Poll

Do you really need a web shield?/Email scanner?

Yes.
No.
I don't know.

Author Topic: Do you really need a Webshield?/Email scanner?  (Read 79592 times)

Offline Kyle

  • Computer Security Testing Group
  • Comodo's Hero
  • *****
  • Posts: 3679
Do you really need a Webshield?/Email scanner?
« on: August 26, 2008, 07:49:47 PM »
Hey guys, Do we really need webshields and email scanners?  Or are they just a marketing ploy to get more customers?

This is how I look at it,

Turn Web Shield off.
Download Eicar test file.
  *detected*

Turn Web Shield on
Download eicar test file.
   *detected*

They are both being detected even while on one occasion the web shield is off, Why run another process since the resident detects it anyway?

This also applies for email scanners.. They both work in pretty much the same way.


EDIT: I have now made a thread on Avast! - http://forum.avast.com/index.php?topic=38265.0


Update:  Pages 3+4 are good reading.




Conclusion; Malware either has to hit your memory or harddisk to have an effect. If webshields\Mail gaurds use the same scanning method as your normal scanner then you have nothing to gain from using them.
« Last Edit: October 07, 2008, 08:50:07 AM by Kyle »
Windows 7 x64
AMD FX 8120, 8gb ram, ATI 6870 1gb

Offline Kyle

  • Computer Security Testing Group
  • Comodo's Hero
  • *****
  • Posts: 3679
Re: Do you really need a Webshield?/Email scanner?
« Reply #1 on: August 26, 2008, 07:59:37 PM »
If you give a vote, Give a reason why - other wise it's not going to help anyone understand!
Windows 7 x64
AMD FX 8120, 8gb ram, ATI 6870 1gb

sded

  • Guest
Re: Do you really need a Webshield?/Email scanner?
« Reply #2 on: August 26, 2008, 08:02:06 PM »
I get a fair amount of use out of my avast! email scanner and webshield.  Most of the virus alerts I see are in stuff that ends up in the spam file from my ISP.  Due to false positives, I do need to look at it occasionally.  Rather than downloading it and worrying about it later, I get the virus popup before it is downloaded and delete it there.  Most of these are actually embedded website URLs, so the webshield is the real actor.  But there are also virus attachments to deal with in the same manner.  You can always wait until they are downloaded and then try to install/execute, but seems a benefit to reject them early.

Offline Kyle

  • Computer Security Testing Group
  • Comodo's Hero
  • *****
  • Posts: 3679
Re: Do you really need a Webshield?/Email scanner?
« Reply #3 on: August 26, 2008, 08:10:06 PM »
sded, the scanning is still done on your computer! When you look up images or streaming videos, they aren't "ON" the website, they are in a temp folder on YOUR computer!
Windows 7 x64
AMD FX 8120, 8gb ram, ATI 6870 1gb

sded

  • Guest
Re: Do you really need a Webshield?/Email scanner?
« Reply #4 on: August 26, 2008, 08:18:27 PM »
Yes, I understand that-nothing happens until the data hits your computer.  But earlier in the process than when they try to install themselves or execute and get caught by the standard virus scanner.  Or HIPS.
« Last Edit: August 26, 2008, 08:23:06 PM by sded »

Offline Kyle

  • Computer Security Testing Group
  • Comodo's Hero
  • *****
  • Posts: 3679
Re: Do you really need a Webshield?/Email scanner?
« Reply #5 on: August 26, 2008, 08:28:18 PM »
Then why should I use a web shield if It gets caught anyway?
Windows 7 x64
AMD FX 8120, 8gb ram, ATI 6870 1gb

sded

  • Guest
Re: Do you really need a Webshield?/Email scanner?
« Reply #6 on: August 26, 2008, 08:36:05 PM »
Once you get the users involved, anything can happen.  :)  At least the HIPS is reported as often being removed/disabled to go work other problems.  Avast! standard scanner should still catch it, but why store it on your computer until it does?  And the email scanner gives a good quick indication of the source of the virus.

Offline Goose19

  • Comodo's Hero
  • *****
  • Posts: 1218
Re: Do you really need a Webshield?/Email scanner?
« Reply #7 on: August 26, 2008, 08:39:06 PM »
I prefer having a webshield. Now I can't into a huge technical reason why but I like Avast's webshield  because (correct me if wrong) It will detect the infection right when you click a link or start the download.  :-\
System Specs:  Pentium 4 with HT 3.06 Ghz,  1.5GB RAM, 160 GB WDC HD, Nvidia Geforce 7600GT 256MB DDR3



New Build: AMD Athlon 64 x2 6000 3.1 Ghz  4 Gb RAM 320GB WDC Hard Drive 650 watt quad rail Power supply(overkill :D) 9500GT Hybrid SLi with 8200 (onboard video) Decent Gaming rig :)

Offline Kyle

  • Computer Security Testing Group
  • Comodo's Hero
  • *****
  • Posts: 3679
Re: Do you really need a Webshield?/Email scanner?
« Reply #8 on: August 26, 2008, 08:41:04 PM »
[at]Goose Try the scenario in my opening post, turn the websheild off and download the EICAR test file.

[at]sded Seeing a "Virus" alert from Webscanner\email scanner, uses exactly the same results from the main AV guard process.


Sorry I really don't see anything that is challenging my claim.
Windows 7 x64
AMD FX 8120, 8gb ram, ATI 6870 1gb

sded

  • Guest
Re: Do you really need a Webshield?/Email scanner?
« Reply #9 on: August 26, 2008, 08:46:41 PM »
The avast! email scanner is a proxy inline between your email client and the internet (via localhost).  Not sure what you mean by being "the results from the main guard process", which happens later, between your email client and the rest of the system.  But agree, should be caught anyway-just a bit later.

Offline Goose19

  • Comodo's Hero
  • *****
  • Posts: 1218
Re: Do you really need a Webshield?/Email scanner?
« Reply #10 on: August 26, 2008, 08:49:57 PM »
[ at ]Goose Try the scenario in my opening post, turn the websheild off and download the EICAR test file.


Sorry, I can't on Avast.  I am currently trying out Nod32 30 day trial then back to Avast (Has been a couple years since I tried nod) Seems Nod32 also has a webshield.  ;)

edit: Somehow saw no difference on Nod32 while testing with webshield and with webshield disabled. Odd?  :o
« Last Edit: August 26, 2008, 08:53:33 PM by Goose18 »
System Specs:  Pentium 4 with HT 3.06 Ghz,  1.5GB RAM, 160 GB WDC HD, Nvidia Geforce 7600GT 256MB DDR3



New Build: AMD Athlon 64 x2 6000 3.1 Ghz  4 Gb RAM 320GB WDC Hard Drive 650 watt quad rail Power supply(overkill :D) 9500GT Hybrid SLi with 8200 (onboard video) Decent Gaming rig :)

Offline Kyle

  • Computer Security Testing Group
  • Comodo's Hero
  • *****
  • Posts: 3679
Re: Do you really need a Webshield?/Email scanner?
« Reply #11 on: August 26, 2008, 08:52:26 PM »
[at]goose, try it with nod32 then - with - and without a webshield.

[at]sded Where do you think the scanning is done using a email scanner? It isn't done in the air.. It's done on your system.. In that case the AV would detect it regardless of an email scanner.
Windows 7 x64
AMD FX 8120, 8gb ram, ATI 6870 1gb

Offline ganda

  • thermodynamic defier
  • Comodo's Hero
  • *****
  • Posts: 5896
Re: Do you really need a Webshield?/Email scanner?
« Reply #12 on: August 26, 2008, 08:56:57 PM »
well, it's not that crucial but i like it.
oh and 1 day i have port 137 opened/not stealthed ??? (i disabled CFP3 and forgot to turn it back on  88) ) don't know what it is.i got avast webshield blocking the attack.
as for the email scanner, at least it can prevent me to forward the email to somebody else i guess  88)

Offline Goose19

  • Comodo's Hero
  • *****
  • Posts: 1218
Re: Do you really need a Webshield?/Email scanner?
« Reply #13 on: August 26, 2008, 08:59:35 PM »
Hey brad..... Ganda**  ;D   You're thinkin bout the Avast network shield which scans activity on a few ports that are known to easily get infected or something along those lines. Also Network shield? needed? I think so.
System Specs:  Pentium 4 with HT 3.06 Ghz,  1.5GB RAM, 160 GB WDC HD, Nvidia Geforce 7600GT 256MB DDR3



New Build: AMD Athlon 64 x2 6000 3.1 Ghz  4 Gb RAM 320GB WDC Hard Drive 650 watt quad rail Power supply(overkill :D) 9500GT Hybrid SLi with 8200 (onboard video) Decent Gaming rig :)

Offline Kyle

  • Computer Security Testing Group
  • Comodo's Hero
  • *****
  • Posts: 3679
Re: Do you really need a Webshield?/Email scanner?
« Reply #14 on: August 26, 2008, 09:06:17 PM »
Yeah sorry I don't know much about avast! and it's sheilds, I know of webshields form AVIRA and NOD32, so lets stick to Webshields and Email scanners for now.

I'd be very interested to see if you actually gain a tighter security for having them turned on, or if it's just a marketing ploy and a waste of resources
Windows 7 x64
AMD FX 8120, 8gb ram, ATI 6870 1gb

 

Free Endpoint Protection
Seo4Smf 2.0 © SmfMod.Com Smf Destek