User manual

Malicious users can manipulate filenames by simply changing the extension to a different
file type. To prevent file type filtering being fooled by this type of manipulation, you can
use the binary pattern which uniquely identifies file formats. The binary pattern is
therefore the most reliable method for identifying file types.
Filename patterns, however, can be used to quickly react to new virus attacks:
As soon as the extension of the file containing a virus is known (for example Nimda Virus
= readme.exe), a virus infection can be prevented even before a virus pattern update is
available from the publisher of your antivirus application. A new fingerprint with the
filename pattern is simply created to identify the virus.
You can also block individual files:
If your company employs custom software that uses its own file formats, you can also
create fingerprints for these files, which you can use, for example, to prevent files of this
type being sent as e-mail attachments to recipients outside the company.
Sorting and grouping fingerprints
You can sort fingerprints and group them into logical categories. Fingerprint categories
are listed alphabetically.
1. Go to Basic Configuration - Utility Settings - Fingerprints to view all available
categories in the right pane.
2. Doble-click a category to open it.
The individual fingerprints appear in the right pane.
3. You can drag individual fingerprints from the right pane into a different category in
the left pane.
4. To view the Properties of a fingerprint in the right pane, double-click or right-click
the fingerprint.
Note: To copy fingerprints from the All Fingerprints category, drag them to the
desired category. When you drag fingerprints from any of the other categories, they
are moved! To copy from other categories, hold the Ctrl key while dragging. A plus
symbol then appears in the cursor.
Attention: When you delete a fingerprint from any category with the Del key, it is
permanently deleted and can not be restored. To remove a fingerprint from a
category without permanently deleting it, right-click it and select All Tasks -
Remove fingerprint(s) from this category. Make sure that the fingerprints you
want to delete or remove are no longer used by an Avira AntiVir Exchange job.
To create a new fingerprint category, click on Fingerprints in the left pane, right-click
and select New - Fingerprint Category. For a new fingerprint, right-click the
category and select New - Fingerprint.
The Jobs tab in the fingerprint properties shows the list with the jobs that use the
fingerprint.
Creating Fingerprints with Name Patterns
If a file’s binary pattern is not known, it can be identified quickly using a name pattern.
1. Double-click a fingerprint to open the Properties
The General tab (refer to Configuring Fingerprints ) shows the fingerprint's name
Avira AntiVir Exchange 7
95