Kaspersky AV performs web scanning along with file scanning, that targets the internet connection traffic
I want to know what advantages the web AV has over the file AV ? or what can the web AV detect that the file based scan is not able to detect and block ? perhaps one of its purposes is to block malicious scripts, but is the file AV unable to detect them ? and we need another weapon for these types of threats ? please explain some other threats that involve web av rather than file av
I always disable the web av, because I think it decreases the surf speed ( as it scans almost every page u visit, etc ), so am I at risk now if I only have file av enabled ?
This Question has been solved and asker verified All Experts Exchange premium technology solutions are available to subscription members.
Experts Exchange has been collecting answers to technology questions since 1996…3 million and counting! If you have a question, chances are we already have your answer.
If you can't find the exact answer you're looking for, ask our exclusive community of 50,000 experts. You’ll get a personalized answer from a trusted professional.
Thousands of free tech tips, tricks, how-to’s and tutorials are available in our peer reviewed articles section. See for yourself how smart our experts are, no login required.
Save solutions to your questions, answers you’ve discovered through searching plus helpful articles in your personal knowledgebase for easy future access.
Access the answers to your technology questions today.
30-day free trial. Register in 60 seconds.
Members of the expert community talk about why the experience at Experts Exchange is different than what you will find anywhere else.
Try it out and discover for yourself.
30-day free trial. Register in 60 seconds.
Join the community of experts here and help other tech pros by answering question in your area of expertise. You can earn FREE access to all Experts Exchange's premium features and resources.
I myself had this assumption and that was the reason I disabled the web av. because the file av wont let any infected file to be executed, regardless of where it has come from (i.e. internet).
So I think there should be other circumstances where the web av plays crucial role and the lack of it will put the system at risk, I'm looking for these scenarios
It's not rare these days to accidentally visit a url that is infected, and by loading the infected page alone can be deadly.
That's when web scanning is also very useful because the web traffic is filtered in real-time even before the webpage loads into your browser, providing a safe surfing.
If you turn web scanning off, and if you use IE to browse the web I would suggest SpywareBlaster as an added protection. It doesn't run in the background so it doesn't use any resources to protect you against activex based nasties.
"we need another weapon for these types of threats"
If i understand you right you are aslo looking for an extra security layer for you and your users.
I suggest that you implement Network Associates Siteadvisor for both IE/Firefox on all your client pc's - its free and very easy to use and understand for all users. It works by the traffic light concept: Red light for (dangerous) sites, Yellow (yellow) for suspicious sites and Green for (Safe) site's.
The education for your users is next to none, as the concept is so simpe...
Network Associates scanns the web 24/7/364 for hack, exploits, fraud, malware, and other criminal activites and shows/worns about it in realtime in your useres browsers in the major search engine results and in small window in the browser it self.
You can also install SiteAdvisor on all your server - if you have firefox installed. (Un fortunately it does not work with IE 6/7 2003)
Have a look at it at:
http://www.siteadvisor.com
Thanks folks
I just want to know what can the web av do for me that the file av can not ?
You all told that file av operates on files, I agree, but can a virus come from the internet without first installing itself in a file ? so what do you call a virus like this ?
I would appreciate if you name some well known threats of this type, so I can check the virus encyclopedia and make sure that file av alone is not suitable for them. I'm just curious to know
All prior responders attempted to say that the web av is the front line defense. If a browser can be exploited by the data it receives, the web av might prevent the malicious content from coming through. The file av, might not detect the malicious code it also might not have an opportunity to scan the code.
example: you go to a site whose content was compromised to exploit a vulnerability in a browser either by way of vbscript,javascript, etc. The web av might be aware of such exploits/dnagers and prevent the content from reaching the browser. Look at it this way. You have two alarms for your house. One alarm is triggered if access to your house from uncommon directions is attempted. The second alarm is inside your house.
Web av is the first alarm. File av is the second alarm.
I would certainly use SiteAdvisor. Since I found it, it prompts me even through a google search that a site is safe or not. With inexperienced users this is invaluable and when you know what you are getting into, at least you can be prepared if you have to visit the site.
WebAV can stop ActiveX controls and I believe VB script, javascript etc. from running and hijacking your PC. I wouldn't suggest turning it off at all.
Business Accounts
Answer for Membership
by: neopolitanPosted on 2007-01-06 at 13:55:30ID: 18259535
Web scan helps to prevent downloading of malicious programs, while file scan does it after download has happened. The latter has a chance of the virus/trojan infecting your computer before the antivirus program had a chance to block it. Therefore, the former gives a better protection.