1. Manuals
  2. Brands
  3. AVIRA Manuals
  4. Software
  5. PREMIUM SECURITY SUITE 10
  6. User manual

AVIRA PREMIUM SECURITY SUITE 10 User Manual

Hide thumbs
Table of Contents

Advertisement

Quick Links

Download this manual
Avira Premium Security Suite
User Manual

Advertisement

Table of Contents
loading
Need help?

Need help?

Do you have a question about the PREMIUM SECURITY SUITE 10 and is the answer not in the manual?

Questions and answers

Related Manuals for AVIRA PREMIUM SECURITY SUITE 10

Summary of Contents for AVIRA PREMIUM SECURITY SUITE 10

  • Page 1 Avira Premium Security Suite User Manual...
  • Page 2 Copyright information Code provided by third party providers was used for Avira Premium Security Suite. We thank the copyright owners for making the code available to us. For detailed information on copyright, please refer to Third Party Licenses in the Program...

  • Page 3: Table Of Contents

    Table of Contents Introduction ......................1 Icons and emphases ....................2 Product information ....................3 Delivery scope ........................3 System requirements ......................4 Licensing and Upgrade ......................4 Installation and uninstallation ................. 6 Installation ..........................6 Change installation ......................11 Installation modules ......................12 Uninstallation ........................
  • Page 4 Table of Contents Scanner ........................42 Updates ........................43 Avira FireWall :: Overview ..................44 Backup ........................45 FAQ, Tips ....................... 46 10.1 Help in case of a problem ....................46 10.2 Shortcuts .......................... 50 10.2.1 In dialog boxes ....................50 10.2.2 In the help ......................
  • Page 5 Avira Premium Security Suite 13.3.2.3. MailGuard ....................90 13.3.2.4. Footer ......................91 13.3.3 Report ........................91 13.4 Firewall ..........................92 13.4.1 Adapter rules ....................... 92 13.4.1.1. Incoming Rules ..................... 95 13.4.1.2. Outgoing Rules ................... 102 13.4.2 Application rules ....................102 13.4.3 Trusted providers ....................

  • Page 6: Introduction

    The manual describes the program installation and operation. For further options and information, please visit our website: http://www.avira.com The Avira website lets you...… – access information on other AntiVir desktop programs – download the latest AntiVir desktop programs – download the latest product manuals in PDF format –...

  • Page 7: Icons And Emphases

    2 Icons and emphases The following icons are used: Icon / Explanation designation Placed before a condition which must be fulfilled prior to execution of an action. Placed before an action step that you perform. Placed before an event that follows the previous action. Warning Placed before a warning of the danger of critical data loss.

  • Page 8: Product Information

    3 Product information This chapter contains all information relevant to the purchase and use of your AntiVir product: – see Chapter: Delivery scope – see Chapter: System requirements – see Chapter: Licensing – see Chapter: License Manager AntiVir programs are comprehensive and flexible tools you can rely on to protect your computer from viruses, malware, unwanted programs and other dangers.

  • Page 9: System Requirements

    – High-performance multithreading function (simultaneous high-speed scanning of multiple files) – Avira FireWall for protecting your computer from unauthorized access from the Internet or another network and from unauthorized access to the Internet/network by unauthorized users 3.2 System requirements...
  • Page 10 The following product upgrades can be executed automatically via License Manager: – Upgrade of Avira AntiVir Personal to Avira AntiVir Premium – Upgrade of Avira AntiVir Personal to Avira Premium Security Suite – Upgrade of Avira AntiVir Premium to Avira Premium Security Suite...

  • Page 11: Installation And Uninstallation

    During installation you can select a setup type in the installation wizard: Express – Not all program components are installed. The following components are not installed: Avira AntiVir ProActiv Avira FireWall – The program files are installed into a specified default folder under C:\Program Files.
  • Page 12 For the Internet-based installation of the program, an installation program is provided that loads the current program file prior to installation by the Avira GmbH web servers. This process ensures that your AntiVir program is installed with the latest virus definition file.
  • Page 13 Avira AntiVir ProActiv Community: If this option is enabled, Avira AntiVir ProActiv sends data on suspicious programs detected by the ProActiv component to the Avira Malware Research Center. The data is used only for an advanced online scan and to...
  • Page 14 Avira AntiVir ProActiv sends data on suspicious programs detected by the ProActiv component to the Avira Malware Research Center. The data is used only for an advanced online scan and to expand and refine detection technology. You can use the further information link to obtain more details on the expanded online scan.
  • Page 15 Next. If you have selected the AntiVir FireWall installation module, the FireWall security level dialog box appears. You can define whether the Avira FireWall should permit external access to enabled resources as well as network access by applications of trusted companies.

  • Page 16: Change Installation

    Installation and uninstallation  Enable the required option and continue the configuration by clicking Next. If you have selected the AntiVir WebGuard installation module, theEnable parental controls dialog box appears. You can stipulate the Guard start time. At each computer reboot, the Guard will be started in the start mode specified. You have the option of assigning different roles –...

  • Page 17: Installation Modules

    Depending on the configuration, the program may process the affected files automatically or prompt the user for a specific action. – Avira FireWall: Avira FireWall controls communication to and from your computer. It permits or denies communications based on security policies. – AntiVir Rootkit Protection...

  • Page 18: Uninstallation

     Select your AntiVir program in the list and click Remove. You will be asked if you really want to remove the program.  Click Yes to confirm. You will be asked if you want to re-enable Windows FireWall (the Avira FireWall is disabled).  Click Yes to confirm.

  • Page 19: Overview Of Premium Security Suite

    5 Overview of Premium Security Suite This chapter contains an overview of the functionality and operation of your AntiVir program. – see Chapter Interface and operation – see Chapter How to...? 5.1 User interface and operation You operate your AntiVir program via three program interface elements: –...
  • Page 20 Overview of Premium Security Suite – Navigation area: In the navigation area, you can easily swap between the individual sections of the Control Center. The individual sections contain information and functions of the program components and are arranged in the navigation bar according to activity.
  • Page 21 More detailed information on the last virus or unwanted program detected can be obtained practically "at the push of a button". • The FireWall section enables you to configure the basic settings for the Avira FireWall. In addition, the current data transfer rate and all active applications using a network connection are displayed.

  • Page 22: Configuration

    Overview of Premium Security Suite 5.1.2 Configuration You can define settings for your AntiVir program in the Configuration. After installation, your AntiVir program is configured with standard settings, ensuring optimal protection for your computer system. However, your computer system or your specific requirements for your AntiVir program may mean you need to adapt the protective components of the program.
  • Page 23 Avira Premium Security Suite Navigate in the configuration window as you would in Windows Explorer:  Click an entry in the tree structure to display this configuration section in the detail window.  Click the plus symbol in front of an entry to expand the configuration section and display configuration subsections in the tree structure.
  • Page 24 Overview of Premium Security Suite On-access scan exceptions On-access scan heuristics Report function setting – MailGuard: Configuration of MailGuard Scan options: Enable the monitoring of POP3 accounts, IMAP accounts, outgoing emails (SMTP) Actions on malware MailGuard scan heuristics AntiBot function: Permitted SMTP servers, permitted email senders MailGuard scan exceptions Configuration of cache, empty cache Configuration of the anti-spam training database, empty training database...

  • Page 25: Tray Icon

    – About Premium Security Suite: Opens a dialog box with information on your AntiVir program: Product information, Version information, License information. – Avira on the Internet: Opens the Avira web portal on the Internet. The condition for this is that you have an active connection to the Internet.

  • Page 26: How To

    For product activation or for a test license you need an active Internet link. If no connection can be established to the servers of Avira GmbH, please check the settings of the firewall used: Connections via the HTTP protocol and port 80 (web communication) and via the encryption protocol SSL and port 443 are used for product activation.

  • Page 27: Perform Automatic Updates

    Avira Premium Security Suite 5.2.2 Perform automatic updates To create a job with the AntiVir Scheduler to update your AntiVir program automatically:  In the Control Center, select the section Management :: Scheduler.  Click the Create new job with the wizard icon.

  • Page 28: Start A Manual Update

    Overview of Premium Security Suite Use the following icons to further define your jobs: View properties of a job Modify job Delete job Start job Stop job 5.2.3 Start a manual update You have various options for starting an update manually: When an update is started manually, the virus definition file and scan engine are always updated.
  • Page 29 Avira Premium Security Suite if you want to scan with a customized scan profile. – Create and apply new scan profile if you want to create your own scan profile. Depending on the operating system, various icons are available for starting a scan profile: –...

  • Page 30: On-Demand Scan: Scan For Viruses And Malware Using Dragamp;Drop

    Overview of Premium Security Suite • Directory excluding sub-directories (green check mark) • Sub-directories of one directory only (grey check mark, sub-directories have black check marks) • No directory (no check mark) If you want to create a new scan profile: ...

  • Page 31: On-Demand Scan: Automatically Scan For Viruses And Malware

    Avira Premium Security Suite 5.2.7 On-demand scan: Automatically scan for viruses and malware Note After installation, the scan job Full system scan is created in the Scheduler: A complete system scan is automatically performed at a recommended interval. To create a job to automatically scan for viruses and malware: ...

  • Page 32: On-Demand Scan: Targeted Scan For Rootkits And Active Malware

    Overview of Premium Security Suite  Click Finish. Your newly created job appears on the start page of the Manager :: Scheduler section with the status activated (check mark).  Where appropriate, deactivate jobs that are not to be performed. Use the following icons to further define your jobs: View properties of a job Modify job...
  • Page 33 Avira Premium Security Suite In interactive action mode, the results of the Scanner scan are displayed in a dialog box. This option is enabled as the default setting. In the case of Scanner scan, you will receive an alert with a list of the affected files when the scan is complete.
  • Page 34 Overview of Premium Security Suite – Delete The file will be deleted. This process is much quicker than overwrite and delete. If a boot sector virus is detected, this can be deleted by deleting the boot sector. A new boot sector is written. –...
  • Page 35 Avira Premium Security Suite The application is blocked, i.e. the application is terminated. The program is added to list of blocked applications and can no longer be run (see Configuration::Guard::ProActiv::Application filter: Applications to be blocked). – Ignore The application continues to run. The actions of the application continue to be monitored by the ProActiv component.

  • Page 36: Quarantine: Handling Quarantined Files (*.Qua)

    The website requested from the web server and/or any data or files transferred are moved to quarantine. The affected file can be recovered from quarantine manager if it has an informative value or - if necessary - sent to the Avira Malware Research Center.
  • Page 37 Avira Premium Security Suite  Highlight the file and click on If you want to upload the file to a Avira Malware Research Center web server for analysis:  Highlight the file you want to upload.  Click on A dialog opens with a form for inputting your contact data.

  • Page 38: Quarantine: Restore The Files In Quarantine

    Overview of Premium Security Suite 5.2.11 Quarantine: Restore the files in quarantine Different icons control the restore procedure, depending on the operating system: – In Windows XP and 2000: This icon restores the files to their original directory. This icon restores the files to a directory of your choice. –...

  • Page 39: Quarantine: Move Suspicious Files To Quarantine

    Avira Premium Security Suite  Click Yes. The Windows default window for selecting the directory appears.  Select the directory to restore the file to and confirm. The file is restored to the selected directory. 5.2.12 Quarantine: Move suspicious files to quarantine To move a suspect file to quarantine manually: ...

  • Page 40: Events: Filter Events

    Overview of Premium Security Suite In the Control Center, go to the Local protection:: Scan section.  Select the scan profile for which you want to create a shortcut.  Click the icon The desktop shortcut is created. 5.2.15 Events: Filter events Events that have been generated by program components of your AntiVir program are displayed in the Control Center under Overview::Events (analogous to the event display of your Windows operating system).

  • Page 41: Mailguard: Train The Anti-Spam Module

    Avira Premium Security Suite The list shows incoming emails.  Highlight the email you want to exclude from the MailGuard scan.  Click the appropriate icon to exclude the email from the MailGuard scan: In future, the selected email address will no longer be scanned for viruses and unwanted programs.

  • Page 42: Backup: Create Backups Manually

    Note The default security level setting for all predefined rules of the Avira FireWall is High To define the security level for the FireWall:  Go to the Control Center and select the section Online protection :: FireWall.

  • Page 43: Backup: Create Automatic Data Backups

    Avira Premium Security Suite  Click the icon The window Avira Backup appears and the backup starts. The status and results of the backup are displayed in the backup window. If you want to modify a backup profile:  In the scan profile, expand the Manual Selection file tree so that all drives and directories to be saved are open: •...
  • Page 44 Overview of Premium Security Suite  Click Next. The dialog box Select profile appears.  Select the profile to be scanned. Note Only backup profiles for which a save location has been stipulated are displayed.  Click Next. The dialog box Time of job appears. ...
  • Page 45 Avira Premium Security Suite Start job Stop job...

  • Page 47: Scanner

    Avira Premium Security Suite 6 Scanner With the Scanner component, you can carry out targeted scans (on-demand scans) for viruses and unwanted programs. The following options are available for scanning for infected files: – On-demand scan via context menu The on-demand-scan via the context menu (right-hand mouse button - entry Scan selected files with AntiVir) is recommended if, for example, you wish to scan individual files and directories.

  • Page 48: Updates

    Updates can be obtained from the Internet via a Web server of the manufacturer. The existing network connection is the default connection to the download servers of Avira GmbH. You can change this default setting in the Configuration under General :: Update.

  • Page 49: Avira Firewall :: Overview

    Internet: Incoming or outgoing data traffic or listening to ports will be allowed or denied based on security guidelines. You will receive a desktop notification if Avira FireWall denies network activity and thus blocks network connections. The following options are available for Avira FireWall settings: –...

  • Page 50: Backup

    9 Backup There are various options available to you for creating a backup of your data: Backup via the backup tool You can use the backup tool to select or create backup profiles and start a backup of a selected profile manually. Backup via a backup job in Scheduler Scheduler gives you the option of creating scheduled or event-controlled backup jobs.

  • Page 51: Faq, Tips

    – AntiVir MailGuard does not work. – There is no network connection available in a virtual machine (e.g. VMWare, Virtual PC, ...) if Avira FireWall is installed on the host machine and the security level of Avira FireWall is set to medium or high.
  • Page 52 In the taskbar, select "Start | Settings | Control Panel". Start the configuration panel "Services" with a double-click (under Windows 2000 and Windows XP the services applet is located in the sub-directory "Administrative Tools"). Find the entry Avira AntiVir Guard. "Automatic" must be entered as the startup type and "Started" as the status.
  • Page 53 VMWare, virtual PC, etc.) is also running, the firewall will block all network connections for the virtual machine when the security level of the Avira FireWall is set to medium or high. If the security level is set to low, the FireWall works as expected.
  • Page 54 Reason: The virtual machine emulates a network card by means of software. This emulation encapsulates the data packages of the guest system in special packages (UDP packages) and routes them via the external gateway back to the host system. Avira FireWall rejects these packages coming from outside, starting from security level medium.

  • Page 55: Shortcuts

    Avira Premium Security Suite This phenomenon may occur during chats, which are based on the HTTP protocol with 'transfer-encoding= chunked’. Reason: WebGuard checks the data sent completely for viruses and undesired programs first of all, before the data are loaded into the web browser. During a data transfer with ‘transfer-encoding= chunked’, WebGuard cannot determine the message length or the...

  • Page 56: In The Help

    FAQ, Tips Enter Start command for the active option or button. 10.2.2 In the help Shortcut Description Alt + Space Display system menu. Alt + Tab Shift between the help and the other opened windows. Alt + F4 Close help. Shift + F10 Display context menu of the help.
  • Page 57 Avira Premium Security Suite FireWall section Shortcut Description Return Properties Quarantine section Shortcut Description Rescan object Restore object Send object Restore object to... Return Properties Add file Delete object Scheduler section Shortcut Description Edit job Return Properties Insert new job...

  • Page 58: Windows Security Center

    You will receive the following message as soon as you disable the Avira FireWall: Note You can enable or disable the Avira FireWall via the Status tab in the Control Center. Warning If you turn the Avira FireWall off, your computer is no longer prevented by unauthorized users from gaining access to it through a network or the Internet.
  • Page 59 Avira Premium Security Suite You may receive the following information from the Windows Security Center with regard to your virus protection: Virus protection NOT FOUND Virus protection OUT OF DATE Virus protection ON Virus protection OFF Virus protection NOT MONITORED...
  • Page 60 FAQ, Tips Your AntiVir program is now up-to-date and the AntiVir Guard is enabled. Virus protection OFF You receive the following message if you disable the AntiVir Guard or stop the Guard service. Note You can enable or disabled AntiVir Guard in the Overview::Status section of the Control Center.

  • Page 61: Viruses And More

    11 Viruses and more 11.1 Extended threat categories Dialer (DIALER) Certain services available in the Internet have to be paid for. They are invoiced in Germany via dialers with 0190/0900 numbers (or via 09x0 numbers in Austria and Switzerland; in Germany, the number is set to change to 09x0 in the medium term). Once installed on the computer, these programs guarantee a connection via a suitable premium rate number whose scale of charges can vary widely.
  • Page 62 Viruses and more Studies have shown that the number of working hours devoted to computer games has long reached economically significant proportions. It is therefore not surprising that more and more companies are considering ways of banning computer games from workplace computers.

  • Page 63: Viruses And Other Malware

    Avira Premium Security Suite Your AntiVir program recognizes "Adware/Spyware". If the option Adware/Spyware (ADSPY) is enabled with a check mark in the configuration under Extended threat categories, you receive a corresponding alert if your AntiVir program detects adware or spyware.
  • Page 64 Viruses and more Adware is software that presents banner ads or in pop-up windows through a bar that appears on a computer screen. These advertisements usually cannot be removed and are consequently always visible. The connection data allow many conclusions on the usage behavior and are problematic in terms of data security.
  • Page 65 Avira Premium Security Suite Macro viruses Macroviruses are small programs that are written in the macro language of an application (e.g. WordBasic under WinWord 6.0) and that can normally only spread within documents of this application. Because of this, they are also called document viruses.
  • Page 66 Viruses and more Such viruses are extremely easy to program and they can spread - if the required technology is on hand - within a few hours via email round the globe. Script viruses and worms use one of the script languages, such as Javascript, VBScript etc., to insert themselves in other, new scripts or to spread themselves by calling operating system functions.

  • Page 67: Info And Service

    For our contact addresses, please refer to the Control Center under Help :: About Avira Premium Security Suite. 12.2 Technical support Avira support provides reliable assistance in answering your questions or solving a technical problem. All necessary information on our comprehensive support service can be obtained from our website: http://www.avira.com/premium-suite-support...

  • Page 68: Reporting False Positives

    12.5 Your feedback for more security At Avira, our customers’ security is paramount. For this reason, we don't just have an in- house expert team that tests the quality and security of every Avira GmbH solution before the product is released. We also attach great importance to the indications regarding security relevant gaps that could develop and we treat those seriously.

  • Page 69: Reference: Configuration Options

    13 Reference: Configuration options The configuration reference documents all available configuration options. 13.1 Scanner The Scanner section of the Configuration is responsible for the configuration of the on- demand scan. 13.1.1 Scan Here you define the basic behavior of the scan routine for an on-demand scan. If you select certain directories to be scanned with an on-demand scan, depending on the configuration the Scanner scans: –...
  • Page 70 Reference: Configuration options Note If this option is enabled and you have deleted all entries from the list with file File extensions, this is indicated with the text "No file extensions" under the button extensions File extensions With the aid of this button, a dialog box is opened in which all file extensions are displayed that are scanned in "Use file extension list"...

  • Page 71: Action On Detection

    Avira Premium Security Suite Important The option does not include any shortcuts, but refers exclusively to symbolic links (generated by mklink.exe) or Junction Points (generated by junction.exe) that are transparent in the file system. Search for Rootkits before scan If this option is enabled and a scan is started, the Scanner scans the Windows system directory for active rootkits in a so-called shortcut.
  • Page 72 The back-up copy is saved in Quarantine, where the file can be restored if it is of informative value. You can also send the backup copy to the Avira Malware Research Center for further investigation. Primary action Primary action is the action performed when the Scanner finds a virus or an unwanted program.
  • Page 73 Avira Premium Security Suite If this option is enabled, the Scanner moves the file to the quarantine. These files can later be repaired or - if necessary - sent to the Avira Malware Research Center. Secondary action The option "Secondary action" can only be selected if the setting repair was selected under "Primary action".

  • Page 74: Exceptions

    Reference: Configuration options Recursion depth Unpacking and scanning recursive archives can require a great deal of computer time and resources. If this option is enabled, you limit the depth of the scan in multi-packed archives to a certain number of packing levels (maximum recursion depth). This saves time and computer resources.

  • Page 75: Heuristics

    Avira Premium Security Suite The button opens a window in which you can select the required file or the required path. When you have entered a file name with its complete path, only this file is not scanned for infection. If you have entered a file name without a path, all files with this name (irrespective of the path or drive) are not scanned.

  • Page 76: Report

    Reference: Configuration options If this option is enabled, slightly less unknown malware is detected, the risk of false alerts is low in this case. Medium detection level This option is enabled as the default setting if you have selected the use of this heuristic. High detection level If this option is enabled, significantly more unknown malware is detected, but there are also likely to be false positives.
  • Page 77 Avira Premium Security Suite You will normally want to monitor your system constantly. To this end, use the Guard (= on-access Scanner). You can thus scan all files that are copied or opened on the computer "on the fly", for viruses and unwanted programs.

  • Page 78: Action On Detection

    Reference: Configuration options Note Please note that the file extension list may vary from version to version. Archives Scan archives If this option is enabled, then archives will be scanned. Compressed files are scanned, then decompressed and scanned again. This option is deactivated by default. The archive scan is restricted by the recursion depth, the number of files to be scanned and the archive size.
  • Page 79 Quarantine If this option is enabled, the Guard moves the file to Quarantine. The files in this directory can later be repaired or - if necessary - sent to the Avira Malware Research Center. Secondary action The option "Secondary action" can only be selected if the "Repair" option was selected under "Primary action".

  • Page 80: Further Actions

    Quarantine If this option is enabled, the Guard moves the file to Quarantine. The files can later be repaired or - if necessary - sent to the Avira Malware Research Center. Note If you have selected Delete or Overwrite and Delete as the primary or secondary action, please note the following: In the case of heuristic hits, the affected files are not deleted, but are instead moved to quarantine.

  • Page 81: Exceptions

    Avira Premium Security Suite When this option is enabled, the execution of the Windows Autostart function is blocked on all connected drives, including USB sticks, CD and DVD drives and network drives. With the Windows Autostart function, files on data media or network drives are read immediately on loading or connection, and files can therefore be started and copied automatically.
  • Page 82 Reference: Configuration options Note When specifying the process, you can use the wildcards* (any number of characters) and ?? (a single character). C:\Program Files\Application\application.exe C:\Program Files\Application\applicatio?.exe C:\Program Files\Application\applic*.exe C:\Program Files\Application\*.exe To avoid the process being excluded globally from monitoring by Guard, specifications exclusively comprising the following characters are invalid: * (asterisk), ? (question mark), / (forward slash), \ (backslash), .
  • Page 83 Avira Premium Security Suite Note If a directory is excluded, all its sub-directories are automatically also excluded. Note For each drive you can specify a maximum of 20 exceptions by entering the complete path (starting with the drive letter). For example: C:\Program Files\Application\Name.log The maximum number of exceptions without a complete path is 64.

  • Page 84: Heuristics

    Reference: Configuration options The process for the file application.exe, which is located under the path C:\Program Files1, is excluded from the Guard scan. – C:\Program Files1\*.exe All processes for executable files located under the path C:\Program Files1 are excluded from the Guard scan. Examples for files to be excluded: –...

  • Page 85: Proactiv

    (executable files) to the Avira Malware Research Center for advanced online scanning. After evaluation, these data are added to the ProActiv behavioral analysis rule sets. In this way, you become part of the Avira ProActiv community and contribute to the continuous improvement and refinement of the ProActiv security technology.

  • Page 86: Application Filter: Applications To Be Blocked

    An operating system message appears when a blocked program starts up. The applications to be blocked are identified by Avira AntVir ProActiv on the basis of the path specified and the file name, and are blocked irrespective of their content.

  • Page 87: Report

    Avira Premium Security Suite Applications The list contains applications excluded from monitoring by the ProActiv component. In the default installation settings, the list contains signed applications from trusted producers. You have the option of adding applications that you consider to be trustworthy via the configuration or via Guard notifications.

  • Page 88: Mailguard

    Reference: Configuration options If this option is enabled, then Guard does not create a log. It is recommended that you should turn off the logging function only in exceptional cases, such as if you are executing trials with multiple viruses or unwanted programs. Default If this option is enabled, Guard records important information (concerning detections, alerts and errors) in the report file, with less important information ignored for...

  • Page 89: Action On Detection

    Avira Premium Security Suite If this option is enabled, email traffic is monitored by MailGuard. MailGuard is a proxy server which checks data traffic between the email server you use and the email client program on your computer system: incoming emails are scanned for malware by default.
  • Page 90 Reference: Configuration options Interactive If this option is enabled, a dialog box appears when a virus or unwanted program is detected in an email or attachment in which you can choose what is to be done with the email or attachment concerned. This option is enabled as the default setting. Show progress bar If this option is enabled, the MailGuard shows a progress bar during downloading of emails.

  • Page 91: Other Actions

    Avira Premium Security Suite 13.3.1.2. Other actions This configuration section contains other settings for actions performed when MailGuard finds a virus or unwanted program in an email or in an attachment. Note These actions are performed exclusively when a virus is detected in incoming emails.

  • Page 92: Antibot

    Reference: Configuration options Advanced Heuristic Analysis and Detection (AHeAD) enable AHeAD Your AntiVir program contains a very powerful heuristic in the form of AntiVir AHeAD technology, which can also detect unknown (new) malware. If this option is enabled, you can define how "aggressive" this heuristic should be. This option is enabled as the default setting.

  • Page 93: General

    Avira Premium Security Suite This button deletes all entries from the list of permitted servers. Permitted Sender(s) All senders in this list are authorized by MailGuard to send emails: Emails sent from this email address are not blocked by MailGuard. If no senders are included the list, the email address used to send outgoing emails is not scanned.
  • Page 94 Examples: Use of wildcards in email addresses (spam white list) – virus@avira.* / = all emails with this address and any top level domain: virus@avira.de, virus@avira.com, virus@avira.net, etc. – *@avira.com = all emails sent from the domain avira.com: info@avira.com, virus@avira.com, contakt@avira.com, employee@avira.com...

  • Page 95: Cache

    Avira Premium Security Suite 13.3.2.2. Cache Cache The MailGuard cache contains data regarding the scanned emails that is displayed as statistical data in the Control Center under MailGuard. Copies of incoming emails are also deposited in the cache. The emails can also be used for the anti-spam module's training functions (Good email –...

  • Page 96: Footer

    Reference: Configuration options When this option is enabled, a so-called "black list" is queried in real time, which provides additional information to classify emails of dubious origin as spam. Timeout: n second(s) If the information of a black list is not available after n seconds, the attempt to query the black list is aborted.

  • Page 97: Firewall

    The FireWall section of Configuration is responsible for configuration of the Avira FireWall. 13.4.1 Adapter rules In the Avira FireWall, an adapter represents a software simulated hardware device (e.g. miniport, bridge connection, etc.) or a real hardware device (e.g. network card).
  • Page 98 Reference: Configuration options The Avira FireWall displays the adapter rules of all existing adapters on your computer for which a driver was installed. A predefined adapter rule depends on the security level. You can change the security level in the Online protection :: You can change the FireWall settings in the Control Center or define your own adapter rules.
  • Page 99 Avira Premium Security Suite TCP port scan With this rule, you can define when a TCP port scan is assumed by the FireWall and what should be done in this case. This rule serves for preventing so-called TCP port scan attacks that result in a detection of open TCP ports on your computer.

  • Page 100: Incoming Rules

    With a mouse click on the link you have the choice to add or not to add the rule to block the UDP port scan attack. 13.4.1.1. Incoming Rules Incoming rules are defined to control incoming data traffic by the Avira FireWall. Note When a packet is filtered the corresponding rules are applied successively, therefore the rule order is very important.
  • Page 101 Avira Premium Security Suite <empty> with following bytes <empty> with mask <empty> at mask <empty> at offset 0. offset 0. – Deny TCP packets on 135 Deny TCP packets from address 0.0.0.0 with mask 0.0.0.0 if local ports in {135} and remote ports in {0-65535}.
  • Page 102 Reference: Configuration options Discard packets that have following bytes <empty> with mask <empty> at offset 0. – Deny all TCP packets Deny TCP packetsfrom address 0.0.0.0 with mask 0.0.0.0 if local ports are in range {0-65535} and the remote port is in range {0- 65535}.
  • Page 103 Avira Premium Security Suite Application method With a mouse click on this link you have the choice to apply the rule for connection initiation and existing connection packets or only for packets of existing connections or for all packets. Report file By clicking on the link with the mouse you can decide whether to write to a report file or not if the package complies with the rule.
  • Page 104 Reference: Configuration options packets Deny UDP packetsfrom address 0.0.0.0 with mask 0.0.0.0 if local ports are in range {0-65535} and the remote port is in range {0-65535}. Apply for all ports. Don't log when packet matches rule. Advanced: Discard packets that have following bytes <empty>...
  • Page 105 Avira Premium Security Suite With a mouse click on the link a dialog box appears in which you can select a file that contains the specific buffer. Filtered content: Mask With a mouse click on the link a dialog box appears in which you can select the specific mask.
  • Page 106 Reference: Configuration options Filtered content: Data With a mouse click on the link a dialog box appears in which you can select a file that contains the specific buffer. Filtered content: Mask With a mouse click on the link a dialog box appears in which you can select the specific mask.

  • Page 107: Outgoing Rules

    13.4.1.2. Outgoing Rules Outgoing rules are defined to control outgoing data traffic by the Avira FireWall. You can define an outgoing rule for one of the following protocols: IP, ICMP, UDP and TCP.
  • Page 108 Click the link to switch to a different mode. Action Shows the action that the Avira FireWall will automatically take when the application is using the network, whatever the network usage type is. With a mouse click on the link you can switch to another action type.
  • Page 109 Avira Premium Security Suite carried out on all network activities performed by the software application. Advanced: With this type of filtering, the rules that were added to the extended configuration are applied. If you want to create specific rules for an application, select the Advanced entry under Filtering.

  • Page 110: Trusted Providers

    Reference: Configuration options Remove rule Removes the selected application rule. Reload Reloads the list of applications and simultaneously discards the changes just made to the application rules just made. 13.4.3 Trusted providers A list of trusted software producers is displayed under Trusted providers. You can add / remove producers to / from the list using the Always trust this provider option in the Network Event popup window.

  • Page 111: Settings

    13.4.4 Settings Advanced options Enable FireWall If the option is activated, the Avira FireWall is enabled and protects your computer from risks originating from the Internet and other networks. Stop Windows Firewall on startup If this option is enabled, the Windows Firewall is deactivated when the computer is rebooted.

  • Page 112: Popup Settings

    This option is disabled as the default setting. Automatically disable popup notification in game mode When this option is enabled, Avira FireWall game mode is automatically activated when an application is executed in full-screen mode on your computer system. In game mode, all defined adapter and application rules apply.

  • Page 113: Webguard

    Avira Premium Security Suite When this option is enabled, the option "Remember action for this application" in the dialog box "Network event" is enabled in the same way as for the last network event. If the option "Remember action for this application" was enabled, this option is enabled for the following network event.

  • Page 114: Scan

    Reference: Configuration options The WebGuard section of the Configuration is responsible for the configuration of the WebGuard. 13.5.1 Scan WebGuard protects you against viruses or malware that reaches your computer from web pages that you load on your web browser from the Internet. The Scan heading can be used to set the behavior of the WebGuard component.

  • Page 115: Locked Requests

    The affected file can be recovered from the quarantine manager if it has any informative value or - if necessary - sent to the Avira Malware Research Center. Ignore The website requested from the web server and/or the data and files that were transferred are forwarded on by WebGuard to your web browser.
  • Page 116 Reference: Configuration options In this box, enter the names of the MIME types and file types you want WebGuard to block. For file types, enter the file extension, e.g. .htm. For MIME types, indicate the media type and, where applicable, sub-type. The two statements are separated from one another by a single slash, e.g.

  • Page 117: Exceptions

    Avira Premium Security Suite In the Web filter list you can select the content categories whose URLs are to be blocked by WebGuard. Note The Web filter is ignored for entries in the list of excluded URLs under WebGuard::Scan::Exceptions. Note Spam URLs are URLs sent with spam emails.
  • Page 118 The button allows you to copy the URL entered in the input field (Internet address) to the viewer window. Delete The button deletes a selected entry from the list. This button is inactive if no entry is selected. Examples: Skipped URLs – www.avira.com -OR- www.avira.com/*...

  • Page 119: Heuristics

    URLs with the domain 'www.avira.de' are not excluded from WebGuard scans. – avira.com -OR- *.avira.com = All URLs with the second and top-level domain 'avira.com' are excluded from WebGuard scans: The specification implies all existing subdomains for '.avira.com': www.avira.com, forum.avira.com, etc.

  • Page 120: Report

    Reference: Configuration options Your AntiVir product contains a highly powerful macrovirus heuristic. If this option is enabled, all macros in the relevant document are deleted in the event of a repair, alternatively suspect documents are only reported, i.e. you receive an alert. This option is enabled as the default setting and is recommended.

  • Page 121: Parental Controls

    Avira Premium Security Suite Limit size to n MB If this option is enabled, the report file can be limited to a certain size; possible values: Permitted values are between 1 and 100 MB. Around 50 kilobytes of extra space are allowed when limiting the size of the report file to minimize the use of system resources.
  • Page 122 Reference: Configuration options Password Protected To enable the parental control configuration, press the "Password Protected" button and enter the parental control password in the "Enter Password" window. Enable parental control If this option is enabled, all the web pages requested by the user while navigating in the Internet are scanned on the basis of the role assigned to the registered user in the parental control function.

  • Page 123: Backup

    – Limit Internet usage time: You can set a permitted usage duration (per day, week, month). Exact weekday usage periods can be enabled. 13.7 Backup The Backup section of Configuration is responsible for configuration of the Avira Backup component. 13.7.1 Settings In Settings you can configure the behavior of the Backup component.
  • Page 124 Reference: Configuration options Input box Enter the names of the file objects that are not to be saved in this box. The path for the temporary directory for the local settings of the logged-in user is entered as default. The button opens a window in which you can select the required file or the required path.

  • Page 125: Report

    Avira Premium Security Suite C:\Program Files\Application\applic?????.e* C:\Program Files\ C:\Program Files C:\Program Files\Application\*.mdb Lists of file extensions Consider all file extensions If this option is enabled, all files in the backup profile are saved. Enable backup of skipped file extensions If this option is enabled, all files in the backup profile are saved, except files whose extensions are entered in the list of excluded file extensions.

  • Page 126: Update

    Reference: Configuration options 13.8 Update In the Update section you can configure the automatic receiving of updates. You can specify various update intervals and activate or deactivate automatic updating. Automatic update Activate If this option is enabled, automatic updates are performed for the enabled events at the specified interval.

  • Page 127: Restart Settings

    Avira Premium Security Suite If this option is enabled, you will be notified by email when new product updates become available. Updates to the virus definition file and scan engine are performed independently of this setting. The conditions for this option are: complete configuration of the update and an open connection to a download server.

  • Page 128: General

    Reference: Configuration options Reminder message for restart every n seconds If this option is enabled, the restart which is necessary after a product update has been executed is not performed automatically. At the specified interval, you will receive restart notifications without cancel options. These notifications let you confirm the computer restart or select the "Remind me again"...

  • Page 129: Threat Categories

    Avira Premium Security Suite 13.9.1 Threat categories Selection of threat categories Your AntiVir product protects you against computer viruses. In addition, you can scan according to the following extended threat categories. – Backdoor Clients (BDC) – Dialer (DIALER) – Games (GAMES) –...
  • Page 130 Send email to If this option is enabled, the pre-defined password is Avira required to send an object to the Avira Malware Research Center for examination. Copying affected If this option is enabled, the pre-defined password is objects required to copy the affected object.

  • Page 131: Security

    Avira Premium Security Suite Configuration If this option is enabled, configuration of the program is only possible after entering the pre- defined password. Enable expert If this option is enabled, the pre-defined password is mode required to enable expert mode.

  • Page 132: Wmi

    Reference: Configuration options If this option is enabled, all registry entries of the program and all program files (binary and configuration files) are protected from manipulation. Protection against manipulation entails preventing write, delete and, in some cases, read access to the registry entries or program files by users or external programs.

  • Page 133: Directories

    Avira Premium Security Suite Warning If you are using a proxy server which requires authentication, enter all the required data under the option Use this proxy server. The Use Windows system settings option can only be used for proxy servers without authentication.

  • Page 134: Events

    Reference: Configuration options 13.9.7 Events Limit size of event database Limit maximum number of events to n entries If this option is enabled, the maximum number of events listed in the event database can be limited to a certain size; possible values: 100 to 10000 entries. If the number of entered entries is exceeded, the oldest entries are deleted.

  • Page 135: Warnings

    Avira Premium Security Suite If this option is enabled, there is an acoustic alert with the default signal when a virus is detected by the Scanner or Guard. The acoustic alert is sounded on the PC’s internal speaker. Use the following Wave file (interactive mode only) If this option is enabled, there is an acoustic alert with the selected Wave file when a virus is detected by the Scanner or Guard.
  • Page 136 This manual was created with great care. However, errors in design and contents cannot be excluded. The reproduction of this publication or parts thereof in any form is prohibited without previous written consent from Avira GmbH. Errors and technical subject to change. Issued Q2-2011 AntiVir is a registered trademark of the Avira GmbH.

This manual is also suitable for:

Premium security suite

Table of Contents