Antiviruses and scripts

Discussion in 'other anti-virus software' started by Fly, Apr 5, 2008.

Thread Status:
Not open for further replies.
  1. Fly

    Fly Registered Member

    Joined:
    Nov 1, 2007
    Posts:
    2,069
    This is basically a link to another thread that has ended up in a somewhat dark corner, it's relevant, because it's about antiviruses. I hope this link is allowed.

    Especially my last post, (I'm not sure if it's about cross-site scripting), my hated McAfee uses a script for protection against malicious scripts. At first glance, it seems cool.

    Comments ?

    https://www.wilderssecurity.com/showthread.php?t=201350&page=2
     
  2. Miyagi

    Miyagi Registered Member

    Joined:
    Mar 12, 2005
    Posts:
    420
    Location:
    Honolulu, Hawaii
    Next time, just do a *BUMP*
     
  3. Macstorm

    Macstorm Registered Member

    Joined:
    Mar 7, 2005
    Posts:
    2,531
    Location:
    Sneffels volcano
    Fly,

    IMO, you should paste here your last post from the other thread for better understanding :)
     
  4. Fly

    Fly Registered Member

    Joined:
    Nov 1, 2007
    Posts:
    2,069
    On your request :) :

    I'd be the last person to promote McAfee (I 've been waiting for VIPRE, but McAfee Virusscan Plus hasn't caused any serious problems lately), but if you go to the security center, advanced menu, computer and files, configure, you will see a script scanning feature. Someone stated that McAfee does not have a http scanner, but this ability to scan for malicious scripts seems very nice. McAfee actually managed to catch a piece of malicious javascript that tried to installed a trojan. Both were detected in real-time and their installation was prevented. (This was the ONE infection in two or three years).

    I have no idea if it was really cross-site scripting. (The McAfee SiteAdvisor marked the webpage as safe). Scanning for scripts is a major, if not THE major, way McAfee 'protects' your computer. The script scanning feature suggests that it's at least partially heuristic.

    With infection by malicious scripts being one of the major attack vectors, using a script to catch malicious scripts seems actually cool. (I'm very conservative regarding downloading programs, ActiveX etc, and I don't P2P).
    For as far as I know, McAfee runs two scripts on my computer, one being the SiteAdvisor, the other the main (?) real-time protection feature of McAfee.
    (I got that information from the Spy Sweeper)

    I'm not aware of any other 'antivirus' programs that use scripts as a major part of their real-time protection. Does anyone know ? What do you think of that approach ?
     
    Last edited: Apr 6, 2008
  5. Fly

    Fly Registered Member

    Joined:
    Nov 1, 2007
    Posts:
    2,069
    Well, Macstorm, it seems noone has any interest in an antivirus/antimalware product that uses scripts as the main (?) form of protection. Or noone has anything to contribute.

    I'll leave it at this if nobody will reply.
     
  6. Macstorm

    Macstorm Registered Member

    Joined:
    Mar 7, 2005
    Posts:
    2,531
    Location:
    Sneffels volcano
    Fly, though i'm not familiar about av programs that utilize real-time script protection, i remember reading somewhere here in wilders something regarding to Avast utilizing this feature, IIRC.
    Could anyone please confirm :)
     
  7. lucas1985

    lucas1985 Retired Moderator

    Joined:
    Nov 9, 2006
    Posts:
    4,047
    Location:
    France, May 1968
    I think that there's a little misunderstanding going here. No AV uses scripts as any form of protection.
     
  8. Macstorm

    Macstorm Registered Member

    Joined:
    Mar 7, 2005
    Posts:
    2,531
    Location:
    Sneffels volcano
    Protection against dangerous scripts?
     
  9. lucas1985

    lucas1985 Retired Moderator

    Joined:
    Nov 9, 2006
    Posts:
    4,047
    Location:
    France, May 1968
    That's a different thing. AVs DO protect against scripts (browser-based or WSH-based) but they don't use scripts to give that protection.
     
  10. Thankful

    Thankful Savings Monitor

    Joined:
    Feb 28, 2005
    Posts:
    3,731
    Location:
    New York City
    The Feb 2008 comparative (AV-Comparatives.org) tested for 14,284 script viruses. Not sure if this is what interests you.
     
  11. Macstorm

    Macstorm Registered Member

    Joined:
    Mar 7, 2005
    Posts:
    2,531
    Location:
    Sneffels volcano
    I think i've made a mispelling error in my previous post ;)
    I was talking about 'protection against malicious scripts'. Now i see it's not what OP was asking for :blink:
     
  12. dr pan k

    dr pan k Registered Member

    Joined:
    Nov 22, 2007
    Posts:
    204
    ALL av prog have protection against scripts. the only problem is that most of them have low (very very low) detection % of script malware. u can check 4 your self at http://www.av-comparatives.org/ in the retrospective tests..
     
  13. Fly

    Fly Registered Member

    Joined:
    Nov 1, 2007
    Posts:
    2,069
    Actually, you may be right.

    I may have misinterpreted. Although I've read something about McAfee running scripts on your computer quite some time ago.

    I could disable all scripting on my machine and give it a try, but I'd rather not :)
     
  14. computer geek

    computer geek Registered Member

    Joined:
    Oct 6, 2007
    Posts:
    776
    Why use it then? :p
     
  15. ggf31416

    ggf31416 Registered Member

    Joined:
    Aug 20, 2006
    Posts:
    314
    Location:
    Uruguay
    Again:rolleyes: , "Retrospective/Proactive" = detection of new malware without a signature update.
     
  16. Fly

    Fly Registered Member

    Joined:
    Nov 1, 2007
    Posts:
    2,069
    I'm not sure what you mean, I've already discontinued their 'auto-renewal'.

    Now I'm getting ads all over the place offering a HUGE discount for the McAfee Security Suite. I'm sure that's not coincidence. :argh:
     
Loading...
Thread Status:
Not open for further replies.