Avast WEBforum

Consumer Products => Avast Free Antivirus / Premium Security (legacy Pro Antivirus, Internet Security, Premier) => Topic started by: rdsu on January 24, 2005, 10:39:24 PM

Title: HTTP Scanner
Post by: rdsu on January 24, 2005, 10:39:24 PM
Hi,

Any estimated date to release this feature?

This feature will be something like the HTTP checking of NOD32?

Thanks
Title: Re: HTTP Scanner
Post by: Vlk on January 24, 2005, 10:41:33 PM
Yes. We'll likely have a BETA available for testing this week. This will include the HTTP and NNTP (newsgroup) scanner and some other new features. :) Stay tuned.
Title: Re: HTTP Scanner
Post by: rdsu on January 24, 2005, 11:14:29 PM
 ;D ;D ;D

Very good news!!!  ;)

Thanks and continue the excellent work...
Title: Re: HTTP Scanner
Post by: DukeNukem on January 24, 2005, 11:31:32 PM
Why would the above 2 providers be removed?
Title: Re: HTTP Scanner
Post by: rdsu on January 24, 2005, 11:35:03 PM
Why would the above 2 providers be removed?

EDIT:

I deceived myself...
Title: Re: HTTP Scanner
Post by: RejZoR on January 25, 2005, 07:17:45 AM
Weee,can't wait to test the beta :)
Title: Re: HTTP Scanner
Post by: TAP on January 25, 2005, 10:10:12 AM
This is a good feature to fight today's threats. It would be even better if avast! extends its detection capabilities to cover more content threats come via network traffic such as spyware, adware, toolbar, BHO, hijacker and other malicious scripts,  HTTP Scanner should deal with it well in real time as network-based antivirus firewall at gateway.
Title: Re: HTTP Scanner
Post by: watchthisspace on January 25, 2005, 10:36:36 AM
Is this HTTP scanner going to be like the Trend micro online scanner?  ???
Title: Re: HTTP Scanner
Post by: Vlk on January 25, 2005, 10:37:55 AM
TAP, are you quoting from our internal materials? ;) ;D

watchthisspace, no, not at all. By HTTP scanner, we mean a new provider that will filter HTTP (web) traffic before it reaches the browser.

Cheers
Vlk
Title: Re: HTTP Scanner
Post by: radicalb21 on January 25, 2005, 10:39:54 AM
I agree this would be a good. I look forward to the BETA as does everyone else in the forum. But would it be possible to also include protection for FTP? Thanks for your answer in advance.
Title: Re: HTTP Scanner
Post by: watchthisspace on January 25, 2005, 10:42:18 AM
@ Vlk, Sounds cool, Avast just keeps getting better and better  8)  :)

EDIT:Will this be available in the home edition?
Title: Re: HTTP Scanner
Post by: Vlk on January 25, 2005, 10:47:17 AM
radicalb21, the Web Shield (that's the name of the new provider) will also be able to handle FTP but will require the FTP software (Internet Explorer, LeachFTP, 3d-ftp etc.) to be manually configured to take advantage of this option. Otherwise, it would be extremely difficult to do the scanning (if the FTP program wouldn't be aware of it).


Cheers
Vlk
Title: Re: HTTP Scanner
Post by: radicalb21 on January 25, 2005, 10:57:21 AM
The providers I run on my system range from WSFTP version 9.0 Pro, CUTEFTP version 6.0 Pro, and SmartFTP. If you need any specifics let me know so I can get them configured properly. 
Title: Re: HTTP Scanner
Post by: radicalb21 on January 25, 2005, 10:59:06 AM
Also would HTTPS be covered under HTTP?
Title: Re: HTTP Scanner
Post by: Vlk on January 25, 2005, 11:02:01 AM
Sorry, HTTPS is out of question because avast has no way to sneak inside the communication - that's what the "S" in HTTPS is about, after all :)
Title: Re: HTTP Scanner
Post by: radicalb21 on January 25, 2005, 11:08:22 AM
ok thanks for the explaination VLK.
Title: Re: HTTP Scanner
Post by: Lisandro on January 25, 2005, 12:55:23 PM
Are you quoting from our internal materials? ;) ;D

Yes, I am...

1. There is a new provider - Web Shield. It is a proxy that filters the communication of a web browser, looking for viruses. It also makes it possible to block certain files by URL or MIME type. This requires a few new configuration dialogs. There are also some supplemental HTML pages.
 
2. There's a NNTP scanner in the Internet Mail provider. Again, there is a new configuration page - it is basically the same as for inbound e-mail scanning (POP3), just the word "mail" is replaced by "news".
 
3. There's a new configuration page for the transparent e-mail protection - in particular the configuration of redirected ports.
 
4. We will be trying to distinguish various kinds of malware; so, if e.g. some kind of spyware is detected, the Virus Dialog will not say "A virus was found!", but rather "Spyware was found!" (or, it says "Malware was found!" and the line "Malware type" below says it's spyware).
Title: Re: HTTP Scanner
Post by: RejZoR on January 25, 2005, 01:07:13 PM
Very nice  :D
Title: Re: HTTP Scanner
Post by: radicalb21 on January 25, 2005, 01:29:28 PM
I agree these will be very nice features
Title: Re: HTTP Scanner
Post by: DukeNukem on January 25, 2005, 01:31:21 PM
Just add a Firewall and Spyware shield,

Avast Internet Security 2005!

 :P

Title: Re: HTTP Scanner
Post by: Lisandro on January 25, 2005, 01:38:36 PM
Just add a Firewall and Spyware shield,
Avast Internet Security 2005!

Well, here is coming the old and ugly Systeworks-like-all-in-one-application again...  :'( :-[
Layered defense will be better.
Please, do not add a firewall in the same product.
But, it will be good to have an Alwil Firewall as a standalone product  :)
Title: Re: HTTP Scanner
Post by: electronikk on January 25, 2005, 03:06:47 PM
Wow all these new features really sound ambitious. I am impressed by the efforts alwil makes to improve avast! I just hope we will see further improvements in basic features like detection rates or scanning depth, too.  ::)

Keep it up, everybody!  :)
Title: Re: HTTP Scanner
Post by: RejZoR on January 25, 2005, 03:24:36 PM
Technically they could offer Firewall through new provider for those who would want it.
Just don't include it by default :P
Title: Re: HTTP Scanner
Post by: rdsu on January 25, 2005, 07:23:57 PM
I'm impressed with new coming features!!!
In one word: GREAT... ;D

Just add a Firewall and Spyware shield,
Avast Internet Security 2005!

Well, here is coming the old and ugly Systeworks-like-all-in-one-application again... :'( :-[
Layered defense will be better.
Please, do not add a firewall in the same product.
But, it will be good to have an Alwil Firewall as a standalone product :)

I completely agree with you!!!

I prefer to have a program specialized about one think that have all in one and the program doesn't look so good...
Title: Re: HTTP Scanner
Post by: Lisandro on January 25, 2005, 08:44:12 PM
Technically they could offer Firewall through new provider for those who would want it.
Just don't include it by default :P

My experience with this: to integrate a 'module' with this features, well, you'll have to change a lot of the 'common' and 'generic' features of avast that it won't be the same anymore. I'm just trying to say: two standalones applications will be better than one modular monter one  8)
Title: Re: HTTP Scanner
Post by: TAP on January 25, 2005, 10:02:41 PM

4. We will be trying to distinguish various kinds of malware; so, if e.g. some kind of spyware is detected, the Virus Dialog will not say "A virus was found!", but rather "Spyware was found!" (or, it says "Malware was found!" and the line "Malware type" below says it's spyware).[/i]

It's very good improvements!!!

Viruses are rare malware today and I think it's not good to use term " virus " as generic name refers to all kind of malware because it misleads average users at best, I've seen some people bashing avast! as it misses " viruses/trojans " but if you try to do a deep investigation about that I believe it's not (technically) viruses/worms/trojans but it's some kind of adware/spyware that another AVs that extend its detection to cover adware/spyware use term " virus " as generic name, I know that avast! deliberately ignores common adware/spyware.

When Web Shield comes, I think it's time avast! would extend its detection to fight against grayware (adware, spyware, downloader, BHO, hijacker, etc.) that most users would rather encounter than traditional viruses/worms/trojans but this doesn't mean that avast! will become bloated ware or spyware specialist but it's good to stop some today's most dangerous malware at users' frontier by Web Shield.
Title: Re: HTTP Scanner
Post by: Lisandro on January 25, 2005, 10:18:28 PM
Questions about Web Shield?

1. Will it be compatible with other proxies (anonymizers) or local proxy filters (127.0.0.1)?
2. How is the decrease of browsing speed? It's well know that proxies have this side effect...  :P
3. How is the RAM usage (average) in your tests?
4. Will it be available on the Home version or only in Professional one?
Title: Re: HTTP Scanner
Post by: RejZoR on January 25, 2005, 10:25:15 PM
I hope it will be for both versions. Script Blocking should stay for Pro only.
Title: Re: HTTP Scanner
Post by: Vlk on January 25, 2005, 10:28:18 PM
Technical,

1. Yes
4. Yes (both Home & Pro)

3.&4. It's up to you to try it out. :) Friday seems likely for the beta release.
Interestingly, it will contain a number of more improvements than listed above. :P


Cheers
Vlk
Title: Re: HTTP Scanner
Post by: igor on January 25, 2005, 10:45:50 PM
Viruses are rare malware today and I think it's not good to use term " virus " as generic name refers to all kind of malware because it misleads average users at best, I've seen some people bashing avast! as it misses " viruses/trojans "

Well, I would like to emphasize that this is the first step. The virus database it not yet divided into the cathegories very well, it's not possible to search only for some type of malware (or to exlude some of them), etc. Hopefully it will improve in the future ;)

When Web Shield comes, I think it's time avast! would extend its detection to fight against grayware (adware, spyware, downloader, BHO, hijacker, etc.) that most users would rather encounter than traditional viruses/worms/trojans

Wov, another -ware, gray this time :)
Btw, I'm a little worried that many users may be confused by the cathegorization. The know that the word "virus" means something bad, but they may be unsure what all the "ware" is.

1. Will it be compatible with other proxies (anonymizers) or local proxy filters (127.0.0.1)?

The mechanism will be the same as with the e-mail protection, so I guess it should be. Ask lukor for more :)

2. How is the decrease of browsing speed? It's well know that proxies have this side effect... :P
3. How is the RAM usage (average) in your tests?
 

I believe it's quite fast, but of course it depends on your network and CPU speed. Ask Vlk for more ;D

4. Will it be available on the Home version or only in Professional one?

I believe it will be in Home as well.


OK, Vlk was faster, as usual  :P
Title: Re: HTTP Scanner
Post by: electronikk on January 25, 2005, 11:31:39 PM
Interestingly, it will contain a number of more improvements than listed above. :P

Cool stuff! Sounds like another major release is rising on the horizon.  ;D
So many good news- seems like it's time for an official announcement. But Iguess it will come along with the beta release on friday?

1. Will it be compatible with other proxies (anonymizers) or local proxy filters (127.0.0.1)?

The mechanism will be the same as with the e-mail protection, so I guess it should be. Ask lukor for more :)

Does this mean that this feature is going to work "out of the box"?  Or does the user have to configure his applications (browsers,etc.) by himself?  I remember configuring my system to work with a jana proxy server was quite a pain in the ass... Anyway I'm looking forward to see the future development.  :)
Title: Re: HTTP Scanner
Post by: Lisandro on January 26, 2005, 02:15:17 AM
Thanks Igor and Vlk.
By using a proxy mechanism it will delay the Internet traffic. Hope not that much.
For what you said, the traffic will be transparently directed through the provider and not 'external' configuration of proxies will be needed.
Hoping Lukor post anything to make this clear...

Vlk, which other improvements will we have?  ??? ::)
Title: Re: HTTP Scanner
Post by: lukor on January 26, 2005, 03:32:48 PM
Hi,

Web Shield is indeed using the same transparent mechanism that appeared firstly in avast 4.5 for Mail Scanner. So the same will apply: simply start the provider and you should be protected, stop it, no reconfiguration and you are again with your bare internet. For localhost proxies, the communication between the proxy and the outer internet will be scanned. Other configurations would be also possible - but that would require setting the proxy server in your browser or in your present localhost proxy.

Concerning the delay - well, there would be apparently some small delay - the payload needs to be scanned and that takes some time. But the scanning process is optimized for this kind of usage and the networking stuff is also optimized for high throughput, so hopefully you will find it very quick or better not noticeable at all  :P

We might discuss this in more detail as soon as the first beta is out...

Lukas.
Title: Re: HTTP Scanner
Post by: Eddy on January 26, 2005, 04:29:29 PM
For those who like to know more about malware, viruses, exploits, trojans and such, click on the link in my signature and visit the webboard. It has detailed definitions/explanations about them.
Title: Re: HTTP Scanner
Post by: electronikk on January 26, 2005, 08:36:01 PM
What lukas said sounds promising.  :)
I just wonder how much your internet speed will be affected by your processing power. (and I'm curious about the effects on traffic throughput and response times...)