User manual AVIRA ANTIVIR PERSONAL FOR UNIX

[. . . ] Avira AntiVir Personal | Unix User Manual Contents 1. About this Manual . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3 1. 1 Introduction . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1. 2 The Structure of the Manual . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [. . . ] Example: DetectPrefixes adspy=yes appl=no bdc=yes dial=yes game=no hiddenext=no joke=no pck=no phish=yes spr=no Avira GmbH Avira AntiVir Personal (UNIX) 18 Heuristics Macro Macrovirus Heuristics: Activates the heuristics for macroviruses in office documents. HeuristicsMacro yes Win32-Heuristics: Sets the level of heuristic detection in all types of files. Available values are 0 (off), 1 (low), 2 (medium) and 3 (high - could result in false alerts!). HeuristicsLevel 1 Guard's shared lockfile: You must specify the absolute path to the Guard's lockfile, so that other software on the computer can detect Guard's presence. The file is also used for the Gnome plug-in. ActiveLockFile /var/lock/LCK. . avguard Default: ActiveLockFile NONE Heuristics Level ActiveLockFile 4. 1. 2 Configuration of the Command Line Scanner in avscan. conf A new configuration file for the on-demand scanner has been introduced, starting with Avira AntiVir Personal v 3. 0. 0: avscan. conf. Repair Concerning Files Repairing files: The CLS is trying to repair infected files. The following option must be active: RepairConcerningFiles yes It is not activated by default. AlertAction Action when detecting viruses or unwanted programs: If RepairConcerningFiles is not set or repair is not possible, access to the file is blocked and the action is logged. The following options define the actions of the CLS (check the user permissions!): · none or ignore: no further action · rename or ren: renaming the file by adding the . XXX extension. · delete or del: delete the concerning file. · quarantine: move the concerning file into quarantine directory, if you have defined one (see below). You can select only one of these options. If more than one is activated, AntiVir applies the last one selected in the configuration file. Default: AlertAction none Quarantine Directory You have to define the quarantine directory, if you want to use the quarantine option for AlertAction (see above). Default is: QuarantineDirectory /home/quarantine Temporary Directory Temporary location of CLS files: Temporary files of the CLS are written in this directory. Example: TemporaryDirectory /tmp FollowSymlink Setting the on-demand scanner behavior for symlinks: Symbolic links are followed by default. You can use this option to change the behavior. Avira GmbH Avira AntiVir Personal (UNIX) 19 FollowSymlink yes ScanMode Configuring files to be scanned: This entry sets the procedure to determine whether a file is to be scanned or not. The available methods are: · extlist: scan only files with certain extensions; · smart: scan files based on both their name and file type; · all: always scan files, of all types and names. The default is: ScanMode smart ArchiveScan Scanning archives on-demand: The CLS scans archives on-demand, depending on the setting for ArchiveMaxSize, ArchiveMaxRecursion and ArchiveMaxRatio. This is activated by default in order to maintain the highest security: ArchiveScan yes Maximum archive size: This option limits the scanning process to the files with unpacked size smaller than the specified value (in bytes, KB, MG, GB). The default setting is 1 Gigabyte: ArchiveMaxSize 1GB Maximum recursion level: When scanning recursive archives, the level of recursion can be limited. The zero value means all archives are completely unpacked, regardless of their recursion level. Default: ArchiveMaxRecursion 20 Maximum compression rate for archives: This option limits the scanning to files which do not exceed a certain compression level. [. . . ] In many cases it is enough for an update to load the most recent version of this file. Virtual File System Unwanted programs VDF (Virus Definition File) VFS 9. 2 Further Information You can find further information on viruses, worms, macro viruses and other unwanted programs at http://www. avira. com/en/threats/index. html . AntiVir Guard is based on DazukoFS (http://www. dazuko. org), an open source software project. DazukoFS is a kernel module which allows the AntiVir Guard daemon to access the files. Avira GmbH Avira AntiVir Personal (UNIX) 39 9. 3 Golden Rules for Protection Against Viruses Always keep boot floppy-disks for your network server and for your workstations. [. . . ]