Hello Mica Mijatovic & everyone else

05-Nov-2004 14:19, you wrote:

> One of such ones is AntiVir (Personal Edition, which is free) I use
> often, and it (the "Guard" part of it) will react on ANY occurrence which
> involves a "suspicious" file/action. It is *very light* in spending
> resources whilst it monitors machine.

...OTOH it is very "heavy" on the online updates (I never saw an update
below 1MB), and the way to set the online update in a way that it will
happen automatically is to be found only by the more curious users.


> There are plenty of good AV programs

Actually, there are not. :) Usually less than 50% of tested AV software
reach 100% detection rate...


> so is not very grateful to say which one is "best", but basically those
> which are able to function "independently", that is to treat all
> files/occurrences "equally", using no special "plug-in" (which requires
> some sort of "integration" with a particular application, which, further,
> might be a cause of possible "complications"), are most reliable.

It can be an advantage to have an email plugin, as it is outlined in TB's
helpfile, too (search the index for "anti-virus"): it may detect malware in
email that comes via encrypted channels, too, where normal mail scanners
fail, for example.

In addition, there are antivirus programs which are simply not aware of all
email programs and their database files. Imagine an antivirus program that
detects a virus signature in a large email folder (where the virus does
absolutely no harm) and it quarantines the whole file, or, if the scanner
is configured more strict, deletes the whole folder at once. Surprise
surprise - all mails gone.

My strategy is to completely exclude the mail programs data folders from
both the on-access and on-demand scanning, and have the mails scanned
separately (if at all, I do not) - if you click on a malicious attachment
and try to execute and/or save it, the on-access scanner will catch it,
anyway. YMMV

-- 
Best regards,
 Alexander (http://www.neurowerx.de - ICQ 238153981)
 using TB! v3.0.2.4 Rush on Windows XP Pro Service Pack 2

A person starts to live when he can live outside himself. -- Albert
Einstein


________________________________________________
Current version is 3.0.1.33 | 'Using TBUDL' information:
http://www.silverstones.com/thebat/TBUDLInfo.html

Reply via email to