User manual
Table Of Contents
- 1 Introduction
- 2 Icons and emphases
- 3 Product information
- 4 Installation and uninstallation
- 5 Overview of AntiVir Professional
- 5.1 User interface and operation
- 5.2 How to...?
- 5.2.1 Activate license
- 5.2.2 Avira AntiVir Professional automatic update
- 5.2.3 Start a manual update
- 5.2.4 On-demand scan: Using a scan profile to scan for viruses and malware
- 5.2.5 On-demand scan: Scan for viruses and malware using Dragamp;Drop
- 5.2.6 On-demand scan: Scan for viruses and malware via the context menu
- 5.2.7 On-demand scan: Automatically scan for viruses and malware
- 5.2.8 On-demand scan: Targeted scan for active rootkits
- 5.2.9 Reacting to detected viruses and malware
- 5.2.10 Quarantine: Handling quarantined files (*.qua)
- 5.2.11 Quarantine: Restore the files in quarantine
- 5.2.12 Quarantine: move suspicious files to quarantine
- 5.2.13 Scan profile: Amend or delete file type in a scan profile
- 5.2.14 Scan profile: Create desktop shortcut for scan profile
- 5.2.15 Events: Filter events
- 5.2.16 MailGuard: Exclude email addresses from scan
- 5.2.17 Firewall: Select the security level for the Firewall
- 6 Scanner::Overview
- 7 Updates
- 8 Avira Firewall::Overview
- 9 FAQ, Tips
- 10 Viruses and more
- 11 Info and Service
- 12 Reference: Configuration options

Avira AntiVir Professional
32
Stop job
5.2.8 On-demand scan: Targeted scan for active rootkits
To scan for active rootkits, use the predefined scan profile Scan for rootkits.
To scan for active rootkits systematically:
Go to Control Center and select the section Local protection :: Scan.
Predefined scan profiles appear.
Select the predefined scan profile Scan for active malware.
Where appropriate, highlight other nodes and directories to be scanned by clicking
on the check box of the directory level.
Click on the icon (Windows XP:
or Windows Vista: ).
The Luke Filewalker window appears and an on-demand scan is started.
When the scan is completed, the results are displayed.
5.2.9 Reacting to detected viruses and malware
For the individual protection components of AntiVir Professional, you can define how
AntiVir Professional reacts to a detected virus or unwanted program in the
Configuration under the section Action for concerning files.
No configurable action options are available for the ProActiv component of the Guard:
Notification of a detection is always given in the Guard: Suspicious application behavior
window.
Action options for the Scanner:
– Interactive
In interactive action mode, the results of the Scanner scan are displayed in a dialog
box. This option is enabled as the default setting.
In the case of Scanner scan, you will receive an alert with a list of the affected files
when the scan is complete. You can use the content-sensitive menu to select an
action to be executed for the various infected files. You can execute the standard
actions for all infected files or cancel the Scanner.
– Automatic
In automatic action mode, when a virus or unwanted program is detected, the action
you selected in this area is executed automatically. If you enable the option Display
alert, you will receive an alert whenever a virus is detected, indicating the action
carried out.
Action options for the Guard:
– Interactive