Whilst I'm no great fan of various virus test sites, etc. The one thing that is clear, the earlier that a virus is stopped the better, e.g. at browser level and the web shield would appear to be doing just that backed up being stopped at system and analysis levels.