Real-time scanning w/o email scanning?

Discussion in 'other anti-virus software' started by networm, Feb 18, 2005.

Thread Status:
Not open for further replies.
  1. networm

    networm Registered Member

    Joined:
    Nov 13, 2004
    Posts:
    19
    except for real-time scanning function, many AV have email scanning funcion?
    Is this a must-have for AV?

    Right now I'm running F-Secure client security, if i disable email scanning, does that mean some virus,trojan, etc will come out of/go into my computer?
     
  2. bigbuck

    bigbuck Registered Member

    Joined:
    Jul 7, 2004
    Posts:
    4,877
    Location:
    Qld, Aus
    I regard it as very important. In fact, the only virus alerts I've ever had on my system are those from my email scanning......the 'odd' email with a dirty attachment.
    Cheers,
    Buck.
     
  3. BlueZannetti

    BlueZannetti Administrator

    Joined:
    Oct 19, 2003
    Posts:
    6,590
    That will strongly depend on you ISP. Many providers now scan e-mail for viruses at the server level, this is in addition to the spam filtering that many also offer and shunts a large fraction of the mail volume outside of your view from the start.

    Blue
     
  4. flinchlock

    flinchlock Registered Member

    Joined:
    Jan 30, 2005
    Posts:
    554
    Location:
    Michigan
    Am I the only person on the planet that uses Web Email o_O

    I use XPlite and have removed most junk from XP/SP2... NO Outlook Express, and NO Windows Media Player high than version 6.4.

    Mike
     
  5. ronjor

    ronjor Global Moderator

    Joined:
    Jul 21, 2003
    Posts:
    57,722
    Location:
    Texas
  6. flinchlock

    flinchlock Registered Member

    Joined:
    Jan 30, 2005
    Posts:
    554
    Location:
    Michigan
  7. Slovak

    Slovak Registered Member

    Joined:
    Mar 4, 2004
    Posts:
    515
    Location:
    Medina, Ohio
    I have noticed that most email viruses try to infiltrate ones system via a compressed file attached, which can do no harm unless you uncompress the file. I have never been infected through email unless it came through an compressed(zipped) attachment that I opened. If your AV does its job in the real time protection department, then theoretically speaking it should catch the virus when you unzip the file anyway. Most folks here, including myself, use email scanning anyway.
     
  8. bellgamin

    bellgamin Very Frequent Poster

    Joined:
    Aug 1, 2002
    Posts:
    5,648
    Location:
    Hawaii
    Because of my websites I receive LOTS of email. It is all scanned by my spam filters, so I do not want yet another *automatic* scan (by an AntiVirus) to further slow-down the process.

    Instead, I have my email client's filter set-up to detach ALL attachments & send them to an IOMEGA zip file, where I can scan them at my leisure.
     
  9. networm

    networm Registered Member

    Joined:
    Nov 13, 2004
    Posts:
    19
    if the attachment is not compressed, and if the email-scan is turn off, Is real -scan able to capture the virus?

    If so, why need email scan?
     
  10. Firecat

    Firecat Registered Member

    Joined:
    Jan 2, 2005
    Posts:
    7,927
    Location:
    The land of no identity :D
    Well that's subjective. Good real time monitors will catch the virus as you recieve the email, but in that case, it may have already launched a script, modified the registry, opened up some exploit or something like that...remember that a real time monitor is used for checking files only...
     
  11. bellgamin

    bellgamin Very Frequent Poster

    Joined:
    Aug 1, 2002
    Posts:
    5,648
    Location:
    Hawaii
    We're talking about *attachments* here, right? In which case, doesn't an attachment have to be opened before it can launch a script, modify the registry, etc?

    I *think* that some monitors also scan memory. I'm pretty sure that DrWeb does so.

    I'm not trying to be argumentative, Firecat. Just trying to learn. Shalom
     
  12. Firecat

    Firecat Registered Member

    Joined:
    Jan 2, 2005
    Posts:
    7,927
    Location:
    The land of no identity :D
    Don't worry I'm a kid and I still have lots to learn...maybe some pro like blackcat will help us out :)
     
  13. networm

    networm Registered Member

    Joined:
    Nov 13, 2004
    Posts:
    19
    I think so, at least F-Secure (KAV based AV), Dr.Web, does so

    Hope some Pro clarify this.
     
  14. Firecat

    Firecat Registered Member

    Joined:
    Jan 2, 2005
    Posts:
    7,927
    Location:
    The land of no identity :D
    F-Secure, Dr.Web, KAV and eScan seem to do this...It seems eScan has the best memory scanner among these though. Lets see what a Pro says.
     
  15. networm

    networm Registered Member

    Joined:
    Nov 13, 2004
    Posts:
    19
    How do you know that? any proof?
     
  16. Firecat

    Firecat Registered Member

    Joined:
    Jan 2, 2005
    Posts:
    7,927
    Location:
    The land of no identity :D
    I didn't say it is, I said it seems. The On-Demand memory scanner is scanning all processes and files in memory along with the DLLs they're using (and other assosciated files) and is also scanning the registry.

    As far as I observed, KAV scans only running processes and some dlls. Of course, I could be wrong...
     
Loading...
Thread Status:
Not open for further replies.