Ad-Aware Total Security
Table of Contents
Ad-Aware Total Security
Lavasoft Support
Installing the software
After the installation
On the first run
... 5 Internet update wizard
... 6 Virus check wizard
Ad-Aware Total Security
... 7 How do I improve the security status?
... 7 How is the Total Security Interface organised?
... 8 License ... 8 CPU load
Virus check
... 9 Options (Virus check)... 10 Options (Monitor)
Last virus check
... 13 Virus scan
Virus monitor
... 14 More functions ... 14 Schedule ... 14 Job ... 15 Analysis scope ... 15 Scheduling ... 16 Virus check ... 17 User account ... 17 Quarantine ... 17 Logs ... 17 Create boot CDUpdates
... 18 Options (Internet update)... 18 Logon to update server
Last virus update
... 23 Scan options ... 24 Advanced
Web protection
... 25 Define exceptionsPhishing protection
Firewall
... 27 Configure ... 27 Status ... 28 Netw orks ... 28 Edit netw ork... 29 Rule sets
... 29 Create rule sets
... 30 Using the Rule w izard
... 31 Using the advanced dialogue
... 31 Rules
... 32 Firew all alarm
... 33 Logs
... 33 Options (Firew all)
... 33 Autom atic ... 33 Inquiry ... 34 Attacks ... 35 Miscellaneous
E-mail protection
Spam protection
... 38 Configure ... 38 Status ... 38 More filters ... 39 Add new filter... 41 Statistics ... 41 No spam ... 41 Spam ... 41 Options (Anti-Spam ) ... 41 Spam filter ... 41 Spam OutbreakShield ... 42 Use w hitelist ... 42 Use blacklist ... 42 Use real-time blacklists
... 42 Use keyw ords (email text)
... 43 Use keyw ords (subject)
... 43 Use content filter
... 43 Reaction ... 44 Advanced settings ... 44 Settings ... 44 More filters
Parental controls
... 45 Configure ... 45 StatusAd-Aware Total Security
... 47 Monitor Internet usage period
... 47 Block periods
... 48 Monitor com puter usage period
... 48 Block periods ... 48 Personal filters ... 49 Logs ... 49 Options (Parental controls)
... 49 Log
Tuner
... 50 Configure ... 50 Status ... 51 Configuration ... 51 Define profile ... 51 Security ... 51 Perform ance ... 51 Data Protection ... 52 Undo ... 52 Schedule ... 52 Nam e ... 52 Profile ... 52 Scheduling ... 53 Logs ... 53 Options (Tuner) ... 53 General ... 54 Folder protection ... 54 File protectionBackup
... 55 Configure ... 55 Status ... 56 Backup ... 56 Standard backup ... 56 Source files ... 57 Target ... 57 Schedule ... 58 Partial backups ... 58 Advanced backup ... 58 File selection ... 59 Select target ... 59 Schedule ... 60 Partial backups ... 60 Options ... 60 General archive options... 61 User details ... 61 Compression ... 61 Exclude files ... 62 Reset to current default options
... 62 Reset to Ad-Aw are default options
... 62 Restore
... 62 Restore job
... 64 Options
What happens when my license
expires?
Tips for installation
... 66 Boot scan prior to installation
... 68 Customized setup or full installation?
... 68 Invalid registration number?
... 69 Access data invalid or missing?
... 69 Can I use my old access data to obtain updates on a new computer?
... 69 Notes on uninstalling
1 Ad-Aware Total Security
Ad-Aware Total Security
This fast start guide will help you install your new Ad-Aware Total Security and gives you a few practical, easy tips on how to use it to protect your computer optimally. The following sections will give you additional help on installing, getting started with and general questions about the program:
Installing the software: This will show you how to install the Ad-Aware Total Security on your computer.
After the installation: What's changed on your system since installing the software? What options does the software offer? Find out here.
On the first run: Wizards will help you create the necessary settings to ensure that your system is protected effectively as soon as the software has been installed. If you are an experienced user of Ad-Aware Total Security you won't need these wizards anymore.
Total Security Interface: The actual Ad-Aware Total Security program interface. You can create settings and find information here. Normally you only need to open the Ad-Aware Total Security interface if you are advised to.
Tips for Installation Please consult this section for any questions about installing and registering
Ad-Aware Total Security
Do you have further questions? You can consult the online help in the software at any
time.
Just press the F1 key while using the program or click on the Help button. The answers to many queries can also be found in the Online database for frequently asked questions (FAQ), which can be accessed in the Support section on the Lavasoft website.
Lavasoft Support
Installation and use of Ad-Aware Total Security is generally easy and self-explanatory. However, should you encounter a problem, just contact Lavasoft Support.
Website: www.lavasoft.com
3 Installing the software
Installing the software
Important note:Ad-Aware Total Security includes full Anti-Virus, Anti-Spyware and Anti-Malware real-time
protection.
If you use more than one real-time Anti-Virus or Anti-Spyware program at the same time, your computer may experience decreased performance, become unstable, or restart unexpectedly. Before you install Ad-Aware, we recommend that you disable or uninstall other security-related programs.
To ensure that Ad-Aware Total Security functions smoothly, your computer should meet the following minimum requirements:
PC with one of the following operating systems: Windows 7, Windows Vista, Windows XP (SP2 or higher)
At least 512 MB RAM memory, Internet access, Internet Explorer 6 or higher Please install Ad-Aware Total Security as follows:
Start Installation
If you downloaded your copy of Ad-Aware Total Security, locate and double-click on the downloaded file to start the installation.
If you received a Boot CD, insert the CD and the installation should start. If installation doesn't start by itself, open the CD and double-click Autostart
Welcome Screen
Please read the welcome screen and click "Next" to continue.
Installation
Please read the End User License Agreement before you proceed. When you have completed reviewing the agreement and if you agree to the terms, check the box next to "I accept the terms of license agreement", and click “Next” to continue with the standard installation of the software.
Choose to do a Complete install or to customize the installation, click "Custom." Click "Next" to continue with the installation.
Additional Modules
Select whether to install Parental Controls and the Ad-Aware Shredder.
Schedule
Select whether to use automatic updates.
Click Next and then Install to continue with the installation.
After the files finish copying, you will receive a confirmation message that the installation was successful.
Installation Complete
Your computer must be restarted to complete the installation. Choose to Restart Now or Restart Later.
Click "Finish" to complete the installation process. Your computer will restart and
After the installation
To open your Ad-Aware Total Security program interface, just click on the icon on your desktop pictured here. To read about how you use the Total Security Interface, read the section: Ad-Aware Total Security
Please be aware of the following after you have installed Ad-Aware Total Security:
Security icon: Ad-Aware Total Security will protect your computer from viruses and malware. An
icon appears in the taskbar at the bottom next to the clock, so you can see that the protection is active.
Fast check: Is there a suspicious file on your computer? Do you want to scan a download for
viruses? Fast check enables you to check a file or folder with great ease, and without having to run Ad-Aware Total Security. Just use your mouse to select the file or folder in e.g. Windows Explorer. Right-click and select Check for viruses (Ad-Aware Total Security). The affected files will now be automatically scanned for viruses.
5 On the first run
On the first run
When you run Ad-Aware Total Security, two wizards automatically open one after the other. They will help you create important settings for the software. As soon as this is done and you are familiar with how the software works, you can disable these wizards and create settings in the software yourself.
?
To disable an assistant, simply check the box next to Do not showthis message again.
Internet update wizard
If you are running the software for the first time after installing it, a wizard opens which you can use to update Ad-Aware Total Security directly over the Internet. As new viruses are constantly being developed, it is crucial that Ad-Aware Total Security is up to date! Therefore you should run the Internet update as quickly as possible.
1
To do so, click on the Perform updates button. A window will now appear requesting the access data for Internet updates.2
To get this access data, just click on the Register with server button. Then you will see a new window where you can enter your registration number and customer data.?
Unable to log onto the server?If you cannot log onto the server, please first make sure that you have an Internet connection (that is, whether you can access a website via your browser). If you can and Ad-Aware Total Security still cannot register with the server, please click on the Internet settings button. Here you can then check the settings for your Internet connections.
3
You can find the registration number on the back of the printed manual. If you bought Ad-Aware Total Security online, you will receive your registration number in a separate e-mail.If you click the Login button, your access data is generated on the
Lavasoft UpdateServer. If the registration was successful, an
information screen appears in which you can click on the OK button.
4
The actual updating of the data will now follow. An information screen will tell you about the progress of the update and about which data is being transferred to your computer. You can then exit the update window by clicking on the Close button. You have now updated yourAd-Aware Total Security.
Virus check wizard
As soon as you have installed Ad-Aware Total Security on your computer, it is protected from malware. However, you should verify whether a virus could have nested itself on your computer BEFORE the installation. You can use the virus check wizard, which appears when you start the software for the first time, to directly carry out this scan.
You can choose between the Quick virus check (recommended) and Intensive virus check options. An intensive virus check is generally preferred, but depending on your hardware
configuration it can take more than an hour. If you are pressed for time, at least run the quick virus
7 Ad-Aware Total Security
Ad-Aware Total Security
After installing Ad-Aware Total Security your virus protection should run automatically. You only actually need to consult Ad-Aware Total Security if you want to access the virus check or one of the software's many additional features.
In rare circumstances, it may also be necessary to access Ad-Aware
Total Security if the security icon in the task bar displays a warning
sign indicating that you need to intervene.
In the Total Security Interface you can see all key information at a glance and can intervene directly if a protection function needs updating or checking.
How do I improve the security status?
Security does not have to be complicated. You can get possible threats to your computer out of the way with just one click. You can use the Security status icon and the Correct button for this.
If there is a green cross next to the Security status entry, your system is secure.
A red light indicates that your system is in immediate danger. You should then undertake immediate measures so that the protection of your data remains ensured.
If you click on the Correct button, Ad-Aware Total Security will suggest to you what actions you should take in order to optimally protect your system again. Simply select the actions displayed one after the other until the security status displays a green light again. The Correct button then
automatically changes to inactive and can only be used again if the security status should get worse.
Your Ad-Aware Total Security is then up to date and you can close the interface again. All functions and settings you can see under the Security Status icon (such as Virus check or Updates) can be used if you want to actively configure the security of your system. You decide to what degree you would like to be involved with the virus protection. Ad-Aware Total Security gives you that choice!
How is the Total Security Interface organised?
Green checkmark = everything is ok
Yellow exclamation mark = intervention needed soon
Red exclamation mark = immediate intervention required
Wildcard = This security function was not enabled by you.
If an area should be marked yellow or red, simply click on it with the mouse. This will take you directly to the program area where you can carry out the required settings. Additional functions can be invoked via the blue entries. Do you want to make an unscheduled check of the computer for viruses? Do you want to reset the schedule? Is a check of the settings needed? Simply click on the blue actions.
If you click the info icon in the top right, you will receive information regarding the program version. This information may be useful when talking to Lavasoft Support .
License
Under the License entry on the left-hand side of the program interface you can see how long your virus update license is valid for. Constant updates are more important for anti-virus software than for any other type of software.
CPU load
This small chart shows you how much speed Ad-Aware Total Security costs you when in use on your computer. If heavy CPU load occurs regularly in relation to a specific application (e.g. when using video processing programs), it may help to define the relevant application as an exception. You can find additional information on this in the online help for the Virus monitor.
?
Under the Ad-Aware Total Security header, you can view the current load Ad-Aware Total Security is placing on your computer. The total current load on your computer is displayed under the System header. During virus checks the system load caused by Ad-Aware TotalSecurity can be very high; however, under normal use Ad-Aware Total Security should only use up very little processing power. So if your
computer is responding more slowly than usual, you can see at a glance here if Ad-Aware Total Security is carrying out a detailed scan or if your computer is being slowed down by something other than a virus check.
?
You can also configure Ad-Aware Total Security so the virus check can be automatically interrupted if your computer is under a heavy load from other applications. For more information please read the section9 Virus check
Virus check
In this area, you can undertake all settings involved with the protection of your computer against virus infection. Use the Options button to obtain access to the program parameters affecting this area.
Options (Virus check)
Here you can create basic program settings for Virus check. However, in normal operation this is not required.
Use engines: Ad-Aware Total Security works with multiple engines, in other words, two virus
check modules in addition to the other Lavasoft technologies that work essentially independent of each other. Each engine by itself would provide you with a high degree of protection against viruses, but it is precisely the combination of all engines that gives the very best results. You can accelerate the virus check in older and slower computers by using an individual engine, but normally you should keep the setting Both engines.
In the case of an infection: Ad-Aware Total Security detected a virus? In the standard setting,
the software now asks you what you would like to do with the infected file. If you would always like to perform the same action, you can set this here. The highest protection for your data is offered here by the setting Disinfect (if not possible: place in quarantine).
Infected archive: Here you determine whether archive files (e.g. files with the extension RAR,
ZIP, or PST) should be handled differently from normal files. As viruses stored in an archive can only cause damage when they are unzipped, you may choose to completely deactivate the archive scan under certain circumstances. If your virus monitor is permanently enabled, this will prevent an infection as soon as an infected archive is unzipped.
Pause the virus check at times of high system load: A virus check should normally be carried
out when the computer is not being used. If you then need to use the computer, the virus check is paused so that your computer can run at normal speed for you. This virus check will then carry on when you stop working.
You can create more settings for virus checks by clicking on the Advanced button. In most cases, however, it is completely adequate to use the specified default settings.
File types: You can specify here which file types should be inspected by the software for viruses.
Selecting the option Program files and documents only entails certain speed benefits.
Priority scanner: Via this setting you can specify the degree to which a virus check influences
the processing power of your computer. If you want to run a virus check when you are not using the computer, the setting High (short run time) is recommended.
Heuristics: In the heuristic analysis, viruses are not only detected by the virus database, which
you receive with every update of Ad-Aware Total Security, but are also identified on the basis of particular characteristics typical of viruses. This method increases the level of security, but in rare cases may also generate a false alarm.
Check archive: Checking compressed data in archives (these can be recognized by their file
extensions such as ZIP, RAR or PST) is very time-consuming and can normally be omitted if the
virus monitor is generally active on the system. The monitor can detect a previously hidden virus
while the archive is being unzipped and can automatically prevent it from spreading.
Check e-mail archive: Because Ad-Aware Total Security already checks incoming and outgoing
e-mail for virus infections, it is usually a good idea to omit regular checks for e-mail archives since this process may take several minutes, depending on the size of the e-mail archive.
Check for dialers / spyware / adware / riskware: You can also use this function to check your
system for dialers and other malware (spyware, adware and riskware). These are e.g. programs that establish expensive, unwanted Internet connections, of which the potential for financial damage is no less significant than that of the virus. They may for example secretly record your surfing habits or even all the keyboard entries you make (including your passwords) and forward these to third parties via the Internet at the earliest opportunity.
Check for rootkits: Rootkits attempt to evade conventional virus detection methods. Additional
monitoring for this malware is always advisable.
Only check new and updated files: If you enable this function, the virus check will run
significantly faster, but will restrict itself to just files that have changed or been newly created since the last virus check. You should therefore only use this option if your computer is routinely protected using the Virus monitor , so regular virus checks are still additionally carried out.
Generate log: By checking the Generate log box, you can specify that the software creates a
log of the virus check process. This log can be viewed in the Logs area.
Options (Monitor)
In the Options dialogue for the Virus monitor you have the following setting options. Changes only need to be made here in the event of exceptions occurring:
Use engines: Ad-Aware Total Security works with multiple engines, in other words, in other
words, two virus check modules in addition to the other Lavasoft technologies. Each engine by itself would already provide you with a high degree of protection against viruses, but it is precisely the combination of all engines that gives the very best results. You can accelerate the virus check in older and slower computers by using an individual engine, but normally you should keep the setting Both engines - performance optimised.
In the case of an infection: Ad-Aware Total Security detected a virus? In the standard setting,
the software now asks you what you would like to do with the infected file. If you would always like to perform the same action, you can set this here. The highest protection for your data is offered here by the setting Disinfect (if not possible: place in quarantine).
Infected archive: Here you determine whether archive files (e.g. files with the extension RAR,
ZIP, or PST) should be handled differently from normal files. As viruses stored in an archive can only cause damage when they are unzipped, you may choose to completely deactivate the archive scan under certain circumstances. If your virus monitor is permanently enabled, this will prevent an infection as soon as an infected archive is unzipped.
System protection and autostart monitoring: When system protection is on, the Windows
registry and the system folders are checked each time the system is started. This way, the HOSTS file is protected against manipulation.
The HOSTS file is a text file on your computer which compares host names with IP addresses. If this file is modified by malware, users can unwittingly be diverted to phishing websites, for example.
By clicking the exceptions button, you can exclude certain drives, directories, and files from the virus monitor check and in this manner sometimes significantly accelerate virus detection. To do this, proceed as follows:
1
Click the Exceptions button.2
Click New... in the Monitor exceptions window.3
Now select whether you want to exclude a drive, a directory, or a file and/or a file type.11 Virus check
4
Underneath this, select the directory or the drive you would like to protect. In order to protect files, enter the complete file name in the entry field under file mask. You can also work with wildcards here.?
Wildcards work as follows:The question mark symbol (?) represents individual characters. The asterisk symbol (*) represents entire character strings. For example, in order to protect all files with the file extension ".sav, enter *.sav. In order to protect a special selection of files with sequential file names (e.g., text1.doc, text2.doc, text3.doc), enter
text?.doc
5
Now, click OK. The exception will be displayed in the Monitorexceptions window.
6
Also click OK in the Monitor exceptions window.You can repeat this procedure as often as desired and also delete or modify the existing exceptions. Furthermore, you can click the button Advanced to specify which additional tests should be
performed by the virus monitor. Normally you do not have to enter any more settings here.
File types: Here you can specify which file types are to be inspected by the Ad-Aware Total Security for viruses. With Program files and documents only, only the files that can generally
contain executable malware are checked. This gives a speed advantage during monitoring.
Check during writing: Directly after a file has been created, the virus monitor will check whether
a virus has latched on to the process.
Check network access: If your computer has a network connection to unprotected computers (for
example, other laptops), it is a good idea to check the network accesses to see if any malicious programs are being transferred. If you use your computer as a stand-alone computer without network access, you don't need to enable this option. If you have installed virus protection on each computer in the network, it is recommended that you turn off this option. Otherwise, some files will be checked twice, which negatively affects speed.
Heuristics: In the heuristical analysis, viruses are not only detected by means of virus updates
that you regularly receive from us online, but are also identified on the basis of certain
characteristics typical of viruses. This method increases the level of security, but in rare cases may also generate a false alarm.
Check archive: Checking compressed data in archives is a very time-consuming process and
can generally be omitted if the virus monitor in your system is always active. The monitor can detect a previously hidden virus while the archive is being unzipped and can automatically prevent it from spreading. To avoid decreasing performance with unnecessary checks of large archive files that are rarely used, you can set a size limit (number of kilobytes) for archives to be checked.
Check e-mail archives: Because the software already checks incoming and outgoing e-mail for
virus infections, it is usually a good idea to omit regular checks for e-mail archives since this process may take several minutes, depending the size of the e-mail archive.
Check system areas during system start: In general, system areas (for example boot sectors)
in your computer should not be excluded from virus checks. You can specify here whether you want to run a check on system start-up or during a media exchange (e.g., new CD-ROM). Generally you should have at least one of these two functions activated.
Check for dialers / spyware / adware / riskware: You can use Ad-Aware Total Security to
check your system for dialers and other malware programs (spyware, adware, riskware). These are e.g. programs that establish expensive, unwanted Internet connections, of which the potential for financial damage is no less significant than that of the virus. They may for example secretly record your surfing habits or even all the keyboard entries you make (including your passwords) and forward these to third parties via the Internet at the earliest opportunity.
Only check new or modified files: When you activate this function, a virus check executes
significantly faster; however, it only extends to files that were modified or newly created. You should use this option if your computer is generally always protected by the virus monitor and does not come into contact with networks, questionable websites (unknown shops, lottery sites, etc.), or data carriers (CDs, USB sticks, removable disks) that can often come from infected sources.
13 Last virus check
Last virus check
This is where you can see when your computer was last fully checked for viruses. If this entry is highlighted in red, you should run a virus check as soon as possible. To do so, just click on the entry and start the checking process by pressing the Check computer now button. After the scan, the entry is highlighted in green, meaning that the virus check was run sufficiently recently.
Virus scan
If you have a specific concern and only want to check certain areas of your computer for malware, please select which areas you want to check here.
Check computer: If you want to check your computer independently of the automatic scan (e.g.
because you currently have a suspected virus), just click on the Check computer entry. Your computer will now be checked for viruses.
Check memory and Startup: All running processes the program files and DLLs (program
libraries) will then be checked. In this way malware can be directly removed from the memory
and Autostart area. Active viruses can be directly removed without searching through the entire hard drive. Since this check can be done relatively quickly, it is recommended that it is performed regularly (e.g. as part of an automatic virus check). This function, however, is not a replacement for regular virus control of saved data, but rather an extension to it.
Check directories/files: This enables you to scan selected drives, directories or files for
viruses. If you double-click on this action, a directory and file selection dialogue will open. You can scan specific individual files or entire directories for viruses here.
?
Select directories/filesIn the directory tree, you can open and select directories by clicking on the plus symbols. Their contents will then be shown in the file view. Each directory or file that you mark with a check will be scanned by
Ad-Aware Total Security. If not all files in a directory are checked, this
directory is marked with a gray checkmark.
Check removable media: Use this function to check CD-ROMs or DVD-ROMs, diskettes,
memory cards or USB sticks for viruses. If you click on this option, all removable media
connected to your computer will be checked (including CDs in the tray, inserted memory cards, hard drives connected via USB or USB sticks). Please note that Ad-Aware Total Security cannot of course remove viruses from media that do not have write access (e.g. burned CD-ROMs). In this case, virus discoveries are logged.
Check for rootkits: Rootkits attempt to evade conventional virus detection methods. You can use
this function to specifically search for rootkits, without checking all the hard drives and saved data.
Virus monitor
The virus monitor should always be active. If you would like to switch off the monitor or would like to change something in the settings, click the entry Disable virus monitor. In addition, by clicking the Advanced button, you can customise the settings of your virus monitor.
More functions
Here you will find details relating to program areas of Ad-Aware Total Security which you might not use so regularly.
Schedule
You can choose to have the most important functions of Ad-Aware Total Security run automatically at regular intervals. This is highly recommended. The procedures for customizing automatic updates and automatic virus checks are very similar.
Automatic updates: Virus definition updates occur hourly in the default setting. If your computer
is not connected to the Internet with a data flat-rate, it would be advisable to perform the automatic update either less frequently or always set it so that it occurs as soon as you access the Internet.
Automatic virus checks: Your computer should be completely checked for virus infection
regularly. Depending on how you use your computer and depending on whether the virus monitor is used, you can change the interval between these automatic virus checks.
?
Various virus checksIn many cases it suffices if the computer is completely checked at regular intervals. Via the New virus check button you can issue various automatic virus checks that are independent of one another. It is thus possible that you check the folder Downloads daily while you check your MP3 collection only once a week, for example.
To edit an automatic update or a virus check, select it and click on the entry Edit. A window with tabs then opens in which you can undertake the corresponding changes:
Job
Enter the name you want to give the newly created job here. It is a good idea to use meaningful names to differentiate between the various jobs, for instance, Local hard disks (weekly scan) or
Archive (monthly scan). If you check Switch off the computer after completion of the task, the
computer will automatically shut down once the automatic virus check has been completed. This is useful if for example you want to run a virus check when your day at work has finished. If the
computer can switch itself off automatically after the scan, this avoids wasting energy unnecessarily.
?
What is a "job"?Each individually executed, automatic task for updating the virus data or scanning the computer is called a "job".
?
Automatic updateBy checking Generate log you can make sure that the software creates a log whenever it updates. This log can be viewed in the Logs
15 Virus monitor
Analysis scope
Here you can define whether the virus check should be run on the local hard drives, whether
memory and autostart areas should be tested, or whether you only want to test certain directories
and files. If this is the case, use the Select button to specify the directories you want.
?
Select directories/filesIn the directory tree, you can open and select directories by clicking on the plus symbols. Their contents will then be shown in the file view. Each directory or file that you mark with a check will be scanned by
Ad-Aware Total Security. If not all files in a directory are checked, this
directory is marked with a gray checkmark.
?
Automatic updateThis tab is not required for automatic updates.
Scheduling
This tab allows you to specify when the automatic update should run and how often. You set up the default schedule under Run and then specify it in more detail under Time. Of course, if you select
On system start-up, the scheduling defaults no longer apply and the software will run the scan each
time your computer starts up.
?
If you select the option Idle mode, the job will only be run if the computer that is turned on at this time is not being used. If this is the case, the job will first start when the computer is no longer being used.?
Automatic updateIf you select the Internet connection setup option under Time, the scheduling defaults no longer apply and the software will run the update each time your computer connects to the Internet.
Virus check
This area allows you to define which settings should be used for the automatic virus check.
Use engines: Ad-Aware Total Security works with multiple engines, in other words, two virus
check modules in addition to the other Lavasoft technologies that work essentially independent of each other. Each engine by itself would already provide you with a high degree of protection against viruses, but it is precisely the combination of all engines that gives the very best results. You can accelerate the virus check in older and slower computers by using an individual engine, but normally you should keep the setting Both engines.
In the case of an infection: Ad-Aware Total Security has detected a virus? In the standard
setting, the software now asks you what you would like to do with the infected file. If you would always like to perform the same action, you can set this here. The highest protection for your data is offered here by the setting Disinfect (if not possible: quarantine).
Infected archive: Here you determine whether archive files (e.g. files with the extension RAR,
ZIP, or PST) should be handled differently from normal files. As viruses stored in an archive can only cause damage when they are unzipped, you may choose to completely deactivate the archive scan under certain circumstances. If your virus monitor is permanently enabled, this will prevent an infection as soon as an infected archive is unzipped.
?
Automatic updateThis tab is not required for automatic updates.
Furthermore, you can click the button Advanced to specify which additional virus checks should be performed or omitted.
In most cases, however, it is completely sufficient to use the specified default settings.
File types: You can specify here which file types should be inspected by the software for viruses.
Selecting the option Program files and documents only entails certain speed benefits.
Priority scanner: Via this setting you can specify the degree to which a virus check influences
the processing power of your computer. If you want to run a virus check when you are not using the computer, the setting High (short run time) is recommended.
Heuristics: In the heuristic analysis, viruses are not only detected by the virus database, which
you receive with every update of the Ad-Aware Total Security, but are also identified on the basis of particular characteristics typical of viruses. This method increases the level of security, but in rare cases may also generate a false alarm.
Check archive: Checking compressed data in archives (these can be recognized by their file
extensions such as ZIP, RAR or PST) is very time-consuming and can normally be omitted if the
virus monitor is generally active on the system. The monitor can detect a previously hidden virus
while the archive is being unzipped and can automatically prevent it from spreading.
Check e-mail archive: Because Ad-Aware Total Security already checks incoming and outgoing
e-mail for virus infections, it is usually a good idea to omit regular checks for e-mail archives since this process may take several minutes, depending on the size of the e-mail archive.
Check system areas: In general, system areas (for example boot sectors) in your computer
should not be excluded from virus checks.
Check for dialers / spyware / adware / riskware: You can also use this function to check your
system for dialers and other malware (spyware, adware and riskware). These are e.g. programs that establish expensive, unwanted Internet connections, of which the potential for financial damage is no less significant than that of the virus. They may for example secretly record your surfing habits or even all the keyboard entries you make (including your passwords) and forward these to third parties via the Internet at the earliest opportunity.
Check for rootkits: Rootkits attempt to evade conventional virus detection methods. Additional
17 Virus monitor
Generate log: By checking the Generate log box, you can specify that the software creates a
log of the virus check process. This log can be viewed in the Logs area.
User account
Here you can specify the user account on the computer on which the virus check should take place. This account is required for access to network drives.
?
Automatic updateHere you can specify a user account on the computer for which the Internet access has been configured.
Quarantine
During the virus check, you have different options for dealing with any viruses found. One option is to move the infected file to quarantine. Quarantine is a secure area in the software where infected files are encrypted and stored so they cannot transfer the virus to any other files.
Logs
The log area lists the logs made by the software. Click the Start time, Type, Header, or Status column headers to sort the available logs accordingly. The Save as and Print buttons can be used to save log data as text files or print them out directly. To delete a log, highlight the entry in the table using the mouse and either press the Del key or click on the Delete button.
Create boot CD
The Ad-Aware Total Security boot CD is a useful tool for rendering computers that have already been compromised virus-free. Use of a boot CD is particularly recommended for computers that had no virus protection prior to installing Ad-Aware Total Security. Read how to create and use a boot
CD in the section: Boot scan prior to installation
?
Are described functions such as creating a boot CD not available to you?It may be possible that the Create boot CD option was not installed during the installation of Ad-Aware Total Security. This can easily be installed retrospectively by reinserting the Ad-Aware Total Security
CD and running the installation with the boot CD option or by running
Updates
In this area, you can undertake all settings involved with the updating of your virus protection. Use the Options button to obtain access to the program parameters affecting this area.
Options (Internet update)
If updating the software via the Internet does not work, you can perform all the operations necessary to enable updates to take place automatically in this area. In the options, enter the access data (
user name and password) that you received when you registered your Ad-Aware Total Security
online. The Lavasoft update server will use this data to recognize you so updates can now run completely automatically.
?
You should only disable the version check in the event of problems with the virus signatures (e.g. if you have accidentally deleted files here).Logon to update server
If you have not registered with the server yet, you can do this now by clicking the Register with
server button. A new window appears in which you can enter your registration number and
customer data.
?
You can find the registration number on the back of the printed manual. If you have purchased the software online, you will receive the registration number in a separate e-mail.Click the Log in button and your access data is generated on the Lavasoft UpdateServer. If the login is successful, an info screen appears with the message Logged in successfully, which you can exit using the Close button.
?
Warning: you will also receive access data for your documentation andfor any software reinstallations by e-mail. Therefore please make sure that the e-mail address indicated in your online registration is correct; otherwise you will not receive the access data.
Your access data will then be automatically transferred into the original input screen, and you can start the actual process of updating by clicking on the OK button.
?
Unable to log onto the server?If you cannot log onto the server, please click on the Internet Settings button. Here you can then check the settings for your Internet
19 Last virus update
Last virus update
This is where you can see when your computer last received updated anti-virus information from the Internet. If this entry is highlighted in red, you should run a virus update as soon as possible. To start the update, just click on the Update entry next to it.
?
Are you having problems with the Internet update? Detailed information can be found in the section: Options (Internet update)Automatic updates
You can update Ad-Aware Total Security regularly via the Internet. This is highly recommended. If you have set up an automatic update you will never have to worry about updating again. If you don't want to use automatic updates, click on the entry and select the Disable automatic updates option.
?
Read how to set up or, if necessary, change an automatic check or update, in the section entitled Schedule.21 Program version
Program version
When new program versions of Ad-Aware Total Security are available, you can easily update these with a click, as with the virus information. If you receive anotification here that an update is available, simply click on the entry Update.
?
Are you having problems with the Internet update? Detailed information can be found in the section: Internet updateMore functions
In this area you can create settings for safe surfing on the Internet.
Web protection Phishing protection Firewall
This is where you can manage protection for your mailbox.
E-mail protection Spam protection
Here, the program functions that go beyond pure virus protection are available to you.
Parental controls Tuner
Backup
Use the Options button to obtain access to the program parameters affecting this area.
Options (Web/IM)
You can create the following settings here.
Internet content (HTTP): In the web options, you can determine that all HTTP web content is
checked for viruses while browsing. Infected web content is not run at all and the corresponding pages are not displayed. To set this option, please check Process Internet content (HTTP).
Avoid browser timeout: Since Ad-Aware Total Security processes web content before it is
displayed in the Internet browser, it requires a certain amount of time to do so depending on the data traffic. Therefore it is possible for an error message to appear in the Internet browser because the browser does not receive data immediately, due to the anti-virus software checking it for malicious routines. By activating the checkbox Avoid browser timeout, you can disable this error message and as soon as all browser data has been checked for viruses, the data will appear as normal in the Internet browser.
Send addresses of infected websites Through this function you can automatically
-anonymously of course - report Internet sites that were deemed unsafe by Ad-Aware Total
Security. With that, you optimize security for all users.
Download size limit: With this function you can interrupt the HTTP check for web content that is
too large. The contents are then monitored by the virus monitor as soon as suspected malicious routines become active. The advantage of the size limit is that there are no delays caused by virus checks when surfing the web.
Instant Messaging: Since viruses and other malware can also be spread via Instant Messaging, Ad-Aware Total Security can also prevent infected data from being displayed and downloaded in
advance. If your Instant Messaging applications do not run using standard port numbers, please enter the corresponding port addresses under Server port number(s).
Instant Messaging (integration into IM application): If you use Microsoft Messenger (version
4.7 and later) or Trillian (version 3.0 and later), you can set the checkmark for the respective
23 More functions
?
If you do not want to check the Internet content, the Virus monitornaturally takes action if infected files are started. That means your system is also protected without checking Internet content as long as the virus monitor is active. However, if you want to use parental
controls (e.g. as part of Ad-Aware Total Security), the checkmark for Process Internet content (HTTP) must be set because the parental
controls will not work correctly otherwise.
Options (E-mail check)
The e-mail check enables you to scan incoming and outgoing e-mails and file attachments for viruses and eliminate possible infections at the source. Ad-Aware Total Security can directly delete file attachments or repair the infected files if viruses are found.
?
In Microsoft Outlook e-mail checks are carried out by using a plug-in . This offers the same protection as the POP3/IMAP-orientatedprotection function in the Anti-Virus options. After installing this plug-in, you will find the function Scan folder for viruses in the Outlook menu Tools, with which you can check your e-mail folders individually for virus contamination.
Incoming mail
In the case of an infection: Here you can specify what is supposed to happen if an infected e-mail
is discovered. Depending on the purposes for which you are using your computer, different settings apply here. Generally we recommend using the Disinfect (if not possible: delete attachment/
text) setting.
Check received e-mail: By activating this option, all the e-mail you receive while you are
working on your computer are checked for viruses.
Check unread e-mail on program start-up (Microsoft Outlook only): Only for Microsoft
Outlook: This option is used to scan for viruses in e-mail you receive while you are offline. All
unread e-mail in your Inbox folder and subfolders will be checked as soon as you open Outlook.
Append report to received, infected e-mail: When you enable the report option and a virus is
found, the virus will be removed and the e-mail will be replaced by text.
Outgoing mail
Check e-mail before sending: Ad-Aware Total Security also allows you to scan your e-mail for
virus infection before you send them, to ensure you do not inadvertently send viruses yourself. If you try to actually send a virus (unintentionally), the message The e-mail [subject header] contains the
following virus: [virus name] appears. The e-mail cannot be sent, and the corresponding e-mail
will not be sent.
Append report to received, infected mails: a scan report is displayed underneath the actual
text of every outgoing e-mail. Here you can also specify whether this report contains information about the version used (Version information).
Scan options
Use engines: Ad-Aware Total Security uses multiple anti-virus engines, two generally independently
operating analysis units in addition to the other Lavasoft technologies. In principle, use of all engines should guarantee optimum virus protection results.
OutbreakShield: This option lets you activate the OutbreakShield. With the activated
OutbreakShield, Ad-Aware Total Security creates checksums of e-mail, compares these with current anti-spam blacklists and, as a result, it is able to react to a mass-mailing before the relevant virus definitions become available. OutbreakShield uses the Internet to monitor increased volumes of suspicious e-mail, enabling it to close the window between the mass mail outbreak and its containment with specially adapted virus definitions, practically in real time. The OutbreakShield is an integral part of the e-mail virus blocker.
?
If you use a proxy server, click on the Internet settings button and carry out the settings. You should change these settings only if your OutbreakShield doesn't function. If necessary, consult your system administrator or Internet service provider about the proxy address.Advanced
Ad-Aware Total Security also automatically protects your e-mail once installed. To do so, it uses a
special plug-in for Microsoft Outlook and a special client for POP3/IMAP-based e-mail programs (e. g. Outlook Express, Thunderbird, Pegasus, Opera etc.) that scans e-mail before they are sent or received by your e-mail program. By checking the relevant checkbox, you can also disable
protection for incoming e-mail (POP3/IMAP) and outgoing e-mail (SMTP).
Since Ad-Aware Total Security processes incoming e-mail before the e-mail program itself, you may get an error message if there is a large quantity of e-mail or if the connection is slow. This is because it is not receiving the e-mail data immediately, as it is being scanned for viruses by
Ad-Aware Total Security. If you check the Avoid timeout in mail client box, this type of error
message is suppressed and Ad-Aware Total Security will forward the messages to the e-mail program as usual as soon as all the e-mail data has been checked for viruses.
?
If you do not use the default ports for your e-mail programs, you can enter the port you use for incoming or outgoing e-mail under Serverport number. Click on the Default button to automatically restore the
default port numbers.
?
You can also enter multiple ports. Separate each of these with a comma.?
Microsoft Outlook is protected by a special plug-in that allows you toscan folders and e-mail directly from Outlook. To scan an e-mail or folder for viruses in Outlook, simply select the Tools > Scan folder for
viruses command from the Outlook menu bar and the current e-mail
25 Web protection
Web protection
In this area, you can enable or disable web protection. By means of the Advanced button, you can set basic settings for handling web content and messaging services.
Define exceptions
Web protection ensures that you do not fall victim to infected or fraudulent websites on the Internet. However, in rare cases it may occur that a website is not displayed properly, even though it is supplied by a safe provider. In such a case, you can add this web address to the Whitelist, i.e. you can define it as an exception and Web protection will no longer block this site. To add a website to the exceptions in the Whitelist, please proceed as follows:
1
Click on the Define exceptions button. The Whitelist window will appear. This will display the websites that have been categorized as safe and entered here.2
To add another website, please click on the New button. An input screen will appear. Enter the name of the website (e.g. www.lavasoft. com) under URL and, if necessary, enter a comment under Note about why you have included this website. If you click on OK now , the website will be transferred to the whitelist and will no longer be checked by Web protection.3
An information window will confirm that the website has been added to the Whitelist. You can then exit the Whitelist window by clicking on the Close button at the upper right corner.?
To remove a website from the Whitelist, highlight it in the list using your mouse and then click on the Delete button.Phishing protection
With so-called phishing, scammers on the Internet attempt to redirect customers of a particular bank or shop to fake websites in order to steal their data there. The Webfilter is constantly updated online with the latest information about new phishing websites and blocks these automatically. Activating the phishing protection is highly recommended.
27 Firewall
Firewall
A firewall protects your computer from being spied on. It checks which data and programs from the Internet or network reach your computer and which data is sent from your computer. As soon as there is an indication that data is to be installed or downloaded on your computer without
authorization, the firewall alarm sounds and blocks the unauthorized data exchange. It is generally advisable to use the firewall in Autopilot mode. It then virtually runs in the background and protects you without you having to undertake major settings.
?
If you are using the firewall in Autopilot mode, this will remain completely in the background and operate independently. If you are using the firewall with user-defined settings, a dialogue window will appear in the event of doubt in which you can gradually optimize the firewall for your system environment. Autopilot mode is included as standard when installing the firewall.The firewall starts tracking your computer's network activities from the moment it is installed. When you are working locally with your
computer, you will only be aware of the firewall from the Security icon on the Windows taskbar.
You can use the Configure buttons to set the firewall individually if you do not want to use Autopilot Mode.
Configure
The firewall usually operates in Autopilot mode. It is only advisable to change the firewall settings if you have sufficient knowledge of processes involving networks, Internet access and data transfer. If you want to customise the firewall settings, you can use the firewall program interface to do so. Click on the icons on the left of the firewall screen to select various tabs that will take you to the relevant program area where you can carry out different actions, select default settings and check connection data.
Status
In the status area of the firewall, you will find basic information about the current status of your system and the firewall. You will find this to the right of the relevant entry as either text or numerical data. In addition, the status of components is also displayed graphically. By double-clicking the relevant entry (or selecting the entry and clicking the Edit button), you can directly select actions or switch to the relevant program area. As soon as you have optimized the settings for a component with a warning icon, the icon in the Status area will revert to the green check icon.
Security: As you use the computer for your daily tasks, the firewall gradually learns which
programs you do or do not use for Internet access and which programs represent a security risk. Depending on how familiar you are with firewall technology, you can configure the firewall to provide either highly effective basic protection without an excessive number of inquiries or professional protection customised to your own computing habits, but which also requires knowledge of firewalls. Double-click on Security to call up a range of security versions:
Autopilot mode (recommended): Here the firewall works fully
Manual rule creation: If you would like to individually configure your
firewall or do not want particular applications to work together with autopilot mode, you can adjust your firewall protection entirely to your requirements via the manual rule creation.
Mode: Here you are informed of which basic setting your firewall is currently operating in. Either
the manual rule creation or automatic (autopilot) are possible here.
Networks: Naturally, the firewall monitors all network activities such as a DTN (data transmission
network) and a LAN connection. If one or more networks are not protected, for example,
because they were manually excluded from firewall monitoring, a warning icon will alert you of this. Double-clicking the respective entry opens a dialogue box via which you can individually configure the rules and settings for the selected network. Here, under Rule set simply select whether the respective network is supposed to belong to the Trustworthy networks, the Untrustworthy
networks, or the Networks to be blocked.
?
The Direct Internet connection setting is, for the most part, based on the settings that also apply to Trustworthy networks.?
Each network can be assigned a special rule set. While theNetworks area tells you which networks are available on your
computer, the Rule sets area tells you which automatically created or user-defined rule sets are available in the firewall.
Registered attacks: As soon as the firewall registers an attack on your computer, it is logged
here and you can obtain further information by clicking the menu item.
Application radar: The application radar shows you which programs are currently being blocked
by the firewall. If you still want to allow one of the blocked applications to use the network, simply select it and then click the Allow button.
Networks
The Networks area lists the networks (e.g. LAN, data transmission network etc.) to which your computer is connected. Also shown here is which rule sets (see section Rule sets) are protecting the respective network. If you uncheck the relevant network it will no longer be protected by the firewall. However, you should only disable this protection in specially justified circumstances. If you use the mouse to highlight a network and click on the Edit button, you can view and/or change the firewall settings for this network.
Edit network
When editing network settings, you have a choice of using the rule wizard or the advanced
dialogue. We generally recommend using the rule wizard since it helps the user create rules and
settings.
About network: This is where you can find information about the network - where this is available
- concerning the IP address, subnet mask, default gateway, DNS, and WINS server.
Firewall enabled on this network: You can use this option to disable the firewall's network
protection, but you should only do this in specially justified circumstances.
Internet connection sharing: If your system connects directly to the Internet you can determine
whether all computers connected via a TCP/IP network should have access to the Internet or not. This Internet connection sharing (ICS) can generally be activated for home networks.
Enable automatic configuration (DHCP): When you connect your computer to the network, a
dynamic IP address (via DHCP = Dynamic Host Configuration Protocol) is assigned. You
should leave this option checked if you are connected to the network using this default configuration.
29 Firewall
Rule set: You can very quickly choose from predefined rule sets and determine whether, in terms
of firewall monitoring, you are dealing with a network which can be e.g. trusted, not trusted, or should be blocked. Clicking the Edit rule set button gives you the option of configuring rule sets individually. Please also refer to the section Rule sets.
Rule sets
In this area you can create special rules for different networks. These rules can then be grouped together to form a rule set. There are default rule sets for a direct connection to the Internet,
untrustworthy networks, trustworthy networks, and networks to block. The relevant rule set is
listed with names and stealth mode status in the overview. You can change existing rule sets or add new ones using the New, Delete, and Edit buttons.
?
Stealth mode (hidden, secret) is used for not answering requests tothe computer that verify the relevant port's accessibility. This makes it difficult for hackers to obtain system information in this manner.
?
The default rule sets for Direct Internet connection, Trustworthynetworks, Untrustworthy networks, and Networks to be blocked
cannot be deleted. You may, of course, delete additional rule sets that you yourself have created at any time.
Create rule sets
You can allocate every network its own rule set (i.e. a collection of rules specially matched to it). In this manner you can protect networks with different levels of danger in different ways using the firewall. For example, a home network surely requires considerably less protection (and
consequently less administrative effort) than a data transmission network directly connected to the Internet. The firewall contains three default rule sets for the following network types:
Rule set for an untrustworthy network: This generally covers open networks (e.g. data
transmission networks) with Internet access.
Rule set for a trustworthy network: Home and company networks are generally trustworthy. Rule set for a network to be blocked: This setting can be used if the computer's access to a
network is to be blocked on a temporary or permanent basis. This is advisable, for instance, when you are connected to external networks with an indeterminate level of security (e.g. at LAN
parties, external corporate networks, public workspaces for notebooks, etc.)
Newly established networks on your computer can be assigned an appropriate rule set. Furthermore, you can also create individual rule sets for networks by clicking the New button. To do this, click the New button in the Rule sets area and enter the following details in the dialogue window:
Rule set name: Enter a meaningful name for the rule set here.
Generate an empty rule set: This allows you to generate an empty rule set and enter
custom-defined rules.
Generate a rule set which contains a number of meaningful rules: This option allows you to
specify if you want the new rule set to include a few basic default rules for untrustworthy, trustworthy networks or for networks to be blocked. You can then make individual adjustments based on these defaults.
The new rule set now appears in the list in the rule sets area under the relevant rule set name (e.g.
new rule set). If you then click on Edit - depending on the setting you made under Miscellaneous
