What is Avira Real-Time protection and how can I configure it?

The Real-Time Protection is a permanently active process. Any file that is used, copied or accessed is scanned via this module in real-time. This prevents malware from executing; every execution of a file that triggered a detection is automatically blocked with a notice to the user.

In the Real Time protection configuration, you can set up what file types are scanned, if archives should be scanned too and in addition if network attached storages and drives should be monitored.

The Real Time protection is very detailed and can be customized completely to the users’ needs by simply clicking the F8 key from the main Avira Antivirus screen or going to Extras → Configuration.

Antivirus Pro - Extras - Configuration

You can choose what to scan in section Scan → Files (all files, only executables, user defined mixture) and you have also an influence on how many system resources are used to scan.

Antivirus pro - configuration - real time protection - scan files

The option Archives allows detailed configuration about the depth to be scanned:

Antivirus Pro - configuration - real time protection - archives

Drivers. Network monitoring means that all files sent to or received from a drive/storage within the local network are scanned. This might be an option to check if someone encountered a slow system with active Real-Time Protection because it may consume a high amount of system resources.

Antivirus Pro - Configuration - RT protection - Drivers

The sub category Action on detection allows preconfiguring what action should be taken if a detection occurs:

Antivirus Pro - Configuration - RT Protection - Action on detection

Interactive is the default value. This will lead to a window asking the user individually for every detection what should be done. You can either remove the file by deleting, movint it to quarantine, just renaming it or leaving as it is.

Automatic allows setting up a standard action and a second solution if the first given one is not working properly.


Further actions allows pushing events/notifications of the product into the standard “Windows Event Database”.


Note
This option can be used by administrators who are only tracking those logs to have short information about what the program detected/performed an action. The option is active by default. Disabling will not disable error messages regarding our products!



Antivirus Pro - Configuration - RT protection - Further actions

Exceptions also work similar to the on-demand scanner. In addition to excluding files/folders you are also allowed to exclude processes. Starting a program does not mean using every file, every time. The main part of the program is running as a so called “process”. As those processes may load files that may contain known false-positives, the user is aware of the risks. If they are huge in size and can cause a massive consumption of system resources, setting up an exception can be a solution here.

Antivirus Pro - Configuration - RT protection - Exceptions


Heuristic - It is possible to enable or disable heuristics for the on demand scanner only and what mode of heuristic detection is used.

This is possible for every component of the product, making it easier to fit the user needs.


Note
One needs maximum level of heuristics for web protection to prevent any possible infection while browsing but only uses email protection for “Phishing” detection.



Antivirus Pro - Configuration - RT Protection - Heuristic

Report - The logging has a small addition compared to our System-Scanner. It is possible to set up a maximum file size of this log file as all information about any action/detection/etc. of this module is continuously analyzed, causing the size to increase permanently.

Antivirus Pro - Configuration - RT protection  Report

Affected products

  • Avira Antivirus Pro [Windows]
  • Created : Friday, October 23, 2015
  • Last updated: Friday, October 23, 2015
Was this helpful?