The following CIS bug and missing features motivated me to use the free Avira for manual scanning:
Download free Avira here:
My goal is to prevent Avira from using resources under normal conditions - only using resources when I perform a manual scan every week. The paid versions take extra resources, and this thread explains why the extra features don’t improve security:
The following are ideas to minimize resources when real-time and scheduled scanning are not needed:
- Install Avira using the custom installation option, uncheck Guard (disables the Avira Antivir Guard service).
- Install Autoruns (http://technet.microsoft.com/en-us/sysinternals/bb963902.aspx), uncheck avgnt.exe on the Logon tab
- Use the installed desktop shortcut for avcenter.exe to configure, update or begin an on-demand scan.
- In Avira Antivir Control Center|Administration|Scheduler, uncheck the Daily Update schedule (manually update before running a scan).
- The Avira AntiVir Scheduler (sched.exe) service must be started before running avcenter.exe for updates to work.
- Start|Run|services.msc|right-click Avira AntiVir Scheduler|Properties|Startup type=Manual|Apply|OK
- Use Notepad to create avcenter_start_service.bat, in the same folder as avcenter.exe, containing:
sc start AntiVirSchedulerService
- Create a desktop shortcut to avcenter_start_service.bat, using the icon for avcenter.exe.
- Put the shortcut on the administrator account desktop since the sc command does not work on a limited account.
- Restart Windows to stop the Avira AntiVir Scheduler service (“sc stop” would fail on this service).
To block the nag screen:
A. Follow instructions at http://www.ehow.com/how_7267224_disable-avira-notifier.html
Note: PCs with a SRP for limited/standard users should follow the instructions for Windows Home.
B. Use Defense+ in CIS as follows:
Comodo Internet Security|Defense+ tab|Advanced|Computer Security Policy|
double-click “C:\Program Files\Avira\AntiVir Desktop\update.exe”|click “Access Rights”|
click Modify next to “Run an executable”|Blocked Applications tab|
Add and Browse for “C:\Program Files\Avira\AntiVir Desktop\avnotify.exe”|
Remove same from Allowed Applications if it exists|Repeatedly click Apply
How to avoid having personal configurations ignored (summary of info from forum members and my own experiments):
The “Local protection” menu on the left brings up the profiles. Right-click on one to start a scan of this type.
Profile files are standard text files and have an avp extension.
Standard fixed profiles are in C:\Program Files\Avira\AntiVir Desktop
In Windows XP, user profiles are in C:\Documents and Settings\All Users\Application Data\Avira\AntiVir Desktop\PROFILES
In Windows Vista, user profiles are in C:\ProgramData\Avira\Antivir Desktop\Profiles
Profiles for “Manual Selection” and “Rootkit search” are stored in the user profile directory because they contain profile user menu settings.
Note that the “Manual Selection” profile right-click menu has an extra “File filter” item, where “Scan all files” is not the default.
The “Scan system now” link on the status page uses the “Complete system scan” profile, with a filename of sysscan.avp.
“Complete system scan” and “Rootkit search” profiles override the user’s configuration settings with entries under [SCANNER] in their .avp file.
.avp files with SystemScan=1 under [CFG] will update the “Last complete system scan” date on the status page and provide a comforting green checkmark.
The “Local hard disks” and “Local drives” profiles do not override configuration settings and contain SystemScan=1, so they are recommended instead of “Complete system scan” for predictable behavior.
More info: http://forum.avira.com/wbb/index.php?page=Thread&threadID=91117