating AntiVir Server. You can, however, use your own web servers on the company intranet.

  • Page 54: File Server

    10.4.2 File server In the case of more than one workstation in a network, Avira AntiVir Server can download an update from a file server in the intranet, which in turn obtains the update files from a proprietary download server on the Internet. It can thus be ensured that the Avira AntiVir Server is up to date on all workstations.

  • Page 55: Warnings

    Reference: Configuration options If your web server connection is set up via a proxy server, you can enter the relevant information here. Address Please enter the URL or the IP address of the proxy server you should use to connect to the web server.

  • Page 56: Guard

    Avira AntiVir Server This button lets you delete the currently selected entry from the list. 10.5.1 Guard Network alerts If this option is enabled, network alerts are sent. This option is disabled as the default setting. Note To enable this option, at least one recipient must be entered under General::Alerts::Network .

  • Page 57: Acoustic Alerts

    Reference: Configuration options Note To enable this option, at least one recipient must be entered under General::Alerts::Network . Message to be sent The window shows the message sent to the selected workstation when a virus or unwanted program is detected. You can edit this message. A text may contain a maximum of 500 characters.

  • Page 58: Email

    Email 10.6.1 Email With certain events, Avira AntiVir Server can send alerts and messages via email to one or more recipients. This is done with the Simple Message Transfer Protocol (SMTP). The messages can be triggered by various events. The following components support email sending: –...

  • Page 59: Guard

    For security, the actual characters you type in this space are replaced by asterisks (*). Send test email When you click on the button, Avira AntiVir Server attempts to send a test email to the sender address to check the data entered. 10.6.2 Guard AntiVir Guard can send alerts by email to one or more recipients for certain events.

  • Page 60: Scanner

    Scanner Enable email alerts If this option is enabled, Avira AntiVir Server sends email messages with the most important information when a certain event occurs. This option is disabled as the default setting. Email messages for the following events The on-demand scan detected a virus or unwanted program.
  • Page 61 Reference: Configuration options If this option is enabled, the Update component sends email messages with the most important data when a specific event occurs. This option is disabled by default. Email messages for the following events No update necessary. Your program is up to date. If this option is enabled, an email is sent if the Updater has successfully made a connection to the download server but there are no new files available on the server.

  • Page 62: Email Template

    Avira AntiVir Server Note Warning messages are always sent by email for the following events if a SMTP server and a recipient address have been configured for Updater notifications: A product update is required for every further update of AntiVir Server.
  • Page 63 Reference: Configuration options unwanted program. %ACTION% Action carried out after Guard the detection %MACADDR% MAC address of the first Guard registered network card %UPDFILESLIST% List of updated files Updater %UPDATETYPE% Update type: Update of Updater search engine and virus definition file, or product update with update of search engine and virus definition file...
  • Page 64 Avira AntiVir Server %LOGFILEPATH% Path and file name of Scanner the report file Updater...
  • Page 65 Fax: +49 (0) 7542-525 10 Internet: http://www.avira.com AntiVir is a registered trademark ® of the Avira GmbH. All other brand and product names are trademarks or registered trademarks of their respective owners. Protected trademarks are not marked as such in this manual. However, this does not mean that they may be used freely.

This manual is also suitable for:

Smallbusiness suite

Table of Contents