Avast WEBforum

Consumer Products => Avast Free Antivirus / Premium Security (legacy Pro Antivirus, Internet Security, Premier) => Topic started by: RejZoR on October 25, 2004, 04:22:27 PM

Title: Few questions about Network Shield
Post by: RejZoR on October 25, 2004, 04:22:27 PM

Can you please explain to me, how Network Shield actually catches worms like Sasser or MSBlast. And if it blocks them or just logs their behavior?

Title: Re:Few questions about Network Shield
Post by: Vlk on October 25, 2004, 04:33:28 PM

Basically it's a very lightweight firewall (or more accurately, IDS) that scans all network traffic for signatures of known malware (namely Internet worms).

If it detects such an attack, it blocks it (by closing the hostile connection) - of course. :)


I think some of the competitive AV packages also offer such a feature - for example the new NAV 2005.


Cheers
Vlk

Title: Re:Few questions about Network Shield
Post by: RejZoR on October 25, 2004, 04:36:55 PM

So,does Network Shield rely on signatures (VPS) or it uses "generic" blocking.

I know NAV2005 Worm Blocker uses generic rules,probably avast! does the same. At least i don't have any compatibility problems with Network Shield and eMule :) (NAV WormBlocker hates eMule)

Title: Re:Few questions about Network Shield
Post by: Vlk on October 25, 2004, 04:38:10 PM

It uses signatures. No generics/heuristics. That would probably be too risky (slow, and problem-prone) anyway... ;)

Title: Re:Few questions about Network Shield
Post by: RejZoR on October 25, 2004, 04:41:00 PM

Ok,the last question ;D
Do i get any popup when certain attack happens (which is detected by Network Shield)? Something like popup window for updates or normal virus detected warning?

Title: Re:Few questions about Network Shield
Post by: Vlk on October 25, 2004, 04:44:24 PM

Yes, you get a popup similar to the one which is displayed whenever a virus is detected.

(Not the dialog - the red/yellow on-access scanner message in the notification area of the screen, if you know what I mean).

Title: Re:Few questions about Network Shield
Post by: RejZoR on October 25, 2004, 04:48:37 PM

Like the tag for "Show details on performed action",just in red/yellow colors right ;)

Thank you for fast response on all my questions :)