Windows Defender for Win10 -- Needed or Not?

[Viper69]

I've never used Windows Defender. In Win10 is it worth using? I'll be running KAV and Malewarebytes (paid license, ie runs in real time) on this laptop.

 

[don256us]

I haven't kept up with Windows Defender in a long time but the last time I saw a review on it, it wasn't as bad as it is generally painted to be.

With that said, Kaspersky is far and away better and if you are using another AV, Defender will usually be uninstalled.

To answer your question, don't use Defender is you have *any* other AV.

 

[c627627]

• Freeware Comodo Firewall
• Freeware Avira Antivir top most, if not all of their their pay-for counterparts.

https://personalfirewall.comodo.com/free-download.html
http://install.avira-update.com/package/antivirus/win/en-us/avira_antivirus_en-us.exe



Comodo Firewall 8.4.0.5165


[Comodo 8 does not allow removal of Alternate Data Streams until it is uninstalled.
Comodo 7 does not have this problem but is not for Windows 10, it is very unstable even under Windows 8.1.]


Double click on Setup.exe to install the program > OK > UNCHECK everything > STOP!!

** CLICK ON CUSTOMIZE INSTALLATION here. ** BEFORE CLICKING ON Next

UNCHECK: COMODO GeekBuddy
UNCHECK: COMODO Browser

> Back > Agree and Install > Close


Comodo Firewall will immediately start behaving crazy-restrictive, immediately import any saved configurations if you have them:

Right click on the Comodo icon in the task bar > Open... > Tasks [upper right] > Advanced Tasks > Open Advanced Settings [lower right] > Configuration > Right click on empty white window > Import > Browse to previously saved configuration settings file > Open and wait and allow for it to be imported, then right click on the imported configuration > Activate > Yes > OK > OK

REBOOT.


Otherwise, ignore alerts and immediately start setting your custom configuration:

Right click on the Comodo icon in the task bar > Open... > Tasks [upper right] > Advanced Tasks [lower left] > Open Advanced Settings [lower right] >
General Settings [upper left of the Advanced Settings window] > User Interface >
UNCHECK: Show messages from COMODO Message Center
UNCHECK:*Show welcome screen on startup
UNCHECK: Show desktop widget
UNCHECK: Play sound when an alert is shown

Updates > UNCHECK everything


> Security Settings > File Rating > File Rating Settings > UNCHECK everything
> Security Settings > Defense+ > Sandbox > Auto-Sandbox > UNCHECK: Enable file source tracking > OK
[otherwise each downloaded file will be labeled with Alternate Data Stream data]
Comodo 8 does not allow removal of Alternate Data Streams until it is uninstalled.
Comodo 7 does not have this problem.



> OK > REBOOT


To temporarily block ALL internet access: Right click on the Comodo icon in the task bar > Advanced View,
Now you can right click on the Comodo icon in the task bar > Firewall > Block All

To see the list of blocked programs:
Tasks > Advanced tasks > Open Advanced Settings > Security Settings > Firewall > Application Rules


Disabling Comodo right-click menu entries such as "Run in COMODO Sandbox":

Enter the following into Start Menu > Run... or Open DOS command box as Administrator and type the following:
regsvr32 /u "%ProgramFiles%\COMODO\COMODO Internet Security\cavshell.dll"

To restore it back into right-click menu, type the following:
regsvr32 "%ProgramFiles%\COMODO\COMODO Internet Security\cavshell.dll"



To temporarily allow everything to go through:

Tasks > Firewall Tasks > Open Advanced Settings > Application Rules >
Right click on empty gray area > Add > Browse > File Group > All Applications >
Copy From > Ruleset > Trusted Application > OK

Make sure the just crated All Applications rule is at the top and
*must* click on OK and have the Application Rules window disappear for this to actually take effect.

Completely remove this rule when finished.








= = = = = = = =








Avira AntiVir Personal 2016 v15.0.18.354


Full version location is
http://install.avira-update.com/package/antivirus/win/en-us/avira_antivirus_en-us.exe

Double click on Setup.exe to install the program.

Click on Next, ignoring Avira's warnings to uninstall Comodo Firewall or similar programs which intercept phone-home attempts.


SELECT: Custom
UNCHECK: I want to improve my protection using Avira Protection Cloud
CHECK: I accept the End User License Agreement > Next > Next > STOP!!

!!! IMPORTANT !!! : UNCHECK: Windows Firewall
Otherwise Avira umbrella will integrate with Windows Firewall ON/OFF switch and will be closed even if you are using better third party Firewalls like Comodo Firewall instead of Windows Firewall.
In other words, if you don't UNCHECK: Windows Firewall, you will have to permanently keep Windows Firewall ON for Avira umbrella to be open, even if you use other, better firewalls.
After installation, C:\Program Files (x86)\Avira\AntiVir Desktop\setup.exe controls adding/removing Avira options like Firewall.

Decide if Mail Protection and Web Protection is needed. The program will still auto detect any malware on the system even if Mail Protection and Web Protection are UNCHECKED, so these depend on where Avira is being installed.

CHECK: Confirm manually when sending suspicious files to Avira > Next > Next


Welcome to the Configuration Wizard > Next > Next > Next > Next >
Next > Next > STOP!!

Allow the configuration wizard to keep the default Extended Threat Categories options. [Do NOT Select All.]
Once again: *DO NOT SELECT ALL* here.
(LEAVE UNCHECKED: Application, Games, Jokes, Programs that violate the private domain) > Next >

UNCHECK: Performs a quick system scan after the installation > Next > Finish

Run program update, reboot if prompted. Wait for update to install.


Start Avira >
System Scanner (upper left) > Configuration (upper right) >

Always keep this UNCHECKED: Follow symbolic links (on right)

> [under PC Protection] General > Security >
Disable being notified every time USB drive has an AUTORUN.INF file:
UNCHECK: Block autorun function
> General > Events > Select: Limit size to max. >
> General > Reports > Select: Limit number to max. >
> General > Warnings > UNCHECK Show notice if the virus definition file is out of date

> Apply > First click on OK then > Scheduler [on lower left] > UNCHECK everything.


> System Scanner > Scan > Action on detection >
Set for Automatic, Primary action: Ignore [if you want to just scan folders and get a scan report without deleting files or being prompted what to do if virii/malware are found.]


Set Avira Free Antivirus to Always show in Windows Taskbar.


Also block this Avira messaging popup nag file from accessing the internet, using Comodo Firewall or similar software:
C:\Program Files (x86)\Avira\AntiVir Desktop\ipmgui.exe
or
C:\Program Files\Avira\AntiVir Desktop\ipmgui.exe


To disable Notifier nag screen: Control Panel > View by Category > System and Security first > Administrative Tools [fourth from bottom] > Security Configuration Management or Local Security Policy > Right click on Software Restriction Policies > New Software Restriction Policies SO THAT ADDITIONAL RULES SHOWS UP UNDERNEATH > Right click on Additional Rules > New Path Rule... > Browse... to the path of avnotify.exe default is
C:\Program Files (x86)\Avira\Antivirus\avnotify.exe
or
C:\Program Files\Avira\Antivirus\avnotify.exe

> OK > Set the security level to Disallowed > OK


For Windows Home or non-Professional versions, you must reboot into Safe Mode, log in as Administrator, then
go to
C:\Program Files (x86)\Avira\AntiVir Desktop\avnotify.exe
and right click on it >
Properties > Security TAB >
[Under Group or usernames] SYSTEM > Edit button > CHECK: Deny for Read & execute > Apply > Yes > OK > OK

Make sure SYSTEM is set to Deny for Read & execute before rebooting.

[Security TAB will only show up on NTFS formatted drives, not FAT32 drives.]

To boot into Safe Mode: Start Menu > Run... > MSCONFIG > Boot TAB >
CHECK: Safe boot > OK
When you finish with Safe Mode, be sure to UNCHECK: Safe boot so you don't reboot into Safe Mode again.


To submit a suspected virus, go to
http://analysis.avira.com/samples/
to upload it.


You can scan multiple drives inside program options: Local Protection > Scanner > CHECK drives you wish to scan. The premium version also offers the option to scan multiple folders here. The free version does not.


Subscription to new virus definitions for this program is renewed automatically when you right click on Avira icon in the task bar > Start update

or download the latest key file from:
http://personal.avira-update.com/package/peclkey/win32/int/hbedv.key

and either copy it to
C:\Program Files (x86)\Avira\AntiVir Desktop
and restart or go to Help > License management > click on the blue License file link > browse to the new downloaded hbedv.key > Open.



In case of error message:

The procedure entry point ?_Xbad@tr1@std@@YAX4error_type@regex_constants@12@@Z could not be located in the dynamic link library MSVCP90.dll

download and install Microsoft Visual C++ 2008 SP1 Redistributable Package
http://www.microsoft.com/downloads/...FamilyID=a5c84275-3b97-4ab7-a40d-3802b2af5fc2


Manual updates can be downloaded from:
http://dl.antivir.de/down/vdf/ivdf_fusebundle_nt_en.zip
Unzip the downloaded file and copy all the contents to
C:\Program Files\Avira\AntiVir Desktop


Using two Antivirus programs at the same time:
It is *not* a good idea to use two Antivirus programs at the same time, they will conflict with each other and most likely cause problems, unless you disable one of them from being active on the system.


Default log file location is
%PROGRAMDATA%\Avira\AntiVir Desktop\LOGFILES

%PROGRAMDATA% stands for
C:\ProgramData\

 

[RollingThunder]

I've never used Windows Defender. In Win10 is it worth using? I'll be running KAV and Malewarebytes (paid license, ie runs in real time) on this laptop.

If you have a paid Kapersky license and paid Malwatbytes then I wouldn't change anything. However I also agree Avira free is hard to beat if in need of excellent AV freeware.

Malwarebytes Anti-Rootkit beta is also nice to have to call on:

https://www.malwarebytes.com/antirootkit/

Some time ago it nailed a rootkit that I mishandled too casually and that nothing else could remove. I have since learned to not be so casual with these items and alerts......

 

[trents]

Rootkit scanning is now built into Malwarebytes free. If you choose the custom scan option you will see it in the checklist.


Windows Defender is actually pretty decent. Microsoft is actively developing and maintaining it in Windows 10. I'm using it alone on my main desktop except I run Malwarebytes free once in a while when I suspect something. So far, so good.

Windows 10 Defender is a good choice for the technologically challenged out there in that it protects reasonably well and doesn't bombard them or bait them with messages they don't know what to do with and may respond inappropriately to.

 

[don256us]

Good to know. Thanks.

 

[EarthDog]

Been on defender alone for years. Good browsing habits + that = fine for me.

 

[Viper69]

Thanks a lot guys. Everyone confirmed my thoughts.

- - - Updated - - -

• Freeware Comodo Firewall
• Freeware Avira Antivir top most, if not all of their their pay-for counterparts.

https://personalfirewall.comodo.com/free-download.html
http://install.avira-update.com/package/antivirus/win/en-us/avira_antivirus_en-us.exe



Comodo Firewall 8.4.0.5165


[Comodo 8 does not allow removal of Alternate Data Streams until it is uninstalled.
Comodo 7 does not have this problem but is not for Windows 10, it is very unstable even under Windows 8.1.]


Double click on Setup.exe to install the program > OK > UNCHECK everything > STOP!!

** CLICK ON CUSTOMIZE INSTALLATION here. ** BEFORE CLICKING ON Next

UNCHECK: COMODO GeekBuddy
UNCHECK: COMODO Browser

> Back > Agree and Install > Close


Comodo Firewall will immediately start behaving crazy-restrictive, immediately import any saved configurations if you have them:

Right click on the Comodo icon in the task bar > Open... > Tasks [upper right] > Advanced Tasks > Open Advanced Settings [lower right] > Configuration > Right click on empty white window > Import > Browse to previously saved configuration settings file > Open and wait and allow for it to be imported, then right click on the imported configuration > Activate > Yes > OK > OK

REBOOT.


Otherwise, ignore alerts and immediately start setting your custom configuration:

Right click on the Comodo icon in the task bar > Open... > Tasks [upper right] > Advanced Tasks [lower left] > Open Advanced Settings [lower right] >
General Settings [upper left of the Advanced Settings window] > User Interface >
UNCHECK: Show messages from COMODO Message Center
UNCHECK:*Show welcome screen on startup
UNCHECK: Show desktop widget
UNCHECK: Play sound when an alert is shown

Updates > UNCHECK everything


> Security Settings > File Rating > File Rating Settings > UNCHECK everything
> Security Settings > Defense+ > Sandbox > Auto-Sandbox > UNCHECK: Enable file source tracking > OK
[otherwise each downloaded file will be labeled with Alternate Data Stream data]
Comodo 8 does not allow removal of Alternate Data Streams until it is uninstalled.
Comodo 7 does not have this problem.



> OK > REBOOT


To temporarily block ALL internet access: Right click on the Comodo icon in the task bar > Advanced View,
Now you can right click on the Comodo icon in the task bar > Firewall > Block All

To see the list of blocked programs:
Tasks > Advanced tasks > Open Advanced Settings > Security Settings > Firewall > Application Rules


Disabling Comodo right-click menu entries such as "Run in COMODO Sandbox":

Enter the following into Start Menu > Run... or Open DOS command box as Administrator and type the following:
regsvr32 /u "%ProgramFiles%\COMODO\COMODO Internet Security\cavshell.dll"

To restore it back into right-click menu, type the following:
regsvr32 "%ProgramFiles%\COMODO\COMODO Internet Security\cavshell.dll"



To temporarily allow everything to go through:

Tasks > Firewall Tasks > Open Advanced Settings > Application Rules >
Right click on empty gray area > Add > Browse > File Group > All Applications >
Copy From > Ruleset > Trusted Application > OK

Make sure the just crated All Applications rule is at the top and
*must* click on OK and have the Application Rules window disappear for this to actually take effect.

Completely remove this rule when finished.








= = = = = = = =








Avira AntiVir Personal 2016 v15.0.18.354


Full version location is
http://install.avira-update.com/package/antivirus/win/en-us/avira_antivirus_en-us.exe

Double click on Setup.exe to install the program.

Click on Next, ignoring Avira's warnings to uninstall Comodo Firewall or similar programs which intercept phone-home attempts.


SELECT: Custom
UNCHECK: I want to improve my protection using Avira Protection Cloud
CHECK: I accept the End User License Agreement > Next > Next > STOP!!

!!! IMPORTANT !!! : UNCHECK: Windows Firewall
Otherwise Avira umbrella will integrate with Windows Firewall ON/OFF switch and will be closed even if you are using better third party Firewalls like Comodo Firewall instead of Windows Firewall.
In other words, if you don't UNCHECK: Windows Firewall, you will have to permanently keep Windows Firewall ON for Avira umbrella to be open, even if you use other, better firewalls.
After installation, C:\Program Files (x86)\Avira\AntiVir Desktop\setup.exe controls adding/removing Avira options like Firewall.

Decide if Mail Protection and Web Protection is needed. The program will still auto detect any malware on the system even if Mail Protection and Web Protection are UNCHECKED, so these depend on where Avira is being installed.

CHECK: Confirm manually when sending suspicious files to Avira > Next > Next


Welcome to the Configuration Wizard > Next > Next > Next > Next >
Next > Next > STOP!!

Allow the configuration wizard to keep the default Extended Threat Categories options. [Do NOT Select All.]
Once again: *DO NOT SELECT ALL* here.
(LEAVE UNCHECKED: Application, Games, Jokes, Programs that violate the private domain) > Next >

UNCHECK: Performs a quick system scan after the installation > Next > Finish

Run program update, reboot if prompted. Wait for update to install.


Start Avira >
System Scanner (upper left) > Configuration (upper right) >

Always keep this UNCHECKED: Follow symbolic links (on right)

> [under PC Protection] General > Security >
Disable being notified every time USB drive has an AUTORUN.INF file:
UNCHECK: Block autorun function
> General > Events > Select: Limit size to max. >
> General > Reports > Select: Limit number to max. >
> General > Warnings > UNCHECK Show notice if the virus definition file is out of date

> Apply > First click on OK then > Scheduler [on lower left] > UNCHECK everything.


> System Scanner > Scan > Action on detection >
Set for Automatic, Primary action: Ignore [if you want to just scan folders and get a scan report without deleting files or being prompted what to do if virii/malware are found.]


Set Avira Free Antivirus to Always show in Windows Taskbar.


Also block this Avira messaging popup nag file from accessing the internet, using Comodo Firewall or similar software:
C:\Program Files (x86)\Avira\AntiVir Desktop\ipmgui.exe
or
C:\Program Files\Avira\AntiVir Desktop\ipmgui.exe


To disable Notifier nag screen: Control Panel > View by Category > System and Security first > Administrative Tools [fourth from bottom] > Security Configuration Management or Local Security Policy > Right click on Software Restriction Policies > New Software Restriction Policies SO THAT ADDITIONAL RULES SHOWS UP UNDERNEATH > Right click on Additional Rules > New Path Rule... > Browse... to the path of avnotify.exe default is
C:\Program Files (x86)\Avira\Antivirus\avnotify.exe
or
C:\Program Files\Avira\Antivirus\avnotify.exe

> OK > Set the security level to Disallowed > OK


For Windows Home or non-Professional versions, you must reboot into Safe Mode, log in as Administrator, then
go to
C:\Program Files (x86)\Avira\AntiVir Desktop\avnotify.exe
and right click on it >
Properties > Security TAB >
[Under Group or usernames] SYSTEM > Edit button > CHECK: Deny for Read & execute > Apply > Yes > OK > OK

Make sure SYSTEM is set to Deny for Read & execute before rebooting.

[Security TAB will only show up on NTFS formatted drives, not FAT32 drives.]

To boot into Safe Mode: Start Menu > Run... > MSCONFIG > Boot TAB >
CHECK: Safe boot > OK
When you finish with Safe Mode, be sure to UNCHECK: Safe boot so you don't reboot into Safe Mode again.


To submit a suspected virus, go to
http://analysis.avira.com/samples/
to upload it.


You can scan multiple drives inside program options: Local Protection > Scanner > CHECK drives you wish to scan. The premium version also offers the option to scan multiple folders here. The free version does not.


Subscription to new virus definitions for this program is renewed automatically when you right click on Avira icon in the task bar > Start update

or download the latest key file from:
http://personal.avira-update.com/package/peclkey/win32/int/hbedv.key

and either copy it to
C:\Program Files (x86)\Avira\AntiVir Desktop
and restart or go to Help > License management > click on the blue License file link > browse to the new downloaded hbedv.key > Open.



In case of error message:

The procedure entry point ?_Xbad@tr1@std@@YAX4error_type@regex_constants@12@@Z could not be located in the dynamic link library MSVCP90.dll

download and install Microsoft Visual C++ 2008 SP1 Redistributable Package
http://www.microsoft.com/downloads/...FamilyID=a5c84275-3b97-4ab7-a40d-3802b2af5fc2


Manual updates can be downloaded from:
http://dl.antivir.de/down/vdf/ivdf_fusebundle_nt_en.zip
Unzip the downloaded file and copy all the contents to
C:\Program Files\Avira\AntiVir Desktop


Using two Antivirus programs at the same time:
It is *not* a good idea to use two Antivirus programs at the same time, they will conflict with each other and most likely cause problems, unless you disable one of them from being active on the system.


Default log file location is
%PROGRAMDATA%\Avira\AntiVir Desktop\LOGFILES

%PROGRAMDATA% stands for
C:\ProgramData\

Much appreciated. I can always count on you to give me a thorough answer. I will look into these as well.

- - - Updated - - -

If you have a paid Kapersky license and paid Malwatbytes then I wouldn't change anything. However I also agree Avira free is hard to beat if in need of excellent AV freeware.

Malwarebytes Anti-Rootkit beta is also nice to have to call on:

https://www.malwarebytes.com/antirootkit/

Some time ago it nailed a rootkit that I mishandled too casually and that nothing else could remove. I have since learned to not be so casual with these items and alerts......

Thanks Thunder, I had forgotten about their Rootkit software. Glad to see you are still around.

- - - Updated - - -

Rootkit scanning is now built into Malwarebytes free. If you choose the custom scan option you will see it in the checklist.


Windows Defender is actually pretty decent. Microsoft is actively developing and maintaining it in Windows 10. I'm using it alone on my main desktop except I run Malwarebytes free once in a while when I suspect something. So far, so good.

Windows 10 Defender is a good choice for the technologically challenged out there in that it protects reasonably well and doesn't bombard them or bait them with messages they don't know what to do with and may respond inappropriately to.

Didn't know they built it into the free version, very good. Thanks for the info!

 

[Theocnoob]

• Freeware Comodo Firewall
• Freeware Avira Antivir top most, if not all of their their pay-for counterparts.

https://personalfirewall.comodo.com/free-download.html
http://install.avira-update.com/package/antivirus/win/en-us/avira_antivirus_en-us.exe



Comodo Firewall 8.4.0.5165


[Comodo 8 does not allow removal of Alternate Data Streams until it is uninstalled.
Comodo 7 does not have this problem but is not for Windows 10, it is very unstable even under Windows 8.1.]


Double click on Setup.exe to install the program > OK > UNCHECK everything > STOP!!

** CLICK ON CUSTOMIZE INSTALLATION here. ** BEFORE CLICKING ON Next

UNCHECK: COMODO GeekBuddy
UNCHECK: COMODO Browser

> Back > Agree and Install > Close


Comodo Firewall will immediately start behaving crazy-restrictive, immediately import any saved configurations if you have them:

Right click on the Comodo icon in the task bar > Open... > Tasks [upper right] > Advanced Tasks > Open Advanced Settings [lower right] > Configuration > Right click on empty white window > Import > Browse to previously saved configuration settings file > Open and wait and allow for it to be imported, then right click on the imported configuration > Activate > Yes > OK > OK

REBOOT.


Otherwise, ignore alerts and immediately start setting your custom configuration:

Right click on the Comodo icon in the task bar > Open... > Tasks [upper right] > Advanced Tasks [lower left] > Open Advanced Settings [lower right] >
General Settings [upper left of the Advanced Settings window] > User Interface >
UNCHECK: Show messages from COMODO Message Center
UNCHECK:*Show welcome screen on startup
UNCHECK: Show desktop widget
UNCHECK: Play sound when an alert is shown

Updates > UNCHECK everything


> Security Settings > File Rating > File Rating Settings > UNCHECK everything
> Security Settings > Defense+ > Sandbox > Auto-Sandbox > UNCHECK: Enable file source tracking > OK
[otherwise each downloaded file will be labeled with Alternate Data Stream data]
Comodo 8 does not allow removal of Alternate Data Streams until it is uninstalled.
Comodo 7 does not have this problem.



> OK > REBOOT


To temporarily block ALL internet access: Right click on the Comodo icon in the task bar > Advanced View,
Now you can right click on the Comodo icon in the task bar > Firewall > Block All

To see the list of blocked programs:
Tasks > Advanced tasks > Open Advanced Settings > Security Settings > Firewall > Application Rules


Disabling Comodo right-click menu entries such as "Run in COMODO Sandbox":

Enter the following into Start Menu > Run... or Open DOS command box as Administrator and type the following:
regsvr32 /u "%ProgramFiles%\COMODO\COMODO Internet Security\cavshell.dll"

To restore it back into right-click menu, type the following:
regsvr32 "%ProgramFiles%\COMODO\COMODO Internet Security\cavshell.dll"



To temporarily allow everything to go through:

Tasks > Firewall Tasks > Open Advanced Settings > Application Rules >
Right click on empty gray area > Add > Browse > File Group > All Applications >
Copy From > Ruleset > Trusted Application > OK

Make sure the just crated All Applications rule is at the top and
*must* click on OK and have the Application Rules window disappear for this to actually take effect.

Completely remove this rule when finished.








= = = = = = = =








Avira AntiVir Personal 2016 v15.0.18.354


Full version location is
http://install.avira-update.com/package/antivirus/win/en-us/avira_antivirus_en-us.exe

Double click on Setup.exe to install the program.

Click on Next, ignoring Avira's warnings to uninstall Comodo Firewall or similar programs which intercept phone-home attempts.


SELECT: Custom
UNCHECK: I want to improve my protection using Avira Protection Cloud
CHECK: I accept the End User License Agreement > Next > Next > STOP!!

!!! IMPORTANT !!! : UNCHECK: Windows Firewall
Otherwise Avira umbrella will integrate with Windows Firewall ON/OFF switch and will be closed even if you are using better third party Firewalls like Comodo Firewall instead of Windows Firewall.
In other words, if you don't UNCHECK: Windows Firewall, you will have to permanently keep Windows Firewall ON for Avira umbrella to be open, even if you use other, better firewalls.
After installation, C:\Program Files (x86)\Avira\AntiVir Desktop\setup.exe controls adding/removing Avira options like Firewall.

Decide if Mail Protection and Web Protection is needed. The program will still auto detect any malware on the system even if Mail Protection and Web Protection are UNCHECKED, so these depend on where Avira is being installed.

CHECK: Confirm manually when sending suspicious files to Avira > Next > Next


Welcome to the Configuration Wizard > Next > Next > Next > Next >
Next > Next > STOP!!

Allow the configuration wizard to keep the default Extended Threat Categories options. [Do NOT Select All.]
Once again: *DO NOT SELECT ALL* here.
(LEAVE UNCHECKED: Application, Games, Jokes, Programs that violate the private domain) > Next >

UNCHECK: Performs a quick system scan after the installation > Next > Finish

Run program update, reboot if prompted. Wait for update to install.


Start Avira >
System Scanner (upper left) > Configuration (upper right) >

Always keep this UNCHECKED: Follow symbolic links (on right)

> [under PC Protection] General > Security >
Disable being notified every time USB drive has an AUTORUN.INF file:
UNCHECK: Block autorun function
> General > Events > Select: Limit size to max. >
> General > Reports > Select: Limit number to max. >
> General > Warnings > UNCHECK Show notice if the virus definition file is out of date

> Apply > First click on OK then > Scheduler [on lower left] > UNCHECK everything.


> System Scanner > Scan > Action on detection >
Set for Automatic, Primary action: Ignore [if you want to just scan folders and get a scan report without deleting files or being prompted what to do if virii/malware are found.]


Set Avira Free Antivirus to Always show in Windows Taskbar.


Also block this Avira messaging popup nag file from accessing the internet, using Comodo Firewall or similar software:
C:\Program Files (x86)\Avira\AntiVir Desktop\ipmgui.exe
or
C:\Program Files\Avira\AntiVir Desktop\ipmgui.exe


To disable Notifier nag screen: Control Panel > View by Category > System and Security first > Administrative Tools [fourth from bottom] > Security Configuration Management or Local Security Policy > Right click on Software Restriction Policies > New Software Restriction Policies SO THAT ADDITIONAL RULES SHOWS UP UNDERNEATH > Right click on Additional Rules > New Path Rule... > Browse... to the path of avnotify.exe default is
C:\Program Files (x86)\Avira\Antivirus\avnotify.exe
or
C:\Program Files\Avira\Antivirus\avnotify.exe

> OK > Set the security level to Disallowed > OK


For Windows Home or non-Professional versions, you must reboot into Safe Mode, log in as Administrator, then
go to
C:\Program Files (x86)\Avira\AntiVir Desktop\avnotify.exe
and right click on it >
Properties > Security TAB >
[Under Group or usernames] SYSTEM > Edit button > CHECK: Deny for Read & execute > Apply > Yes > OK > OK

Make sure SYSTEM is set to Deny for Read & execute before rebooting.

[Security TAB will only show up on NTFS formatted drives, not FAT32 drives.]

To boot into Safe Mode: Start Menu > Run... > MSCONFIG > Boot TAB >
CHECK: Safe boot > OK
When you finish with Safe Mode, be sure to UNCHECK: Safe boot so you don't reboot into Safe Mode again.


To submit a suspected virus, go to
http://analysis.avira.com/samples/
to upload it.


You can scan multiple drives inside program options: Local Protection > Scanner > CHECK drives you wish to scan. The premium version also offers the option to scan multiple folders here. The free version does not.


Subscription to new virus definitions for this program is renewed automatically when you right click on Avira icon in the task bar > Start update

or download the latest key file from:
http://personal.avira-update.com/package/peclkey/win32/int/hbedv.key

and either copy it to
C:\Program Files (x86)\Avira\AntiVir Desktop
and restart or go to Help > License management > click on the blue License file link > browse to the new downloaded hbedv.key > Open.



In case of error message:

The procedure entry point ?_Xbad@tr1@std@@YAX4error_type@regex_constants@12@@Z could not be located in the dynamic link library MSVCP90.dll

download and install Microsoft Visual C++ 2008 SP1 Redistributable Package
http://www.microsoft.com/downloads/...FamilyID=a5c84275-3b97-4ab7-a40d-3802b2af5fc2


Manual updates can be downloaded from:
http://dl.antivir.de/down/vdf/ivdf_fusebundle_nt_en.zip
Unzip the downloaded file and copy all the contents to
C:\Program Files\Avira\AntiVir Desktop


Using two Antivirus programs at the same time:
It is *not* a good idea to use two Antivirus programs at the same time, they will conflict with each other and most likely cause problems, unless you disable one of them from being active on the system.


Default log file location is
%PROGRAMDATA%\Avira\AntiVir Desktop\LOGFILES

%PROGRAMDATA% stands for
C:\ProgramData\

Epic post.