Avira AntiVir Server Support March 2010 www.avira.
Content 1. Setup Modes ......................................................................................................... 3 2. Configuration ........................................................................................................ 7 3. Jobs in the scheduler ......................................................................................... 13 4. Different scan profiles ........................................................................................ 13 5. Quarantine.......
Avira AntiVir Server | HowTo This document helps you to install and configure Avira AntiVir Server in an optimal way. It contains important and helpful settings and recommendations of the Avira Support for the configuration of the program. Furthermore you find useful hints e.g. the procedure in case of a virus attack. You find all installation files and product manuals in pdf format on our website: http://www.avira.de/en/download/index.html 1.
Avira AntiVir Server | HowTo It is possible that the installation of the Microsoft Visual C++ 2008 is also started in case the kit wasn’t installed before. Hint: Avira AntiVir Server uses runtime libraries of the Micorsoft Visual C++ 2008 – redistributable kit. The installation of Microsoft Visual C++ 2008 - redistributable kit is required for the usage of Avira AntiVir Server. The link for the downlad of the redistributable kit is: http://www.microsoft.com/downloads/details.
Avira AntiVir Server | HowTo Heuristic is a method of detection which is able to detect unknown viruses. A profound analysis of the code looks for functions which are typical for viruses. In case the examined code has suspicious characteristics, AntiVir indicates the suspicious file. This doesn’t mean that the code is really a virus, false positives are possible. In the following dialogue window you can choose the extended threat categories.
Avira AntiVir Server | HowTo In the next configuration dialogue you can choose the settings for the email notifications. AntiVir Server uses emails via SMTP for the sending of warnings of the different modules Guard, Scanner and Updater. In case you don’t know the data of your SMTP server or you don’t want to use this option you can leave these boxes empty. .
Avira AntiVir Server | HowTo 2. Configuration 2.1 Update configuration for the Internet Update Manager In case you want to use several installations of AntiVir Server or AntiVir Professional in your network and update them centrally you can do that by means of the free module “Internet Update Manager”. This is very helpful in case only one computer should have access to the internet but you want to update the virus definition files on all your computers in the network.
Avira AntiVir Server | HowTo Afterwards go to the point “Webserver”. Here you have two boxes, “Priority server” and “Default server”. Avira AntiVir Server tries to contact the priority server in the first place. In case there is no connection to the priority server available, AntiVir tries to get a connection to the default server. Therefore the function “Priority server” should be used for the updates via the Internet Update Manager (IUM).
Avira AntiVir Server | HowTo The following information should be entered into this box: http://[IP-Adresse des IUM-Rechners]:7080/update (AntiVir 9 and 10) http://[IP-Adresse des IUM-Rechners]:7080/upd (AntiVir 8) Example: http://192.168.0.1:7080/update http://192.168.0.1:7080/upd You can change the port of the Internet Update Manager if this port is already occupied in your network.
Avira AntiVir Server | HowTo 2.2 Configuration of product updates You find the point “Product updates” in the configuration settings of the update of Avira AntiVir Server. Avira provides you with updates of the software in irregular intervals in order to correct program malfunctions or to offer new functions. If you set automatic program updates here, keep in mind that a server reboot might be necessary. The reboot is initiated automatically by AntiVir Server.
Avira AntiVir Server | HowTo In case you should use a special backup software or another software working with a data base which is not contained in this list, please, go to the point “exceptions”. In the menu “Processes to be skipped by Guard” you have to enter the paths of the program folders where the concerned software is installed. It is important that the entered path is followed directly with a “\” so that AntiVir recognizes the path as a directory and not as a file.
Avira AntiVir Server | HowTo from the scan. In case only the program directory is omitted by the guard scan the guard will not be active in this directory. But this doesn’t concern all active processes in the task manager. It is also important for the execution of the scan to exclude the program folders of the corresponding software from the scanner. This can be done in the menu “Scanner” “Scan” “Exception”.
Avira AntiVir Server | HowTo 3. Jobs in the scheduler The Avira AntiVir Server offers an integrated scheduler for one-time or regular jobs, like e.g. updates and scans. You should enter the settings for this scheduler after the installation, so that updates and scans are proceeded automatically. Start the Avira AntiVir Server GUI and choose the point “Scheduler”. Click in the task bar on “Create new job using wizard”. Define a name (e.g. internet update or weekly scan) and a short description for the job.
Avira AntiVir Server | HowTo Which scan profile is the best depends on which data have to be checked or excluded from the scan. In case of a virus attack which can be localized on the local drives, the profile “Local drives” shortens the scan considerably. The profile “Local drives” also scans cd drives and removable media. New unknown USB sticks which are connected to the PC should also be checked.
Avira AntiVir Server | HowTo Scan profile Explanation Local Drives This profile checks all local drives. Local Hard Disk This profile only checks the local hard disk on your system. Removable Drives This profile checks all available removable drives. Windows System Directory Complete system scan My Documents Active Processes Scenario In case you don’t know on which drive a virus is.
Avira AntiVir Server | HowTo You can get to the quarantine administration of the AntiVir Srever by starting the AntiVir Server gui and choosing the point “Quarantine”. Tip: In the following cases, we recommend an analysis by the Avira Malware Research Center: Heuristic Detection (suspicious files): A scan has detected a suspicious file. It has been moved to the quarantine.
Avira AntiVir Server | HowTo Suspicious file: You think a file is suspicious and you moved it to the quarantine. But the check of the file for viruses and malware is negative. False positive: You are quite sure that a detection is a false positive: Avira AntiVir Professional detects a file which is very unlikely to be malware. Tip The size of the file is limited to 20 MB unpacked or 8 MB packed.
Avira AntiVir Server | HowTo Keeping the configuration for several installations You can install the Avira AntiVir Server on several PCs and use a defined configuration on all the PCs by means of the “avnetnt.ini”. You can find it in the following path: Windows Server 2003: C:\ Documents und Settings\All Users\Application Data\Avira\AntiVir Server\config\avnetnt.ini Windows Server 2008: C:\Programm Data\Avira\AntiVir Server\config\avnetnt.
Avira AntiVir Server | HowTo Back-door client (BDC) In order to steal data or manipulate computers, a back-door server program is locked in via the “back-door” so that the user doesn’t become aware of it. This program can be controlled by a back-door control software via the Internet or network. Adware/Spyware Software that displays advertising or sends the user’s personal data to a third party is usually unwanted.