User manual

Table Of Contents
Reference: Configuration options
73
12.1.1.4. Heuristic
This configuration section contains the settings for the heuristic of the Avira AntiVir
Professional search engine.
Avira AntiVir Professional contains very powerful heuristics that can proactively uncover
unknown malware, i.e. before a special virus signature to combat the damaging element
has been created and before a virus guard update has been sent. Virus detection involves
an extensive analysis and investigation of the affected codes for functions typical of
malware. If the code being scanned exhibits these characteristic features, it is reported as
being suspicious. This does not necessarily mean that the code is in fact malware. False
positives do sometimes occur. The decision on how to handle affected code is to be made
by the user, e.g. based on his or her knowledge of whether the source of the code is
trustworthy or not.
Macrovirus heuristics
Macrovirus heuristics
Avira AntiVir Professional contains a highly powerful macro virus heuristic. If this
option is enabled, all macros in the relevant document are deleted in the event of a
repair, alternatively suspect documents are only reported, i.e. you receive an alert. This
option is enabled as the default setting and is recommended.
Advanced Heuristic Analysis and Detection (AHeAD)
enable AHeAD
Avira AntiVir Professional contains a very powerful heuristic in the form of AntiVir
AheAD technology, which can also detect unknown (new) malware. If this option is
activated, you can define how "aggressive" this heuristic should be. This option is enabled
as the default setting.
Low detection level
If this option is enabled, Avira AntiVir Professional detects slightly less unknown
malware, the risk of false alerts is low in this case.
Medium detection level
This setting is activated by default if you have selected the use of this heuristic.
High detection level
If this option is enabled, Avira AntiVir Professional detects much more unknown
malware, however false positives can also be expected.
12.1.2 Report
The Scanner has a comprehensive reporting function. You thus obtain precise
information on the results of an on-demand scan. The report file contains all entries of
the system as well as alerts and messages of the on-demand scan.
Note
To enable you to establish what actions the Scanner has carried out when viruses or
unwanted programs have been detected, a report file should always be created.
Reporting