User manual AVIRA ANTIVIR SERVER FOR UNIX

[. . . ] Avira AntiVir Server | Unix Avira AntiVir Professional | Unix User Manual Contents 1. About this Manual . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3 1. 1 Introduction . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1. 2 The Structure of the Manual . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [. . . ] phish - faked emails that are supposed to prompt the victim to reveal confidential information such as user accounts, passwords or online-banking data on certain websites. spr - software that may compromise the security of your system, initiate unwanted program activities, damage your privacy or spy out your user behavior and might therefore be unwanted. alltypes - option to detect all supported malware types. Syntax: list of types, separated by whitespace or colon. DetectPrefixes <type>[=<bool>] <type>[=<bool>] . . . Example: DetectPrefixes adspy=yes appl=no bdc=yes dial=yes game=no hiddenext=no joke=no pck=no phish=yes spr=no Heuristics Macro Macrovirus Heuristics: Activates the heuristics for macroviruses in office documents. HeuristicsMacro yes Win32-Heuristics: Sets the level of heuristic detection in all types of files. Available values are 0 (off), 1 (low), 2 (medium) and 3 (high - could result in false alerts!). HeuristicsLevel 1 Support via graphical user interface (GUI): This option must be activated in order for AntiVir Server/ Professional to communicate with the GUI of Avira SMC. You must enter the following parameters: GuiSupport yes GuiCAFile /usr/lib/AntiVir/guard/gui/cert/cacert. pem GuiCertFile /usr/lib/AntiVir/guard/gui/cert/server. pem GuiCertPass antivir_default In the case of missing or invalid parameters, the GUI support is not available. The log file records possible errors. Heuristics Level GUISupport ActiveLockFile Guard's shared lockfile: You must specify the absolute path to the Guard's lockfile, so that other software on the computer can detect Guard's presence. ActiveLockFile /var/lock/LCK. . avguard Default: ActiveLockFile NONE 4. 1. 2 Configuration of the Command Line Scanner in avscan. conf A new configuration file for the on-demand scanner has been introduced, starting with AntiVir Server/ Professional v 3. 0. 0: avscan. conf. Repair Concerning Files Repairing files: The CLS is trying to repair infected files. The following option must be active: RepairConcerningFiles yes It is not activated by default. Avira GmbH Avira AntiVir Server/ Professional (UNIX) 25 AlertAction Action when detecting viruses or unwanted programs: If RepairConcerningFiles is not set or repair is not possible, access to the file is blocked and the action is logged. The following options define the actions of the CLS (check the user permissions!): · none or ignore: no further action · rename or ren: renaming the file by adding the . XXX extension. · quarantine: move the concerning file into quarantine directory, if you have defined one (see below). If more than one is activated, AntiVir applies the last one selected in the configuration file. Default: AlertAction none Quarantine Directory You have to define the quarantine directory, if you want to use the quarantine option for AlertAction (see above). Default is: QuarantineDirectory /home/quarantine ExcludePattern Excluded PCRE patterns from on-demand scanning: This option specifies files/directories that should be excluded from on-demand scanning. The files/directories are not scanned, if their names match the given PCRE pattern (Perlcompatible regular expression). ExcludePattern [regex] You can also exclude multiple PCRE patterns from the scan. Simply combine all the expressions you want to exclude by specifying one after the other as consecutive configuration file options. Example: ExcludePattern usr/share ExcludePattern src/kernels ExcludePattern usr/lib ExcludePattern(so|h|mo|gz)$ Default: ExcludePattern NONE. . Although filenames often indicate the file type (even under Unix), there is no technical connection between filenames and file types under Unix. [. . . ] A file containing reports generated by the program during run-time when a certain event occurs. These can be interferences such as viruses or other software which the user generally considers as unwanted (see also Unwanted Programs). The directory where infected files are stored to block the user's access to them. The user with unlimited access rights (such as system administrator on Windows) Secure AntiVirus Application Programming Interface A text file containing commands to be executed by the system (similar to batch files in DOS) A Byte combination used to recognize a virus or unwanted program. [. . . ]