CompuClever Antivirus Plus Help
Managing your security > Antivirus protection > On-access scanning (real-time protection) > Configuring the real time protection settings

Configuring the real time protection settings

Advanced users might want to take advantage of the scan settings CompuClever Antivirus Plus offers. You can configure the real-time protection settings in detail by creating a custom protection level.

To configure the real time protection settings, follow these steps:

  1. Open the CompuClever Antivirus Plus window.

  2. Access the Protection panel.

  3. Click the Antivirus module.

  4. In the Antivirus window, select the Shield tab.

  5. Click Custom.

  6. Configure the scan settings as needed.

  7. Click OK to save the changes and close the window.

Information on the scan options

You may find this information useful:

  • If you are not familiar with some of the terms, check them in the glossary. You can also find useful information by searching the Internet.

  • Scan options for accessed files.  You can set CompuClever Antivirus Plus to scan all accessed files or applications (program files) only. Scanning all accessed files provides best protection, while scanning applications only can be used for better system performance.

    By default, both local folders and network shares are subject to on-access scanning. For better system performance, you can exclude network locations from on-access scanning.

    Applications (or program files) are far more vulnerable to malware attacks than other types of files. This category includes the following file extensions:

    386; a6p; ac; accda; accdb; accdc; accde; accdp; accdr; accdt; accdu; acl; acr; action; ade; adp; air; app; as; asd; asp; awk; bas; bat; bin; cgi; chm; cla; class; cmd; cnv; com; cpl; csc; csh; dat; dek; dld; dll; doc; docm; docx; dot; dotm; dotx; drv; ds; ebm; esh; exe; ezs; fky; frs; fxp; gadget; grv; hlp; hms; hta; htm; html; iaf; icd; ini; inx; ipf; isu; jar; js; jse; jsx; kix; laccdb; lnk; maf; mam; maq; mar; mat; mcr; mda; mdb; mde; mdt; mdw; mem; mhtml; mpp; mpt; mpx; ms; msg; msi; msp; mst; msu; oab; obi; obs; ocx; oft; ole; one; onepkg; ost; ovl; pa; paf; pex; pfd; php; pif; pip; pot; potm; potx; ppa; ppam; pps; ppsm; ppsx; ppt; pptm; pptx; prc; prf; prg; pst; pub; puz; pvd; pwc; py; pyc; pyo; qpx; rbx; rgs; rox; rpj; rtf; scar; scr; script; sct; shb; shs; sldm; sldx; smm; snp; spr; svd; sys; thmx; tlb; tms; u3p; udf; url; vb; vbe; vbs; vbscript; vxd; wbk; wcm; wdm; wiz; wll; wpk; ws; wsf; xar; xl; xla; xlam; xlb; xlc; xll; xlm; xls; xlsb; xlsm; xlsx; xlt; xltm; xltx; xlw; xml; xqt; xsf; xsn; xtp

  • Scan inside archives.  Scanning inside archives is a slow and resource-intensive process, which is therefore not recommended for real-time protection. Archives containing infected files are not an immediate threat to the security of your system. The malware can affect your system only if the infected file is extracted from the archive and executed without having real-time protection enabled.

    If you decide on using this option, you can set a maximum accepted size limit of archives to be scanned on-access. Select the corresponding check box and type the maximum archive size (in MB).

  • Scan options for e-mail and web.  To prevent malware from being downloaded to your computer, CompuClever Antivirus Plus automatically scans the following malware entry points:

    • incoming and outgoing e-mails

    • web traffic

    Scanning the web traffic may slow down web browsing a little, but it will block malware coming from the Internet, including drive-by downloads.

    Though not recommended, you can disable e-mail or web antivirus scan to increase system performance. If you disable the corresponding scan options, the e-mails and files received or downloaded from the Internet will not be scanned, thus allowing infected files to be saved to your computer. This is not a major threat because real-time protection will block the malware when the infected files are accessed (opened, moved, copied or executed).

  • Scan boot sectors.  You can set CompuClever Antivirus Plus to scan the boot sectors of your hard disk. This sector of the hard disk contains the necessary computer code to start the boot process. When a virus infects the boot sector, the drive may become inaccessible and you may not be able to start your system and access your data.

  • Scan only new and changed files.  By scanning only new and changed files, you may greatly improve overall system responsiveness with a minimum trade-off in security.

  • Scan for keyloggers.  Select this option to scan your system for keylogger applications. Keyloggers record what you type on your keyboard and send reports over the Internet to a malicious person (hacker). The hacker can find out sensitive information from the stolen data, such as bank account numbers and passwords, and use it to gain personal benefits.

Actions taken on detected malware

You can configure the actions taken by the real-time protection.

To configure the actions, follow these steps:

  1. Open the CompuClever Antivirus Plus window.

  2. Access the Protection panel.

  3. Click the Antivirus module.

  4. In the Antivirus window, select the Shield tab.

  5. Click Custom.

  6. Configure the scan settings as needed.

  7. Click OK to save the changes and close the window.

The following actions can be taken by the real time protection in CompuClever Antivirus Plus:

Take proper actions

CompuClever Antivirus Plus will take the recommended actions depending on the type of detected file:

  • Infected files.  Files detected as infected match a malware signature in the CompuClever Antivirus Plus Malware Signature Database. CompuClever Antivirus Plus will automatically attempt to remove the malware code from the infected file and reconstruct the original file. This operation is referred to as disinfection.

    Files that cannot be disinfected are moved to quarantine in order to contain the infection. Quarantined files cannot be executed or opened; therefore, the risk of getting infected disappears. For more information, please refer to “Managing quarantined files”.

    [Important] Important

    For particular types of malware, disinfection is not possible because the detected file is entirely malicious. In such cases, the infected file is deleted from the disk.

  • Suspicious files.  Files are detected as suspicious by the heuristic analysis. Suspicious files cannot be disinfected, because no disinfection routine is available. They will be moved to quarantine to prevent a potential infection.

    By default, quarantined files are automatically sent to CompuClever Labs in order to be analyzed by the CompuClever malware researchers. If malware presence is confirmed, a signature is released to allow removing the malware.

  • Archives containing infected files. 

    • Archives that contain only infected files are deleted automatically.

    • If an archive contains both infected and clean files, CompuClever Antivirus Plus will attempt to delete the infected files provided it can reconstruct the archive with the clean files. If archive reconstruction is not possible, you will be informed that no action can be taken so as to avoid losing clean files.

Move files to quarantine

Moves detected files to quarantine. Quarantined files cannot be executed or opened; therefore, the risk of getting infected disappears. For more information, please refer to “Managing quarantined files”.

Deny access

In case an infected file is detected, the access to this will be denied.