User manual
Table Of Contents
- 1 Introduction
- 2 Icons and emphases
- 3 Product information
- 4 Installation and uninstallation
- 5 Overview of AntiVir Professional
- 5.1 User interface and operation
- 5.2 How to...?
- 5.2.1 Activate license
- 5.2.2 Avira AntiVir Professional automatic update
- 5.2.3 Start a manual update
- 5.2.4 On-demand scan: Using a scan profile to scan for viruses and malware
- 5.2.5 On-demand scan: Scan for viruses and malware using Dragamp;Drop
- 5.2.6 On-demand scan: Scan for viruses and malware via the context menu
- 5.2.7 On-demand scan: Automatically scan for viruses and malware
- 5.2.8 On-demand scan: Targeted scan for active rootkits
- 5.2.9 Reacting to detected viruses and malware
- 5.2.10 Quarantine: Handling quarantined files (*.qua)
- 5.2.11 Quarantine: Restore the files in quarantine
- 5.2.12 Quarantine: move suspicious files to quarantine
- 5.2.13 Scan profile: Amend or delete file type in a scan profile
- 5.2.14 Scan profile: Create desktop shortcut for scan profile
- 5.2.15 Events: Filter events
- 5.2.16 MailGuard: Exclude email addresses from scan
- 5.2.17 Firewall: Select the security level for the Firewall
- 6 Scanner::Overview
- 7 Updates
- 8 Avira Firewall::Overview
- 9 FAQ, Tips
- 10 Viruses and more
- 11 Info and Service
- 12 Reference: Configuration options
Avira AntiVir Professional
62
A rootkit is a collection of software tools that are installed after a computer system has
been infiltrated to conceal logins of the infiltrator, hide processes and record data -
generally speaking: to make themselves invisible. They attempt to update already
installed spy programs and reinstall deleted spyware.
Script viruses and worms
Such viruses are extremely easy to program and they can spread - if the required
technology is on hand - within a few hours via email round the globe.
Script viruses and worms use one of the script languages, such as Javascript, VBScript
etc., to insert themselves in other, new scripts or to spread themselves by calling
operating system functions. This frequently happens via email or through the exchange
of files (documents).
A worm is a program that multiplies itself but that does not infect the host. Worms can
consequently not form part of other program sequences. Worms are often the only
possibility to infiltrate any kind of damaging programs on systems with restrictive
security measures.
Spyware
Spyware are so-called spy programs that intercept or take partial control of a computer's
operation without the user's informed consent. Spyware is designed to exploit infected
computers for commercial gain.
Trojan horses (short Trojans)
Trojans are pretty common nowadays. We are talking about programs that pretend to
have a particular function, but that show their real image after execution and carry out a
different function that, in most cases, is destructive. Trojan horses cannot multiply
themselves, which differentiates them from viruses and worms. Most of them have an
interesting name (SEX.EXE or STARTME.EXE) with the intention to induce the user to
start the Trojan. Immediately after execution they become active and can, for example,
format the hard disk. A dropper is a special form of Trojan that 'drops' viruses, i.e.
embeds viruses on the computer system.
Zombie
A Zombie-PC is a computer that is infected with malware programs and enables hackers
to abuse computers via remote control for criminal purposes. On command, the affected
PC starts denial-of-service (DoS) attacks, for example, or sends spam and phishing
emails.