Introduction

AntiViral Toolkit Pro Monitor

AntiViral Toolkit Pro Monitor is a complete virus protection application to protect your computer from viruses, trojan horse programs and other malicious applications in real time as you use your computer.

AVP Monitor is a trademark of Kaspersky Lab, Russia. AVP Monitor is copyright Kaspersky Lab, Russia and portions  are copyright Data Fellows, Finland.


Operation

Once your computer is restarted after installation of AntiViral Toolkit Pro the AVP Monitor will start and be loaded into your computers active memory. You will also, see a icon in the system tray

Clicking on the AVP Monitor icon with the right mouse button displays the context menu, which provides basic commands for controlling the program.

Disable/Enable monitoring

This selection makes it possible to disable or enable the AVP Monitor.  When the AVP Monitor is disabled, checking for viruses will not occur. The red strip on the AVP Monitor icon becomes dark to indicate that it has been disabled.

AVP monitor configuration

Choosing this selection opens the configuration window of the AVP Monitor.

Exit

Choosing this selection exits  and closes the AVP Monitor and unloads AVP Monitor from memory.


General configuration
AVP Monitor

The opening screen of the AVP Monitor contains 5 configuration pages to configure the various virus detection options.

Enable monitoring

This option can disable the virus detection but keep the AVP Monitor active temporarily.

Update

Starts the AVP Update application to download new virus databases and program upgrades.

Scan local hard drives

AVP Monitor can virus search all local hard disks for virus infections.


The Tabs


General
AVP Monitor

The opening screen of the AVP Monitor contains 5 configuration pages to configure the various virus detection options.

Enable monitoring

This option can disable the virus detection but keep the AVP Monitor active temporarily.

Update

Starts the AVP Update application to download new virus databases and program upgrades.

Scan local hard drives

AVP Monitor can virus search all local hard disks for virus infections.


Detection

Smart

This option enables AVP Monitor to virus search for known viruses in all files on your computer ignoring the file extension. This is not the same as "All files." This option enables a specialized analysis phase to examine the file contents and structure and determines which files to process and which to ignore.

Programs

This option will enable virus searching within executable programs ans associated external applications.

All files

This option enables virus searching all files regardless of the type or contents.

User defined extensions

This option allows the user to select which file extension to virus search.

Open compressed programs

This option will detect viruses that are stored in files (programs) that are compressed using one of the following utilities by software developers to shrink the size of there original applications to conserve disk space or protect the application from modification. Currently supported formats are:

DIET, AVPACK, COM2COM, COMPAK, CRYPT, EXE2COM, EXEPACK, LZEXE, PGMPAK, PKLITE, PROTECT 1.0, PROTECT 2.0, PROTECT 3.0, PROTECT 4.0, PROTECT 5.0, SCRNCH, UCEXE, WWPACK, MSCAN-VAC, PE-CRYPT, PE-SHIELD, ARF, AVL, CPAV, CRUNCH, SCRAMBLER, CRYPTCOM, CRYPTCOM-B,  FX-LOCK,  FILESHIELD, DROPPER-A, DROPPER-B, DROPPER-C, DROPPER-D, CRYPTGENERIC, COM2EXE

Open archives

This option will detect viruses that are stored in application archives. Currently supported formats are:

ARJ, GZIP, LHA, RAR, ZIP

Open E-Mail databases

This option will detect viruses that are stored in E-mail application databases. Currently supported E-mail application databases are: Microsoft Outlook, Exchange  and Microsoft Internet Mail, Eudora Pro and Lite, Pegasus Mail, Netscape Navigator Mail, JSMail SMTP/POP3 server

Open plain E-Mail

This option will detect viruses that are stored in plain MIME E-mail messages that are stored on your drive. Currently supported encoding formats are:

UUEncode (both formats and all variants)

XXEncode

btoa (up to 5.0 - no Filename)

btoa 5.*

BinHex 4.0

ship

NETRUN 3.10

NETSEND 1.0 (not packed)

NETSEND 1.0C (packed)

MIME base 64


Response

Deny access

Do not allow any infected file, program or document to be started or opened.

Disinfect automatically

Detect and removal known virus infections.

Delete automatically

Delete all infected files, programs and documents that contain malicious instructions.

Note: Do not enable this option unless you are certain that critical applications or critical operating system components will not be automatically deleted. Always attempt to use the disinfect option.

Pop up alert message box

Enable a message box to appear when malicious instructions are found.


Options

Enable warnings

This option enables the detection of unusual situations that may indicate a new previosuly unknown virus or trojan. Additionally, this option when enabled will identify modified variants of existing viruses.

Enable unknown virus detection

This option enables the detection of previosuly unknown viruses using a powerful analysis engine within AVP Monitor. This engine traces the algorithm branches of a program looking for instructions that are likely to be a virus or trojan horse instructions.

Report file

Create a report file of all virus detection and removal activities.

Limit size of report file

Limit the size of the report file.


Statistics

Searched

Total objects (programs, documents, boot sectors) virus searched

Infected

Total objects that are found to be containing malicious instructions.

Warnings

Total system warnings found.

Suspicious

Total suspicious objects found that possibly contain new previously unknown malicious instructions.

Disinfected

Total virus that were detected and disinfected from the system.

Deleted

Total malicious programs that were detected and deleted.

Last virus infection found

Last malicious program found in the system.

Last item searched

Last object (program, document, boot sector) virus searched.


Command line options

Command line

Syntax:

AVPM.EXE /q

/q

Disable the removal of AVP Monitor, and all configuration changes