question about ESET NOD32 and RAR

Hello,Eset moderator and fans.
As we know , ESET nod32 can detect the virus in the RAR file. Somehow,there are something which I don't understand.
If i download a infected rar file from a static web page, eset can block the file inmediately. But if the webside is a active web page, like forum, the infected rar file can easily slip into my computer after i downloaded it.(all neccesary options like high heuristic have been selected)
why eset can't also block that kind of rar subject?
someone told me that it's because the SSL has coded the rar,so that eset can do nothing with it.
is it true?

 

If the connection is secured (encrypted), then the data stream is meaningless to the web protection. The files would be scanned by the real-time protection upon extraction.

 

Someone told me that once ESET said:

if IMON catch malicious code or not is not connected with web page
source or technology (php, asp or etc.) but with protocol, that is used
to download. If it is SSL of any other encrypted protocol, then IMON
NEVER catch a virus. Keep eye on this please.


Dose the attachment in forum use the different protocol with other webside so make eset miss it in IMON?

And does webside like forum or BBS use SSL? someone told me forum can't use SSL and why other antivirus can detect the attachment but eset can't do the same thing.