AVG Anti-Virus 2011 User Manual Document revision 2011.07 (12. 11. 2010) C opyright AVG Technologies C Z, s.r.o. All rights reserved. All other trademarks are the property of their respective owners. This product uses RSA Data Security, Inc. MD5 Message-Digest Algorithm, C opyright (C ) 1991-2, RSA Data Security, Inc. C reated 1991. This product uses code from C -SaC zech library, C opyright (c) 1996-2001 Jaromir Dolecek (dolecek@ics.muni.cz).
Contents ........................................................................................................................ 7 1. Introduction ........................................................................................................................ 8 2. AVG Installation Requirements 8 2.1 Operation.......................................................................................................... Systems Supported 8 2.2 Minimum ......................................................
.......................................................................................................... 27 6.7 AVG gadget ........................................................................................................................ 29 7. AVG Components .......................................................................................................... 29 7.1 Anti-Virus .......................................................................................................... 29 7.1.
.......................................................................................................... 55 8.1.1 AVG logo button .......................................................................................................... 55 8.1.2 AVG Secure Search powered search box .......................................................................................................... 55 8.1.3 Page Status ...................................................................................................
.......................................................................................................... 102 9.11 Resident Shield 102 9.11.1.......................................................................................................... Advanced Settings 102 9.11.2.......................................................................................................... Excluded items .......................................................................................................... 105 9.
.......................................................................................................... 154 11.1 Update Levels .......................................................................................................... 154 11.2 Update Types .......................................................................................................... 154 11.3 Update Process ........................................................................................................................
1. Introduction This user manual provides comprehensive documentation for AVG Anti-Virus 2011. Congratulations on your purchase of AVG Anti-Virus 2011! AVG Anti-Virus 2011 is one of a range of award winning AVG products designed to provide you with peace of mind and total security for your PC. As with all AVG products AVG Anti-Virus 2011 has been completely re-designed, from the ground up, to deliver AVG’s renowned and accredited security protection in a new, more user friendly and efficient way.
2. AVG Installation Requirements 2.1. Operation Systems Supported AVG Anti-Virus 2011 is intended to protect workstations with the following operating systems: · Windows XP Home Edition SP2 · Windows XP Professional SP2 · Windows XP Professional x64 Edition SP1 · Windows Vista (x86 and x64, all editions) · Windows 7 (x86 and x64, all editions) (and possibly higher service packs for specific operating systems) Note: The ID Protection component is not supported on Windows XP x64.
3. AVG Installation Options AVG can be installed either from the installation file available on your installation CD, or you can download the latest installation file from AVG website (http://www.avg.com/). Before you start installing AVG, we strongly recommend that you visit AVG website (http://www.avg.com/) to check for a new installation file. This way you can be sure to install the latest available version of AVG Anti-Virus 2011.
4. AVG Installation Process To install AVG Anti-Virus 2011 on your computer, you need to get the latest installation file. You can use the installation file from the CD that is a part of your box edition but this file might be out-of-date. Therefore we recommended getting the latest installation file online. You can download the file from AVG website (http://www. avg.com/), the Support Center / Download section.
4.2. Activate your AVG license In the Activate Your License dialog you are invited to fill in your license number into the provided text field. The sales number can be found on the CD packaging in your AVG Anti-Virus 2011 box. The license number will be in the confirmation email that you received after purchasing your AVG Anti-Virus 2011 on-line. You must type in the number exactly as shown.
4.3. Select type of installation The Select type of installation dialog offers the choice of two installation options: Quick Install and Custom Install. For most users, it is highly recommended to keep to the standard Quick Install that installs AVG in fully automatic mode with settings predefined by the program vendor. This configuration provides maximum security combined with the optimal use of resources.
4.4. Custom options The Custom Options dialog allows you to set up two parameters of the installation: Destination Folder Within the Destination Folder section of the dialog you are supposed to specify the location where AVG Anti-Virus 2011 should be installed. By default, AVG will be installed to the program files folder located on drive C:. In case the folder does not exist yet, you will be asked in a new dialog to confirm you agree AVG creates this folder now.
Press the Next button to continue. 4.5. Install the AVG Security Toolbar In the Install the AVG Security Toolbar dialog, decide whether you want to install the AVG Security Toolbar. If you do not change the default settings, this component will be installed automatically into your Internet browser (currently supported browsers are Microsoft Internet Explorer v. 6.0 or higher, and Mozilla Firefox v. 3.0 or higher) and to provide you with comprehensive online protection while surfing the Internet.
4.6. Close running applications The Close running applications dialog appears during the installation process only in case there are some other clashing programs running on your computer at the moment. Then, the list of programs that need to be closed in order to successfully finish the installation process will be provided.
4.7. Install progress The Install Progress dialog shows the progress of the installation process, and does not require any intervention: After the installation process is finished, the virus database and program will be updated automatically. Then, you will be redirected to the next dialog. 4.8. Installation was successful A V G A nti- V irus 2 0 1 1 © 2 0 1 0 C opyright A V G T ec hnologies C Z, s .r.o. A ll rights res erved.
The Installation was successful dialog confirms that your AVG Anti-Virus 2011 has been fully installed and configured. In this dialog please provide your contact information so that you can receive all product related information and news.
Administration dialog. For detailed information on AVG Remote administration please consult AVG Network Edition user manual; to be downloaded from AVG website (http://www.avg.com/). A V G A nti- V irus 2 0 1 1 © 2 0 1 0 C opyright A V G T ec hnologies C Z, s .r.o. A ll rights res erved.
5. After Installation 5.1. Product registration Having finished the AVG Anti-Virus 2011 installation, please register you product online on AVG website (http://www.avg.com/), Registration page (follow the instruction provided directly in the page). After the registration you will be able to gain full access to your AVG User account, the AVG Update newsletter, and other services provided exclusively for registered users. 5.2.
warning. This notice demonstrates that AVG is correctly installed on your computer. From the http://www.eicar.com website you can also download the compressed version of the EICAR 'virus' (e.g. in the form of eicar_com.zip). Online Shield allows you to download this file and save it on your local disk but then the Resident Shield detects the 'virus' as you try to unpack it. If AVG fails to identify the EICAR test file as a virus, you should check the program configuration again! 5.5.
6.
access to AVG scanning and update - details >> 6.1. System Menu The System menu is the standard navigation used in all Windows applications. It is located horizontally in the very top part of the AVG Anti-Virus 2011 main window. Use the system menu to access specific AVG components, feature, and services. The system menu is divided into five main sections: 6.1.1. File · Exit - closes the AVG Anti-Virus 2011's user interface.
6.1.4.
the items display as Register and Activate. For more information please consult the License section of this documentation. · About AVG - opens the Information dialog with five tabs providing data on program name, program and virus database version, system info, license agreement, and contact information of AVG Technologies CZ. 6.2. Security Status Info The Security Status Info section is located in the upper part of the AVG main window.
Note: AVG status information can also be obtained at any moment from the system tray icon. 6.3.
enter your computer - details >> · Anti-Spyware ensures that your computer is protected from spyware and adware - details >> 6.5. Statistics The Statistics section is located in the left bottom part of the AVG User Interface. It offers a list of information regarding the program's operation: · Virus DB - informs you about the currently installed version of the virus database · AVG version - informs you about the AVG version installed (the number is in the form of 10.0.xxxx, where 10.
The System Tray Icon can also be used as a quick link to access the AVG main window at any time - double click on the icon. By right-click on the System Tray Icon you open a brief context menu with the following options: · Open AVG User Interface - click to open the AVG User Interface · Scans - click to open the context menu of · Running scans - this item is displays only in case a scan is currently running on your computer.
· Update now - click the Update now link to launch the AVG update directly from within the gadget: · Twitter link - opens a new AVG gadget interface providing an overview of the latest AVG feeds posted at the Twitter.
7. AVG Components 7.1. Anti-Virus 7.1.1. Anti-Virus Principles The antivirus software's scanning engine scans all files and file activity (opening/ closing files, etc.) for known viruses. Any detected virus will be blocked from taking any action and will then be cleaned or quarantined. Most antivirus software also uses heuristic scanning, where files are scanned for typical virus characteristics, so called viral signatures.
7.1.2. Anti-Virus Interface The Anti-Virus component's interface provides some basic information on the component's functionality, information on the component's current status (Anti-Virus component is active.
Currently, the most common source of infection is websites with potentially dangerous content. Other methods of transmission, such as via e-mail or transmission by worms and viruses are also prevalent. The most important protection is to use an always-on background scanner, Anti-Spyware, that works like a resident shield and scans your applications in the background as you run them.
7.3. Link Scanner 7.3.1. Link Scanner Principles LinkScanner protects you from the increasing number of ‘here today, gone tomorrow’ threats on the web. These threats can be hidden on any type of website, from governments to big, well-known brands to small businesses, and they rarely stick around on those sites for more than 24 hours.
LinkScanner Settings In the bottom part of the dialog you can edit several options: · Enable Search-Shield - (on by default): advisory notifying icons on searches performed with Google, Yahoo!, WebHledani, Yandex, Baidu, Bing, AOL, AltaVista, EarthLink, Ask, Seznam, eBay, Twitter, Digg, or SlashDot: having checked ahead the content of sites returned by the search engine. · Enable Surf-Shield - (on by default): active (real-time) protection against exploitive sites as they are accessed.
results). The linked page does not contain threats but is somewhat suspicious ( questionable in origin or motive, therefore not recommended for e-shopping etc.). The linked page can be either safe itself, but containing further links to positively dangerous pages; or suspicious in code, though not directly employing any threats at the moment. The linked page contains active threats! For your own safety, you will not be allowed to visit this page.
Entering such web site is highly risky and it cannot be recommended! 7.4. Resident Shield 7.4.1. Resident Shield Principles The Resident Shield component gives your computer continuous protection. It scans every single file that is being opened, saved, or copied, and guards the system areas of the computer. When Resident Shield discovers a virus in a file that is accessed, it stops the operation currently being performed and does not allow the virus to activate itself.
7.4.2. Resident Shield Interface Besides an overview of the Resident Shield functionality, and the information on the component's status, the Resident Shield interface offers some statistic data as well: · Resident Shield has been running for - provides the time since the latest component's launch · Threats detected and blocked - number of detected infections that were prevented from being run/opened (if needed, this value can be reset; e.g.
In both cases, you can still select whether you want to Scan for tracking cookies. In specific cases you can switch this option on to achieve maximum security levels, however it is switched off by default. (cookies = parcels of text sent by a server to a web browser and then sent back unchanged by the browser each time it accesses that server.
7.4.3. Resident Shield Detection Resident Shield scans files as they are copied, opened or saved. When a virus or any kind of threat is detected, you will be warned immediately via the following dialog: Within this warning dialog you will find data on the file that was detected and assigned as infected (File name), the name of the recognized infection (Threat name), and a link to the Virus encyclopedia where you can find detailed information on the detected infection, if known (More info).
· Ignore - we strictly recommend NOT TO use this option unless you have a very good reason to do so! In the bottom section of the dialog you can find the link Show details - click it to open a pop-up window with detailed information on the process running while the infection was detected, and the process' identification.
detected objects in a file (Export list to file) and delete all entries on detected objects (Empty list). The Refresh list button will update the list of finding detected by Resident Shield. The Back button switches you back to the default AVG user interface (components overview). 7.5. E-mail Scanner One of the most common sources of viruses and trojans is via e-mail. Phishing and spam make e-mail an even greater source of risks.
7.5.2. E-mail Scanner Interface In the E-mail Scanner component's dialog you can find a brief text describing the component's functionality, information on its current status, and the following statistics: · Total e-mails scanned - how many e-mail messages were scanned since the E-mail Scanner was last launched (if needed, this value can be reset; e.g.
· Display notification window while e-mail is being scanned - check the item to confirm you want to be informed via notification dialog displayed over the AVG icon on the system tray during the scanning of your mail via E-mail Scanner component.
In the E-mail Scanner detection dialog (accessible via system menu option History / E-mail Scanner detection) you will be able to see a list of all findings detected by the E-mail Scanner component.
7.6.2.
By default, the update is set for every 4 hours. It is highly recommended to keep this setting unless you have a true reason to change it! Please note: The software vendor has set up all AVG components to give optimum performance. Unless you have a real reason to do so, do not change the AVG configuration. Any changes to settings should only be performed by an experienced user.
· License number - provides the shortened form of your license number (for security reasons the last four symbols are missing). When entering your license number, you have to be absolutely precise and type it exactly as shown. Therefore we strongly recommend to always use "copy & paste" method for any manipulation with the license number. · License type - specifies the product type installed. · License expires - this date determines the period of validity of your license.
7.8. Remote Administration The Remote Administration component only displays in the user interface of AVG Anti-Virus 2011 in case you have installed the network edition of your product (see component License). In the Remote Administration dialog you can find the information on whether the component is active and connected to server. All settings of the Remote Administration component is to be done within the Advanced Settings / Remote Administration.
7.9.1. Online Shield Principles Online Shield is a type of a real time resident protection; it scans the content of visited web pages (and possible files included in them) even before these are displayed in your web browser or downloaded to your computer. Online Shield detects that the page you are about to visit includes some dangerous javascript, and prevents the page from being displayed.
· Enable Web protection - this option confirms that the Online Shield should perform scanning of the website content. · Enable Instant Messaging protection - check this item if you wish the Online Shield to verify the instant messaging communication (e.g. ICQ, MSN Messenger, ...) is virus free. Please note: The software vendor has set up all AVG components to give optimum performance. Unless you have a real reason to do so, do not change the AVG configuration.
· Close - click the button to close the warning dialog. The suspect web page will not be opened, and the threat detection will be logged in the list of Online Shield findings - this overview of detected threats is accessible via system menu History / Online Shield findings.
7.10. Anti-Rootkit A rootkit is a program designed to take fundamental control of a computer system, without authorization by the system's owners and legitimate managers. Access to the hardware is rarely required as a rootkit is intended to seize control of the operating system running on the hardware. Typically, rootkits act to obscure their presence on the system through subversion or evasion of standard operating system security mechanisms.
fragmented, i.e. used for a long time so that most files are now scattered on different parts of the physical disk. You can use some defragmentation tool to fix this. · Broken Shortcuts will notify you of shortcuts that no longer work, lead to non-existing locations etc. To start the analysis of your system, press the Analyze now button.
default AVG user interface (components overview) once the analysis is completed 7.12. ID Protection AVG Identity Protection is an anti-malware product that is focused on preventing identity thieves from stealing your passwords, bank account details, credit card numbers and other personal digital valuables from all kinds of malicious software ( malware) that target your PC. It makes sure that all programs running on your PC are operating correctly.
component's basic functionality, its status, and some statistical data: · Malware items removed - gives the number of applications detected as malware, and removed · Processes monitored - number of currently running applications that are being monitored by IDP · Behaviors monitored - number of specific actions running within the monitored applications Identity Protection settings In the bottom part of the dialog you will find the Identity Protection settings section where you can edit some elementary featu
8. AVG Security Toolbar AVG Security Toolbar is a new tool which works together with the LinkScanner component. AVG Security Toolbar can be used to control LinkScanner functions and to adjust its behavior. If you select to install the toolbar during the installation of AVG Anti-Virus 2011, it will be added into your web browser (Internet Explorer 6.0 or higher, and Mozilla Firefox 3.0 or higher) automatically. Other internet browsers are not supported at the moment.
o Current Threat Level - opens the virus lab web page with a graphical display of the current threat level on the web o AVG Threat Labs - opens the AVG Site Reports website where you can search the specific threats by name and get detailed information on each one · Options - opens a configuration dialog where you can adjust your AVG Security Toolbar settings to suit your needs - see the following chapter AVG Security Toolbar Options · Delete History - allows you within AVG Security Toolbar delete complete h
· - Page is somewhat suspicious. · - Page containing links to positively dangerous pages. · · - The linked page contains active threats! For your own safety, you will not be allowed to visit this page. - The page is not accessible, and so could not be scanned. Click the button to open an information panel with detailed data on the specific web page. 8.1.4.
o Show messages - change the desired number of messages that are to be displayed at a time o RSS design - select between Advanced/Basic mode of the current display of the news overview (by default, the Advanced mode is selected - see picture above) o Hide read messages - mark this item to confirm that each read message should not be displayed any longer, so that new messages can be supplied · - click this button to close the currently opened news overview A V G A nti- V irus 2 0 1 1 © 2 0 1 0 C opyright A
8.1.5.
o News edition - chose a country from the list to have displayed news from the selected region o Show messages - specify the desired number of messages that are to be displayed at a time o RSS design - switch between the Basic/Advanced option to select the design of the news overview (advanced design is set by default, see picture above) o Hide read messages - mark this item to confirm that any read message should not be displayed any longer in the news overview, and should be replaced by a new headline o B
· Account type - Specify the protocol type your e-mail account uses. You can select among the following alternatives: Gmail, POP3, or select the server name from the drop down menu within the Other item (at the moment, you can use this option if your account is on Yahoo! Mail or Hotmail). If you are not sure what e-mail server type your account uses, try to find the information from your e-mail provider, or your internet service provider.
Following find the editing options: · Change location - click the Change location text to display a new dialog called Search for your location. Fill in the name of your desired location into the text field, and confirm by clicking the Search button. Next, within the list of all locations of the same name select the destination you are looking for. Finally, the info panel will be displayed again providing the weather information for the selected location.
8.2. AVG Security Toolbar Options All AVG Security Toolbar parameters configuration is accessible directly within the AVG Security Toolbar panel. The editing interface opens via the AVG / Options toolbar menu item in a new dialog called Toolbar Options divided into four sections: 8.2.1. Tab General On this tab you can specify toolbar control buttons that should be displayed or hidden within the AVG Security Toolbar panel. Mark any option in case you want to have displayed the respective button.
· Weather Button - the button offers an immediate information on the weather situation in a selected location · Facebook Button - the button offers a direct connection to the Facebook social network 8.2.2. Tab Useful Buttons The Useful Buttons tab allows you to select applications from a list and have their icon displayed in the toolbar interface. The icon then serves as a quick link enabling to launch the respective application immediately.
8.2.3.
8.2.4. Tab Advanced Options On the Advanced Options tab first select what search engine you want to use as default. You have the choice of AVG Secure Search, Baidu, WebHledani, Yandex and Yahoo!. Having changed the default search engine, please restart your internet browser for the change to take effect.
9. AVG Advanced Settings The advanced configuration dialog of AVG Anti-Virus 2011 opens in a new window named Advanced AVG Settings. The window is divided into two sections: the left part offers a tree-arranged navigation to the program configuration options. Select the component you want to change the configuration of (or its specific part) to open the editing dialog in the right-hand section of the window. 9.1.
· Select the desired language of the application and confirm your selection by pressing the Apply button (right-hand bottom corner) · Press the OK button confirm · New dialog window pops-up informing you the language change of AVG user interface requires the application restart: Balloon tray notifications Within this section you can suppress display of system tray balloon notifications on the status of the application.
o Display tray notifications about scanning - decide whether information upon automatic launch of the scheduled scan, its progress and results should be displayed; o Display E-mail Scanner related tray notifications - decide whether information upon scanning of all incoming and outgoing e-mail messages should be displayed. Gaming mode This AVG function is designed for full-screen applications where possible AVG information balloons (displayed e.g.
Then, select the respective event from the list and browse (Browse) your disk for an appropriate sound you want to assign to this event. To listen to the selected sound, highlight the event in the list and push the Play button. Use the Delete button to remove the sound assigned to a specific event. Note: Only *.wav sounds are supported! 9.3.
permanently on and in default configuration, but it may be happen). In that case the system tray icon automatically reports the component's error status. However, in this very case we cannot talk about an actual error since you have deliberately induced it yourself, and you are aware of the potential risk. At the same time, once being displayed in grey color, the icon cannot actually report any possible further error that might appear.
Maximum number of files to be stored) 9.5. PUP Exceptions AVG Anti-Virus 2011 is able to analyze and detect executable applications or DLL libraries that could be potentially unwanted within the system. In some cases the user may wish to keep certain unwanted programs on the computer (programs that were installed on purpose). Some programs, especially free ones, include adware. Such adware might be detected and reported by AVG as a potentially unwanted program .
generated and displayed after successful addition of the file.
9.6. Online Shield The Online Shield dialog allows you to activate/deactivate the entire Online Shield component via the Enable Online Shield option (activated by default).
9.6.1. Web Protection In the Web Protection dialog you can edit the component's configuration regarding the scan of the website content. The editing interface allows you to configure the following elementary options: · Enable Web protection - this option confirms that the Online Shield should perform scanning of the www pages content.
additional measure that increases your computer security even more, however it can possibly block legal programs, and is therefore switched off by default. o Use heuristic analysis - (on by default): scan the content of the page to be displayed using the heuristic analysis method (dynamic emulation of the scanned object’s instructions in a virtual computer environment).
9.6.2. Instant Messaging In the Instant Messaging Shield dialog you can edit the Online Shield components settings referring to instant messaging scanning. Currently the following three instant messaging programs are supported: ICQ, MSN, and Yahoo - tick the respective item for each of them if you want the Online Shield to verify the on-line communication is virus free.
9.7. Link Scanner The LinkScanner settings dialog allows you to switch on/off the elementary features of the LinkScanner: · Enable Search-Shield - (on by default): advisory notifying icons on searches performed with Google, Yahoo!, WebHledani, Yandex, Baidu, Bing, AOL, AltaVista, EarthLink, Ask, Seznam, eBay, Twitter, Digg, or SlashDot having checked ahead the content of sites returned by the search engine.
9.8. Scans The advanced scan settings is divided into four categories referring to specific scan types as defined by the software vendor: · Whole Computer scan - standard predefined scan of the entire computer · Shell Extension Scan - specific scanning of a selected object directly from the Windows Explorer environment · Scan Specific Files or Folders - standard predefined scan of selected areas of your computer · Removable Device Scan - specific scanning of removable devices attached to your computer 9.8.
The Scan settings section offers a list of scanning parameters that can be optionally switched on/off: · Automatically heal/remove infection (on by default) - if a virus is identified during scanning it can be healed automatically if a cure is available. If the infected file cannot be healed automatically, the infected object will be moved to the Virus Vault.
· Selected file types - you can specify that you want to scan only files that are possibly infectable (files that cannot get infected will not be scanned, for instance some plain text files, or some other non-executable files), including media files (video, audio files - if you leave this box unchecked, it will reduce the scanning time even more, because these files are often quite large and are not too likely to be infected by a virus).
The list of parameters is identical to those available for the Scan of the whole computer. However, the default settings differ (for instance, Whole Computer scan by default does not check the archives but it does scan the system environment, while with the Shell Extension Scan it is the other way). Note: For a description of specific parameters please consult the chapter AVG Advanced Settings / Scans / Whole Computer scan.
All parameters set up in this configuration dialog apply only to the areas selected for scanning with the Scan of specific files or folders! Note: For a description of specific parameters please consult the chapter AVG Advanced Settings / Scans / Whole Computer scan. A V G A nti- V irus 2 0 1 1 © 2 0 1 0 C opyright A V G T ec hnologies C Z, s .r.o. A ll rights res erved.
9.8.4. Removable Device Scan The editing interface for Removable device scan is also very similar to the Whole Computer scan editing dialog: The Removable device scan is launched automatically once you attach any removable device to your computer. By default, this scanning is switched off. However, it is crucial to scan removable devices for potential threats since these are a major source of infection.
9.9.1. Scheduled Scan Parameters of the scheduled scan can be edited (or a new schedule set up) on three tabs: On the Schedule settings tab you can first check/uncheck the Enable this task item to simply deactivate the scheduled test temporarily, and switch it on again as the need arises. Next, in the text field called Name (deactivated for all default schedules) there is the name assigned to this very schedule by the program vendor.
In this dialog you can further define the following parameters of the scan: Schedule running Here, you can specify time intervals for the newly scheduled scan launch. The timing can either be defined by the repeated scan launch after a certain period of time (Run every ...) or by defining an exact date and time (Run at specific time interval ...), or possibly by defining an event that the scan launch should be associated with ( Action based on computer startup).
On the How to scan tab you will find a list of scanning parameters that can be optionally switched on/off. By default, most parameters are switched on and the functionality will be applied during scanning. Unless you have a valid reason to change these settings we recommend to keep the predefined configuration: · Automatically heal/remove infection (on by default): if a virus is identified during scanning it can be healed automatically if a cure is available.
· Scan for Tracking Cookies (off by default): this parameter of the AntiSpyware component defines that cookies should be detected during scanning; (HTTP cookies are used for authenticating, tracking, and maintaining specific information about users, such as site preferences or the contents of their electronic shopping carts) · Scan inside archives (off by default): this parameter defines the scanning should check all files even if they are stored inside an archive, e.g. ZIP, RAR, ...
is set to the medium level of automatic resource usage. If you want the scanning to run faster, it will take less time but the system resources usage will increase significantly during the scan, and will slow down your other activities on the PC (this option can be used when your computer is switched on but nobody is currently working on it). On the other hand, you can decrease the system resources usage by extending the scanning duration. Set additional scan reports Click the Set additional scan reports .
On the What to scan tab you can define whether you want to schedule scanning of the whole computer or scanning of specific files or folders. If you select scanning of specific files or folders, in the bottom part of this dialog the displayed tree structure activates and you can specify the folders to be scanned. A V G A nti- V irus 2 0 1 1 © 2 0 1 0 C opyright A V G T ec hnologies C Z, s .r.o. A ll rights res erved.
9.9.2. Virus Database Update Schedule On the Schedule settings tab you can first check/uncheck the Enable this task item to simply deactivate the scheduled virus database update temporarily, and switch it on again as the need arises. The basic virus database update scheduling is covered within the Update Manager component. Within this dialog you can set up some detailed parameters of the virus database update schedule.
This section allows you to define under which conditions the virus database update should/should not be launched if the computer is in low power mode or switched off completely. Other update settings Finally, check the Run the update again as soon as the Internet connection is available option to make sure than if the internet connection gets corrupted and the update process fails, it will be launched again immediately after the internet connection is restored.
as the need arises. In the text field called Name (deactivated for all default schedules ) there is the name assigned to this very schedule by the program vendor. Schedule running Here, specify the time intervals for the newly scheduled program update launch. The timing can either be defined by the repeated update launch after a certain period of time (Run every ...) or by defining an exact date and time (Run at specific time ...
9.10.
In this section, you can specify how the e-mail messages will be scanned: · Use Heuristics (on by default) - check to use heuristics detection method when scanning e-mail messages. When this option is on, you can filter e-mail attachments not only by extension but also the actual contents of the attachment will be considered. The filtering can be set in the Mail Filtering dialog.
you might like to check the box to ensure that files with macros will be reported as suspicious. · Report hidden extensions – hidden extension can make e.g. a suspicious executable file "something.txt.exe" appear as harmless plain text file "something.txt"; check the box to report these as potentially dangerous.
Checked by AVG. Version: x.y.zz / Virus Database: xx.y.z - Release Date: 12/9/2010 If you decide to use certification of either incoming or outgoing e-mail messages, further in this dialog you can specify the exact wording of the user part of the certification text (E-mail certification text), and chose what language should be used for the automatically generated system part of the certification (Language used for the e-mail certification text). 9.10.2.
9.10.3. Servers In the Servers section you can edit parameters of the E-mail Scanner component servers, or set up a new server fusing the Add new server button. In this dialog (opened via Servers / POP3) you can set up a new E-mail Scanner server using the POP3 protocol for incoming mail: · POP3 Server Name - in this field you can specify the name of newly added servers (to add a POP3 server, click the right mouse button over the POP3 item of the left navigation menu).
example, 123.45.67.89). If the mail server uses a non-standard port, you can specify this port after the server name by using a colon as the delimiter (for example, pop.acme.com:8200). The standard port for POP3 communication is 143. · Additional settings - specifies more detailed parameters: o Local port - specifies the port on which the communication from your mail application should be expected. You must then specify in your mail application this port as the port for POP3 communication.
· SMTP Server Name - in this field you can specify the name of newly added servers (to add a SMTP server, click the right mouse button over the SMTP item of the left navigation menu). For automatically created "AutoSMTP" server this field is deactivated.
In this dialog (opened via Servers / IMAP) you can set up a new E-mail Scanner server using the IMAP protocol for outgoing mail: · IMAP Server Name - in this field you can specify the name of newly added servers (to add a IMAP server, click the right mouse button over the IMAP item of the left navigation menu). For automatically created "AutoIMAP" server this field is deactivated.
o Local port - specifies the port on which the communication from your mail application should be expected. You must then specify in your mail application this port as the port for IMAP communication. o Connection - in this drop-down menu, you can specify which kind of connection to use (regular/SSL/SSL default). If you choose SSL connection, the data sent is encrypted without the risk of being traced or monitored by a third party. This feature is available only when the destination mail server supports it.
authenticating, tracking, and maintaining specific information about users, such as site preferences or the contents of their electronic shopping carts) · Report Potentially Unwanted Programs and Spyware threats - (on by default): check to activate the Anti-Spyware engine, and scan for spyware as well as for viruses. Spyware represents a questionable malware category: even though it usually represents a security risk, some of these programs can be installed intentionally.
9.11.1. Advanced Settings In the Files scanned by the Resident Shield dialog it is possible to configure which files will be scanned (by specific extensions): Decide whether you want all files to be scanned or just infectable files - if so, you can further specify a list of extensions defining files that should be excluded from scanning, and also a list of file extensions defining files that must be scanned under all circumstances.
9.11.2. Excluded items The Resident Shield - Excluded Items dialog offers the possibility of defining files and/or folders that should be excluded from the Resident Shield scanning.
are then considered safe, and during scanning are skipped. The settings dialog offers two options: · Caching enabled (on by default) - uncheck the box to switch off the Cache Server, and empty the cache memory. Please note that scanning might slow down, and overall performance of your computer decrease, as every single file in use will be scanned for viruses and spyware first. · Enable adding new files into cache (on by default) - uncheck the box to stop adding more files into the cache memory.
9.13. Anti-Rootkit In this dialog you can edit the Anti-Rootkit component's configuration: Editing of all functions of the Anti-Rootkit component as provided within this dialog is also accessible directly from the Anti-Rootkit component's interface.
9.14. Update The Update navigation item opens a new dialog where you can specify general parameters regarding the AVG update: When to update files In this section you can select between two alternative options: update can be scheduled for the next PC restart or you can launch the update immediately. By default, the immediate update option is selected since this way AVG can secure the maximum safety level.
· Complete at next computer restart - the update process finalization will be postponed until the next computer restart - again, please keep in mind that this option is only recommended if you can be sure the computer gets restarted regularly, at least daily Post update memory scan Mark this check box to define you want to launch a new memory scan after each successfully completed update.
9.14.1. Proxy The proxy server is a stand-alone server or a service running on a PC that guarantees safer connection to the Internet. According to the specified network rules you can then access the Internet either directly or via the proxy server; both possibilities can also be allowed at the same time.
· Port – specify the number of the port that enables Internet access (by default, this number is set to 3128 but can be set differently – if you are not sure, contact your network administrator) The proxy server can also have configured specific rules for each user. If your proxy server is set up this way, check the Use PROXY authentication option to verify that your user name and password are valid for connecting to the Internet via the proxy server.
9.14.2. Dial-up All parameters optionally defined in the Update settings - Dial-Up connection dialog refer to the dial-up connection to the Internet. The dialog's fields are inactive until you check the Use dial-up connections option that activates the fields. Specify whether you want to connect to the Internet automatically (Automatically open this connection) or you wish to confirm the connection manually every time ( Ask before connection).
9.14.3. URL The URL dialog offers a list of Internet addresses from which the update files can be downloaded.
9.14.4.
9.15. Remote Administration The Remote Administration settings refer to connecting the AVG client station to the remote administration system.
Note: For a detailed description on remote administration please consult the AVG SMB edition documentation. 9.16. Temporarily disable AVG protection In the Temporarily disable AVG protection dialog you have the option of switching off the entire protection secured by your AVG Anti-Virus 2011 at once.
9.17. Product Improvement Programme The AVG Web Safety and Product Improvement Programme dialog invites you to participate in AVG product improvement, and to help us increase the overall Internet security level. Mark the Allow reporting option to enable reporting of detected threats to AVG. This helps us to collect up-to-date information on the latest threats from all participants worldwide, and in return we can improve protection for everyone.
· A worm is a subcategory of virus which, unlike a normal virus, does not need a "carrier" object to attach to; it sends itself to other computers selfcontained, usually via e-mail, and as a result often overloads e-mail servers and network systems.
9.18. AVG Security Toolbar AVG Security Toolbar is a new tool which works together with the LinkScanner component. AVG Security Toolbar can be used to control LinkScanner functions and to adjust its behavior. If you select to install the toolbar during the installation of AVG Anti-Virus 2011, it will be added into your web browser (Internet Explorer 6.0 or higher, and Mozilla Firefox 3.0 or higher) automatically. Other internet browsers are not supported at the moment.
10. AVG Scanning Scanning is a crucial part of AVG Anti-Virus 2011 functionality. You can run ondemand tests or schedule them to run periodically at convenient times. 10.1. Scanning Interface The AVG scanning interface is accessible via the Computer scanner quick link. Click this link to switch to the Scan for threats dialog.
history of scanning · View Virus Vault - opens a new window with the Virus Vault - a space where detected infections are quarantined 10.2. Predefined Scans One of the main features of AVG Anti-Virus 2011 is on-demand scanning. On-demand tests are designed to scan various parts of your computer whenever suspicion of possible virus infection arises. Anyway, it is strongly recommended to carry out such tests regularly even if you think that no virus can be found on your computer.
Scan configuration editing You have the option of editing the predefined default settings of the Whole computer scan. Press the Change scan settings link to get to the Change scan settings for Whole Computer scan dialog (accessible from the scanning interface via the Change scan settings link for the Whole computer scan). It is recommended to keep to the default settings unless you have a valid reason to change them! A V G A nti- V irus 2 0 1 1 © 2 0 1 0 C opyright A V G T ec hnologies C Z, s .r.o.
· Scanning parameters - in the list of scanning parameters you can switch on/ off specific parameters as needed: o Automatically heal/remove infection (on by default) - if a virus is identified during scanning it can be healed automatically if a cure is available. If the infected file cannot be healed automatically, the infected object will be moved to the Virus Vault.
o Computer shutdown options - decide whether the computer should be shut down automatically once the running scanning process is over. Having confirmed this option (Shutdown computer upon scan completion), a new option activates that allows the computer to shut down even if it is currently locked (Force shutdown if computer is locked).
is temporarily unattended). · Set additional scan reports - the link opens a new Scan reports dialog where you can select what types of possible findings should be reported: Warning: These scan settings are identical to the parameters of a newly defined scan - as described in the chapter AVG Scanning / Scan scheduling/ How to Scan.
Scan configuration editing You have the option of editing the predefined default settings of the Scan of specific files or folders. Press the Change scan settings link to get to the Change scan settings for Scan of specific files or folders dialog. It is recommended to keep to the default settings unless you have a valid reason to change them! · Scanning parameters - in the list of scanning parameters you can switch on/ A V G A nti- V irus 2 0 1 1 © 2 0 1 0 C opyright A V G T ec hnologies C Z, s .r.o.
off specific parameters as needed: o Automatically heal/remove infection (on by default) - if a virus is identified during scanning it can be healed automatically if a cure is available. If the infected file cannot be healed automatically, the infected object will be moved to the Virus Vault. o Report Potentially Unwanted Programs and Spyware threats (on by default) - check to activate the Anti-Spyware engine, and scan for spyware as well as for viruses.
o Computer shutdown options - decide whether the computer should be shut down automatically once the running scanning process is over. Having confirmed this option (Shutdown computer upon scan completion), a new option activates that allows the computer to shut down even if it is currently locked (Force shutdown if computer is locked).
is temporarily unattended). · Set additional scan reports - the link opens a new Scan Reports dialog where you can select what types of possible findings should be reported: Warning: These scan settings are identical to the parameters of a newly defined scan - as described in the chapter AVG Scanning / Scan scheduling/ How to Scan.
Scan configuration editing Anti-Rootkit scan is always launched in the default settings, and editing of the scan parameters is only accessible within the AVG Advanced Settings / Anti-Rootkit dialog. In the scanning interface, the following configuration is available but only while the scan is running: · Automatic scan - you can use the slider to change the scanning process priority.
10.3. Scanning in Windows Explorer Besides the pre-defined scans launched for the entire computer or its selected areas, AVG Anti-Virus 2011 also offers the option of quick scanning of a specific object directly in the Windows Explorer environment. If you want to open an unknown file and you cannot be sure of its content, you may want to have it checked on demand.
computer · avgscanx /parameter /parameter .. with multiple parameters these should be lined in a row and separated by a space and a slash character · if a parameters requires specific value to be provided (e.g.
· /ARC Scan archives · /CLEAN Clean automatically · /TRASH Move infected files to the Virus Vault · /QT Quick test · /MACROW Report macros · /PWDW Report password-protected files · /IGNLOCKED Ignore locked files · /REPORT Report to file /file name/ · /REPAPPEND Append to the report file · /REPOK Report uninfected files as OK · /NOBREAK Do not allow CTRL-BREAK to abort · /BOOT Enable MBR/BOOT check · /PROC Scan active processes · /PUP Report "Potentially unwanted programs" · /REG
10.5. Scan Scheduling With AVG Anti-Virus 2011 you can run scanning on demand (for instance when you suspect an infection has been dragged to your computer) or based on a scheduled plan. It is highly recommended to run the scans based on a schedule: this way you can make sure your computer is protected from any possibility of getting infected, and you will not have to worry about if and when to launch the scan. You should launch the Whole Computer scan regularly, at least once a week.
You can edit / add scans using the following control buttons: · Add scan schedule - the button opens the Settings for scheduled scan dialog, Schedule settings tab. In this dialog you can specify the parameters of the newly defined test. · Edit scan schedule - this button can only be used if you have already previously selected an existing test from the list of scheduled tests.
On the Schedule settings tab you can first check/uncheck the Enable this task item to simply deactivate the scheduled test temporarily, and switch it on again as the need arises. Next, give a name to the scan you are about to create and schedule. Type the name into the text field by the Name item. Try to use brief, descriptive and apt names for scans to make it easier to later recognize the scan from others.
There are two control buttons available on all three tabs of the Settings for scheduled scan dialog (Schedule settings, How to scan and What to scan) and these have the same functionality no matter on which tab you currently are: · Save - saves all changes you have performed on this tab or on any other tab of this dialog and switches back to the AVG scanning interface default dialog.
even though it usually represents a security risk, some of these programs can be installed intentionally. We recommend to keep this feature activated as it increases your computer security. · Report enhanced set of Potentially Unwanted Programs (off by default): mark to detect extended package of spyware: programs that are perfectly ok and harmless when acquired from the manufacturer directly, but can be misused for malicious purposes later.
o Computer shutdown options - decide whether the computer should be shut down automatically once the running scanning process is over. Having confirmed this option (Shutdown computer upon scan completion), a new option activates that allows the computer to shut down even if it is currently locked (Force shutdown if computer is locked).
· Set additional scan reports - the link opens a new Scan reports dialog where you can select what types of possible findings should be reported: Note: By default, the scanning configuration is set up for optimum performance. Unless you have a valid reason to change the scanning settings it is highly recommended to stick to the predefined configuration. Any configuration changes should be performed by experienced users only.
10.5.3. What to Scan On the What to scan tab you can define whether you want to schedule scanning of the whole computer or scanning of specific files or folders. In case you select scanning of specific files or folders, in the bottom part of this dialog the displayed tree structure activates and you can specify folders to be scanned ( expand items by clicking the plus node until you find the folder you wish to scan). You can select multiple folders by checking the respective boxes.
o for Windows Vista/7: C:\Users\user\Documents\ · Shared Documents o for Win XP: C:\Documents and Settings\All Users\Documents\ o for Windows Vista/7: C:\Users\Public\Documents\ · Windows folder - C:\Windows\ · Other o System drive - the hard drive on which the operating system is installed (usually C:) o System folder - C:\Windows\System32\ o Temporary Files folder - C:\Documents and Settings\User\Local\ ( Windows XP); or C:\Users\user\AppData\Local\Temp\ (Windows Vista/7) o Temporary Internet Files - C:\D
10.6. Scan Results Overview The Scan results overview dialog is accessible from the AVG scanning interface via the Scan history button. The dialog provides a list of of all previously launched scans and information of their results: · Name - scan designation; it can either be the name of one of the predefined scans, or a name you have given to your own scheduled scan.
· End time - date and time when the scan ended · Tested objects - number of objects that were checked during scanning · Infections - number of virus infections detected / removed · Spyware - number of spyware detected / removed · Warnings - number of detected suspicious objects · Rootkits - number of detected rootkits · Scan log information - information relating to the scanning course and result (typically on its finalization or interruption) Control buttons The control buttons for the Scan results overvi
archives). 10.7.1. Results Overview Tab On the Scan results tab you can find detailed statistics with information on: · detected virus infections / spyware · removed virus infections / spyware · the number of virus infections / spyware that cannot be removed or healed In addition you will find information on the date and exact time of the scan launch, on the total number of scanned objects, on the scanning duration and the number of errors that have occurred during scanning.
10.7.2. Infections Tab The Infections tab is only displayed in the Scan results dialog if a virus infection was detected during scanning.
o Locked file - not tested - the respective object is locked and AVG is therefore unable to scan it o Potentially dangerous object - the object was detected as potentially dangerous but not infected (it can contain macros, for instance); the information should be taken as a warning only o Reboot is required to finish the action - the infected object cannot be removed, to remove it completely you have to restart your computer Control buttons There are three control buttons available in this dialog: · View d
10.7.3. Spyware Tab The Spyware tab is only displayed in the Scan results dialog in if spyware was detected during scanning.
o Locked file - not tested - the respective object is locked and AVG is therefore unable to scan it o Potentially dangerous object - the object was detected as potentially dangerous but not infected (it can contain macros, for instance); the information is a warning only o Reboot is required to finish the action - the infected object cannot be removed, to remove it completely you have to restart your computer Control buttons There are three control buttons available in this dialog: · View details - the but
10.7.4. Warnings Tab The Warnings tab displays information on "suspected" objects (typically files) detected during scanning. When detected by the Resident Shield, these files are blocked from being accessed. Typical examples of this kind of findings are: hidden files, cookies, suspicious registry keys, password protected documents or archives, etc. Such files do not present any direct threat to your computer or security.
The severity Information can be reported for one of the following reasons: · Run-time packed - The file was packed with one of less common run-time packers, which may indicate an attempt to prevent scanning of such file. However, not every report of such file indicates a virus. · Run-time packed recursive - Similar to above, however less frequent amongst common software. Such files are suspicious and their removal or submission for analysis should be considered.
10.8. Virus Vault Virus Vault is a safe environment for the management of suspect/infected objects detected during AVG tests. Once an infected object is detected during scanning, and AVG is not able to heal it automatically, you are asked to decide what is to be done with the suspect object. The recommended solution is to move the object to the Virus Vault for further treatment.
case the object had a specific original name that is known (e.g. a name of an e-mail attachment that does not respond to the actual content of the attachment), it will be provided in this column.
11. AVG Updates Keeping your AVG up-to-date is crucial to ensure that all newly discovered viruses will be detected as soon as possible. Since AVG updates are not released according to any fixed schedule but rather in reaction to amount and severity of new threats, it is recommended to check for new updates at least once a day or even more often. Only this way you can be sure your AVG Anti-Virus 2011 is kept up-to-date also during the day. 11.1.
overview of relevant statistic parameters (update file size, received data, download speed, elapsed time, ...). Note: Before the AVG program update launch a system restore point is created. In case the update process fails and your operating system crashes you can always restore your OS in its original configuration from this point. This option is accessible via Start / All Programs / Accessories / System tools / System Restore.
12. Event History The History dialog is accessible from the system menu via the History/Event History Log item. Within this dialog you can find a summary of important events that occurred during AVG Anti-Virus 2011 operation.
· Event description gives brief summary of what actually happened Control buttons · Empty list - deletes all entries in the list of events · Refresh list - updates all entries in the list of events A V G A nti- V irus 2 0 1 1 © 2 0 1 0 C opyright A V G T ec hnologies C Z, s .r.o. A ll rights res erved.
13. FAQ and Technical Support Should you have any problems with your AVG, either business or technical, please refer to the FAQ section of AVG website (http://www.avg.com/). If you do not succeed in finding help this way, contact the technical support department by email. Please use the contact form accessible from the system menu via Help / Get help online. A V G A nti- V irus 2 0 1 1 © 2 0 1 0 C opyright A V G T ec hnologies C Z, s .r.o. A ll rights res erved.
