User`s guide

system. The malware can affect your system only if the infected file is extracted

from the archive and executed without having real-time protection enabled.

● Action options. If you consider changing the actions taken on detected files,

check for tips in “Changing the Actions Taken on Detected Files” (p. 63).

● Scan options for e-mail, web and instant messaging traffic. To prevent

malware from being downloaded to your computer, BitDefender automatically

scans the following malware entry points:

▶ incoming e-mails

▶ web traffic

▶ files received via Yahoo! Messenger and Windows Live Messenger

Scanning the web traffic may slow down web browsing a little, but it will block

malware coming from the Internet, including drive-by downloads.

Though not recommended, you can disable e-mail, web or instant messaging

antivirus scan to increase system performance. If you disable the corresponding

scan options, the e-mails and files received or downloaded from the Internet will

not be scanned, thus allowing infected files to be saved to your computer. This

is not a major threat because real-time protection will block the malware when

the infected files are accessed (opened, moved, copied or executed).

15.1.3. Changing the Actions Taken on Detected Files

Files detected by real-time protection are grouped into two categories:

● Infected files. Files detected as infected match a malware signature in the

BitDefender Malware Signature Database. BitDefender can normally remove the

malware code from an infected file and reconstruct the original file. This operation

is known as disinfection.

Note

Malware signatures are snippets of code extracted from actual malware samples.

They are used by antivirus programs to perform pattern-matching and detect

malware.

The BitDefender Malware Signature Database is a collection of malware signatures

updated hourly by the BitDefender malware researchers.

● Suspicious files. Files are detected as suspicious by the heuristic analysis.

Suspicious files cannot be disinfected, because no disinfection routine is available.

Depending on the type of detected file, the following actions are taken automatically:

● If an infected file is detected, BitDefender will automatically attempt to disinfect

it. If disinfection fails, the file is moved to quarantine in order to contain the

infection.

Antivirus Protection

BitDefender Total Security 2011