ESET NOD32 ANTIVIRUS - FOR KERIO Manuale utente

ESET NOD32 Antivirus 4

Business Edition for Mac OS X

Installation Manual and User Guide

ESETNOD32 Antivirus 4

ESET NOD32 Antivirus was developed by ESET, spol. s r.o.

For more information visit www.eset.com.

stored in a retrieval system or transmitted in any form or by any means,

electronic, mechanical, photocopying, recording, scanning, or

otherwise without permission in writing from the author.

ESET, spol. s r.o. reserves the right to change any of the described

application software without prior notice.

Customer Care Worldwide: www.eset.eu/support

Customer Care North America: www.eset.com/support

REV. 2.12.2010

Contents

.................................................41. ESET NOD32 Antivirus

.................................................................4System requirements1.1

.................................................52. Installation

.................................................................5Typical installation2.1

.................................................................5Custom installation2.2

.................................................................6Remote installation2.3

.............................................................................6Creating remote installation package2.3.1

.............................................................................7Remote installation on target computers2.3.2

.............................................................................7Remote uninstallation2.3.3

.............................................................................7Remote upgrade2.3.4

.................................................................7Entering Username and password2.4

.................................................................7On-demand computer scan2.5

.................................................83. Beginners guide

.................................................................8Introducing user interface design - modes3.1

.............................................................................8Checking operation of the system3.1.1

.............................................................................8What to do if the program doesn't work properly3.1.2

.................................................104. Work with ESET NOD32 Antivirus

.................................................................10Antivirus and antispyware protection4.1

.............................................................................10Real-time file system protection4.1.1

.............................................................................10Real-time Protection setup4.1.1.1

...........................................................................10Scan on (Event triggered scanning)4.1.1.1.1

...........................................................................10Advanced scan options4.1.1.1.2

...........................................................................10Exclusions from scanning4.1.1.1.3

.............................................................................11

When to modify Real-time protection

configuration

4.1.1.2

.............................................................................11Checking Real-time protection4.1.1.3

.............................................................................11

What to do if Real-time protection does not

work

4.1.1.4

.............................................................................11On-demand computer scan4.1.2

.............................................................................12Type of scan4.1.2.1

...........................................................................12Smart scan4.1.2.1.1

...........................................................................12Custom scan4.1.2.1.2

.............................................................................12Scan targets4.1.2.2

.............................................................................12Scan profiles4.1.2.3

.............................................................................13ThreatSense engine parameters setup4.1.3

.............................................................................13Objects4.1.3.1

.............................................................................13Options4.1.3.2

.............................................................................14Cleaning4.1.3.3

.............................................................................14Extensions4.1.3.4

.............................................................................14Limits4.1.3.5

.............................................................................14Others4.1.3.6

.............................................................................15An infiltration is detected4.1.4

.................................................................15Updating the program4.2

.............................................................................15Upgrading to a new build4.2.1

.............................................................................16Update setup4.2.2

.............................................................................16How to create update tasks4.2.3

.................................................................17Scheduler4.3

.............................................................................17Purpose of scheduling tasks4.3.1

.............................................................................17Creating new tasks4.3.2

.................................................................18Quarantine4.4

.............................................................................18Quarantining files4.4.1

.............................................................................18Restoring from Quarantine4.4.2

.............................................................................18Submitting file from Quarantine4.4.3

.................................................................18Log files4.5

.............................................................................18Log maintenance4.5.1

.............................................................................19Log filtering4.5.2

.................................................................19User interface4.6

.............................................................................19Alerts and notifications4.6.1

.............................................................................19Alerts and notifications advanced setup4.6.1.1

.............................................................................19Privileges4.6.2

.............................................................................20Context menu4.6.3

.................................................................20ThreatSense.Net4.7

.............................................................................20Suspicious files4.7.1

.................................................225. Advanced user

.................................................................22Import and export settings5.1

.............................................................................22Import settings5.1.1

.............................................................................22Export settings5.1.2

.................................................................22Proxy server setup5.2

.................................................................22Removable media blocking5.3

.................................................................22Remote administration5.4

.................................................246. Glossary

.................................................................24Types of infiltrations6.1

.............................................................................24Viruses6.1.1

.............................................................................24Worms6.1.2

.............................................................................24Trojan horses6.1.3

.............................................................................25Adware6.1.4

.............................................................................25Spyware6.1.5

.............................................................................25Potentially unsafe applications6.1.6

.............................................................................25Potentially unwanted applications6.1.7

1. ESET NOD32 Antivirus

As a result of the increasing popularity of Unix-based

operating systems, malware users are developing

more threats to target Mac users. ESET NOD32

Antivirus offers powerful and efficient protection

against threats. ESET NOD32 Antivirus includes the

ability to deflect Windows threats, protecting Mac

users as they interact with Windows users and vice

versa. Although Windows malware does not pose a

direct threat to Mac, disabling malware that has

infected a Mac machine will prevent its spread to

Windows-based computers through a local network or

the Internet.

1.1 System requirements

For the seamless operation of ESET NOD32 Antivirus,

your system should meet the following hardware and

software requirements:

ESET NOD32 Antivirus:

System requirements

Processor architecture

32bit, 64bit Intel®

Operating system

Mac OS X 10.5 and later

Memory

512 MB

Free disk space

100 MB

2. Installation

Before you begin the installation process, please close

all open programs on your computer. ESET NOD32

Antivirus contains components that may conflict with

other antivirus programs that may already be installed

on your computer. ESET strongly recommends that

you remove any other program to prevent potential

problems. You can install ESET NOD32 Antivirus from

an installation CD or from a file available on the ESET

website.

To launch the installer wizard, do one of the following:

If you are installing from the installation CD, insert

the CD into the CD-ROM drive. Double-click on the

ESET NOD32 Antivirus installation icon to launch the

installer.

If you are installing from a downloaded file, double-

click the file you downloaded to launch the installer.

Launch the installer and the installation wizard will

guide you through the basic setup. After agreeing to

the End User License Agreement, you can choose from

the following installation types:

Typical installation

Custom installation

Remote installation

2.1 Typical installation

Typical installation includes the configuration options

that are appropriate for most users. The settings

provide maximum security combined with excellent

system performance. Typical installation is the default

option and is recommended if you do not have

particular requirements for specific settings.

After selecting Typical (recommended) installation

mode, you will be prompted to enter your username

and password to enable automatic updates of the

program. This plays a significant role in providing

constant protection of your system. Enter your

Username and Password (the authentication data

you received after purchase or registration of your

product) into the corresponding fields. If you do not

currently have your username and password available,

you can select the Set update parameters later

option to continue your installation.

The ThreatSense.Net Early Warning System helps

ensure that ESET is immediately and continuously

informed of new infiltrations in order to quickly

protect our customers. The system allows for

submission of new threats to ESET Threat Lab, where

they are analyzed, processed and added to the virus

signature database. By default, the Enable

ThreatSense.Net Early Warning System option is

selected. Click Setup... to modify detailed settings for

the submission of suspicious files. (For more

information see ThreatSense.Net ).

The next step in the installation process is to configure

Detection of potentially unwanted applications.

Potentially unwanted applications are not necessarily

malicious, but can often negatively affect the behavior

of your operating system. These applications are often

bundled with other programs and may be difficult to

notice during the installation process. Although these

applications usually display a notification during

installation, they can easily be installed without your

consent. Select the Enable detection of potentially

unwanted applications option to allow ESET NOD32

Antivirus to detect this type of threat (recommended).

If you do not wish to Enable this feature, select the

Disable detection of potentially unwanted

applications option.

The final step in Typical installation mode is to confirm

installation by clicking the Install button.

2.2 Custom installation

Custom installation is designed for experienced users

who wish to modify advanced settings during the

installation process.

After selecting the Custom installation mode, you will

need to enter your Username and Password (the

authentication data you received after purchase or

registration of your product) into the corresponding

fields. If you do not currently have your username and

password available, you can select the Set update

parameters later option to continue your installation.

You may enter your username and password at a later

time.

If you are using a proxy server you can define its

parameters now by selecting the I use a proxy server

option. Enter the IP address or URL of your proxy

server in the Address field. In the Port field, specify the

port where the proxy server accepts connections (3128

by default). In the event that the proxy server requires

authentication, enter a valid Username and Password

to grant access to the proxy server. If you are sure that

no proxy server is used, choose the I do not use a

proxy server option.If you are not sure, you can use

your current system settings by selecting Use system

settings (Recommended).

If your ESET NOD32 Antivirus will be administered by

the ESET Remote Administrator (ERA), you can set the

ERA Server parameters (server name, port and

password) to automatically connect your ESET NOD32

Antivirus to the ERA Server after the installation.

In the next step you can Define privileged users that

will be able to edit the program configuration. From

the list of users on the left side, select the users and

Add them to the Privileged Users list. To display all

system users, select the Show all users option.

The ThreatSense.Net Early Warning System helps

ensure that ESET is immediately and continuously

informed of new infiltrations in order to quickly

protect our customers. The system allows for

submission of new threats to ESET Threat Lab, where

they are analyzed, processed and added to the virus

signature database. By default, the Enable

ThreatSense.Net Early Warning System option is

selected. Click Setup... to modify detailed settings for

the submission of suspicious files. For more

information see ThreatSense.Net .

The next step in the installation process is to configure

detection of potentially unwanted applications.

Potentially unwanted applications are not necessarily

malicious, but can often negatively affect the behavior

of your operating system. These applications are often

bundled with other programs and may be difficult to

notice during the installation process. Although these

applications usually display a notification during

installation, they can easily be installed without your

consent. Select the Enable detection of potentially

unwanted applications option to allow ESET NOD32

Antivirus to detect this type of threat (recommended).

Click Install to install ESET NOD32 Antivirus on

standard Macintosh HD disk. If you wish to select

another disk, click Change Install Location...

2.3 Remote installation

Remote installlation allows you to create an

installation package that can be installed on target

computers using remote desktop software. ESET

NOD32 Antivirus can then be managed remotely via

ESET Remote Administrator.

Remote installation is done in two phases:

1. Creating remote installation package by ESET

installer

2. Remote installation using remote desktop software

2.3.1 Creating remote installation package

After selecting Remote installation mode, you will be

prompted to enter your username and password to

enable automatic updates of ESET NOD32 Antivirus.

Enter your Username and Password (the

authentication data you received after purchase or

registration of your product) into the corresponding

fields. If you do not currently have your username and

password available, you can select the Set update

parameters later option to continue your installation.

You can enter your username and password directly

into the program at a later time.

The next step is configuration of your internet

connection. If you are using a proxy server you can

define its parameters now by selecting the I use a

proxy server option. If you are sure that no proxy

server is used, you can choose the I do not use a proxy

server option. If you are not sure, you can use your

current system settings by selecting Use system

settings.

Set the ERA Server parameters (server name, port and

password) to automatically connect your ESET NOD32

Antivirus to the ERA Server after the installation.

In the next step you can Define privileged users that

will be able to edit the program configuration. From

the list of users on the left side, select the users and

Add them to the Privileged Users list. To display all

system users, select the Show all users option.

The ThreatSense.Net Early Warning System helps

ensure that ESET is immediately and continuously

informed of new infiltrations in order to quickly

protect our customers. The system allows for

submission of new threats to ESET Threat Lab, where

they are analyzed, processed and added to the virus

signature database. By default, the Enable

ThreatSense.Net Early Warning System option is

selected. Click Setup... to modify detailed settings for

the submission of suspicious files. For more

information see ThreatSense.Net .

The next step in the installation process is to configure

Detection of potentially unwanted applications.

Potentially unwanted applications are not necessarily

malicious, but can often negatively affect the behavior

of your operating system. These applications are often

bundled with other programs and may be difficult to

notice during the installation process. Although these

applications usually display a notification during

installation, they can easily be installed without your

consent. Select the Enable detection of potentially

unwanted applications option to allow ESET NOD32

Antivirus to detect this type of threat (recommended).

In the last step of the installation wizard choose a

destination folder and click Save. ESET installer will

create the installation package (EAV4_Remote_Install.

pkg) and the uninstallation shell script

(EAV4_Remote_UnInstall.sh).

2.3.2 Remote installation on target computers

ESET NOD32 Antivirus can be installed on target

computers using the Apple Remote Desktop or any

other tool that supports installation of standard Mac

packages (.pkg), copying the files and running shell

scripts on target computers.

To install ESET NOD32 Antivirus using Apple Remote

Desktop, run the Install packages… command, locate

the EAV4_Remote_Install.pkg file and click Install.

For a detailed instructions on how to administer client

computers using ESET Remote Administrator please

refer to the ESET Remote Administrator User Guide.

2.3.3 Remote uninstallation

To uninstall ESET NOD32 Antivirus from client

computers:

1. use the Copy Items… command in Apple Remote

Desktop, locate the uninstallation shell script

(EAV4_Remote_UnInstall.sh - created along with the

installation package) and copy the shell script to

target computers.

2. run the Send Unix Command… in Apple Remote

Desktop. After succesful uninstallation, a console

log will be shown.

2.3.4 Remote upgrade

Remote upgrade of ESET NOD32 Antivirus is made by

Install packages… command in Apple Remote

Desktop.

NOTE: Settings saved in the ESET remote install

package are not applied to target computers during

the upgrade process. ESET Remote Administrator

should be used to remotely configure ESET NOD32

Antivirus after the upgrade.

2.4 Entering Username and password

For optimal functionality, it is important to set the

program to automatically download virus signature

database updates. This is only possible if the correct

Username and Password are entered in the Update

setup .

2.5 On-demand computer scan

After installing ESET NOD32 Antivirus, a computer

scan for malicious code should be performed. From the

main program window, click Computer scan and then

click Smart scan. For more information about On-

demand computer scans, see the section On-demand

computer scan .

3. Beginners guide

This chapter provides an initial overview of ESET

NOD32 Antivirus and its basic settings.

3.1 Introducing user interface design -

modes

The main program window of ESET NOD32 Antivirus is

divided into two main sections. The primary window

on the right displays information that corresponds to

the option selected from the main menu on the left.

The following is a description of options within the

main menu:

Protection status – Provides information about the

protection status of ESET NOD32 Antivirus. If

Advanced mode is activated, the Statistics

submenu will display.

Computer scan – This option allows you to

configure and launch the On-demand computer

scan.

Update – Displays information about updates to the

virus signature database.

Setup – Select this option to adjust your computer’s

security level. If Advanced mode is activated, the

Antivirus and antispyware submenu will display.

Tools – Provides access to Log files, Quarantine and

Scheduler. This option only displays in Advanced

mode.

Help – Provides program information, access to help

files, Internet Knowledgebase and ESET website.

The ESET NOD32 Antivirus user interface allows users

to toggle between Standard and Advanced mode.

Standard mode provides access to features required

for common operations. It does not display any

advanced options. To toggle between modes, click the

plus icon next to Activate advanced mode/Activate

standard mode in the bottom left corner of the main

program window.

The Standard mode provides access to features

required for common operations. It does not display

any advanced options.

Toggling to Advanced mode adds the Tools option to

the main menu. The Tools option allows you to access

the submenus for Log files, Quarantine and

Scheduler.

NOTE: All remaining instructions in this guide take

place in Advanced mode.

Standard mode:

Advanced mode:

3.1.1 Checking operation of the system

To view the Protection status, click the top option

from the main menu. A status summary about the

operation of ESET NOD32 Antivirus will display in the

primary window as well as a submenu with Statistics.

Select it to view more detailed information and

statistics about computer scans that have been

performed on your system. The Statistics window is

available only in advanced mode.

3.1.2 What to do if the program doesn't work

properly

If the modules enabled are working properly, they are

assigned a green check icon. If not, a red exclamation

point or orange notification icon is displayed, and

additional information about the module is shown in

the upper part of the window. A suggested solution for

fixing the module is also displayed. To change the

status of individual modules, click Setup in the main

menu and click on the desired module.

If you are unable to solve a problem using the

suggested solutions, click Help to access the help files

or search the Knowledgebase.

If you need assistance, you can contact ESET Customer

Care support on the ESET website. ESET Customer

Care will respond quickly to your questions and help

determine a resolution.

4. Work with ESET NOD32

Antivirus

4.1 Antivirus and antispyware protection

Antivirus protection guards against malicious system

attacks by modifying files that pose potential threats.

If a threat with malicious code is detected, the

Antivirus module can eliminate it by blocking it and

then cleaning it, deleting it or moving it to quarantine.

4.1.1 Real-time file system protection

Real-time file system protection controls all antivirus-

related events in the system. All files are scanned for

malicious code when they are opened, created or run

on your computer. Real-time file system protection is

launched at system startup.

4.1.1.1 Real-time Protection setup

Real-time file system protection checks all types of

media and the scan is triggered by various events.

Using ThreatSense technology detection methods

(described in the section titled ThreatSense engine

parameter setup ), Real-time file system protection

may vary for newly created files and existing files. For

newly created files, it is possible to apply a deeper level

of control.

By default, Real-time protection launches at system

startup and provides uninterrupted scanning. In

special cases (e.g., if there is a conflict with another

Real-time scanner), Real-time protection can be

terminated by clicking the ESET NOD32 Antivirus icon

located in your menu bar (top of the screen) and then

selecting the Disable Real-time File System

Protection option. Real-time protection can also be

terminated from the main program window (Setup >

Antivirus and Antispyware > Disable).

To modify advanced settings of the Real-time

protection, go to Setup > Enter application

preferences ... > Protection > Real-Time Protection

and click the Setup... button next to Advanced

Options (described in the section titled Advanced scan

options ).

4.1.1.1.1 Scan on (Event triggered scanning)

By default, all files are scanned upon File opening, File

creation or File execution. We recommend that you

keep the default settings, as these provide the

maximum level of Real-time protection for your

computer.

4.1.1.1.2 Advanced scan options

In this window you can define object types to be

scanned by the ThreatSense engine and enable/

disable Advanced heuristics as well as modify

settings for archives and file cache.

We do not recommend changing the default values in

the Default archives settings section unless needed

to resolve a specific issue, as higher archive nesting

values can impede system performance.

You can toggle ThreatSense Advanced heuristics

scanning for executed files as well as for created and

modified files separately by clicking the Advanced

heuristics checkbox in each of the respective

ThreatSense parameters sections.

To provide the minimum system footprint when using

Real-time protection, you can define the size of the

optimization cache. This behavior is active when you

are using the Enable clean file cache option. If this is

disabled, all files are scanned each time they are

accessed. Files will not be scanned repeatedly after

being cached (unless they have been modified), up to

the defined size of the cache. Files are scanned again

immediately after each virus signature database

update.

Click Enable clean file cache to enable/disable this

function. To set the amount of files to be cached

simply enter the desired value in the input field next to

Cache size.

Additional scanning parameters can be set in the

ThreatSense Engine Setup window. You can define

what type of Objects should be scanned, using which

Options and Cleaning level, as well as defining

Extensions and file-size Limits for Real-time file

system protection. You can enter the ThreatSense

engine setup window by clicking the Setup... button

next to ThreatSense Engine in the Advanced Setup

window. For more detailed information about

ThreatSense engine parameters see ThreatSense

engine parameter setup .

4.1.1.1.3 Exclusions from scanning

This section enables you to exclude certain files and

folders from scanning.

Path - path to excluded files and folders

Threat - if there is a name of a threat next to an

excluded file, it means that the file is only excluded

for the given threat, but not completely. Therefore,

if that file becomes infected later with other

malware, it will be detected by the antivirus module.

Altri manuali per NOD32 ANTIVIRUS - FOR KERIO

Indice

Altri manuali ESET Software

ESET

ESET NOD32 ANTIVIRUS - FOR KERIO Manuale utente

ESET

ESET MOBILE SECURITY - FOR SYMBIAN Manuale utente

ESET

ESET REMOTE ADMINISTRATOR - ANNEXE 636 Manuale utente

ESET

ESET SMART SECURITY 4 Manuale utente

ESET

ESET NOD32 ANTIVIRUS - FOR KERIO Manuale utente

ESET

ESET MOBILE SECURITY - ANNEXE 706 SYMBIAN Manuale utente

ESET

ESET NOD32 ANTIVIRUS - FOR KERIO Manuale utente

ESET

ESET REMOTE ADMINISTRATOR V1 Guida all'installazione

ESET

ESET REMOTE ADMINISTRATOR V1 Manuale utente

ESET

ESET GATEWAY SECURITY Manuale utente

ESET

ESET NOD32 ANTIVIRUS - FOR LINUX MAIL SERVERS Manuale utente

ESET

ESET NOD32 ANTIVIRUS - FOR KERIO Manuale utente

ESET

ESET MAIL SECURITY - FOR LINUX BSD AND SOLARIS Manuale utente

ESET

ESET MAIL SECURITY Manuale utente

ESET

ESET NOD32 ANTIVIRUS - FOR KERIO Manuale utente

ESET

ESET SMART SECURITY 4 Manuale utente

ESET

ESET PERSONAL FIREWALL Manuale utente

ESET

ESET REMOTE ADMINISTRATOR 4 Manuale utente

ESET

ESET NOD32 ANTIVIRUS - FOR KERIO Manuale utente

ESET

ESET NOD32 ANTIVIRUS - FOR KERIO Manuale utente

ESET

ESET NOD32 ANTIVIRUS - FOR MICROSOFT WINDOWS... Manuale utente

ESET

ESET SMART SECURITY 4 - V4.2 Guida rapida

ESET

ESET SMART SECURITY 4 Manuale utente

ESET

ESET NOD32 ANTIVIRUS - FOR DELL POWERVAULT NAS... Manuale utente

Manuali Software popolari di altre marche

COMPRO

COMPRO COMPROFM Manuale utente

Muratec

Muratec OFFICEBRIDGE ONLINE Manuale utente

Oracle

Oracle Contact Center Anywhere 8.1 Manuale utente

Adobe

Adobe 65007312 - Photoshop Lightroom Manuale

Avaya

Avaya NULL One-X for RIM Blackberry Manuale utente

HP ProLiant BL420c Manuale utente

PS Audio

PS Audio PowerPlay Manuale del proprietario

Brady

Brady LOCKOUT PRO 3.0 Manuale di servizio

Avaya

Avaya Interaction Center Manuale utente

Texas Instruments

Texas Instruments TI-83 Plus Silver Edition Manuale

Novell

Novell GROUPWISE 8 - INTERNET AGENT Manuale utente

Oracle

Oracle Application 9i Manuale utente

Acer

Acer RDM Manuale utente

Canon

Canon Vixia HF21 Manuale utente

Canon

Canon ZR950 Manuale utente

Samsung

Samsung Auto Backup Manuale utente

Polycom

Polycom Vortex EF2201 Istruzioni per l'installazione e il funzionamento

Brocade Communications Systems

Brocade Communications Systems Brocade 8/12c Manuale utente