Avira Premium Security Suite
78
Advanced Heuristic Analysis and Detection (AHeAD)
enable AHeAD
Avira Premium Security Suite contains a very powerful heuristic in the form of AntiVir
AheAD technology, which can also detect unknown (new) malware. If this option is
activated, you can define how "aggressive" this heuristic should be. This option is enabled
as the default setting.
Low detection level
If this option is enabled, Avira Premium Security Suite detects slightly less unknown
malware, the risk of false alerts is low in this case.
Medium detection level
This setting is activated by default if you have selected the use of this heuristic.
High detection level
If this option is enabled, Avira Premium Security Suite identifies far more unknown
malware, but you must also accept that there are likely to be false positives.
13.2.2 ProActiv
AntiVir ProActive protects you from new and unknown threats for which there are not
yet any virus definitions or heuristics available. ProActive technology is integrated into
the Guard component and observes and analyzes the program actions carried out. The
behavior of the program is checked against typical mailware action patterns: Type of
action and action sequences. If a program exhibits behavior typical of malware, this is
treated as a virus detection : You have the option of blocking the program or ignoring
the notification and continuing to use the program. You can classify the program as
trusted and add it to the application filter for permitted programs. You have the option
of adding the program to the application filter for blocked programs using the Always
block command.
The ProActive component uses rule sets developed by the Avira Malware Research
Center to identify behavior typical of malware. The rule sets are supplied by Avira GmbH
databases. AntiVir ProActiv sends information on any suspicious programs detected to
the Avira database for logging. You have the option of disabling transmission of data to
the Avira databases.
Note
ProActive technology is not yet available for 64 bit systems! Windows 2000 does not
support ProActive components.
General
Enabling AntiVir ProActiv.
If this option is enabled, programs are monitored on your computer system and checked
for actions typical of malware. You will receive a message if typical malware behavior is
detected. You can block the program or select Ignore to continue to use the program. The
monitoring process excludes: Programs classified as trusted, trusted and signed
programs included by default in the permitted applications filter, and all programs which
you have added to the application filter for permitted programs.
Be part of the Avira ProActive community