Author Topic: What providers do I really need?  (Read 7803 times)

0 Members and 1 Guest are viewing this topic.

Chaswey

  • Guest
What providers do I really need?
« on: February 26, 2009, 11:40:16 AM »
I'm running the free version of Avast 4 (with 7 providers).

I want to configure it so that I do not have unnecessary providers running.

Lots of posts on different forums suggest thet you do not need to run an e-mail scanner as your ISP should catch any viruses (although NOT in attachments). However, attachment viruses SHOULD be picked up by Avast anyway, shouldn't they? So I have disabled Internet Mail.

As I do not use Outlook/Exchange or Instant Messaging, I have also disabled these.

That leaves:
Network Shield
P2P Shield
Standard Shield
Web Shield

I think I understand Standard Shield (although what is "standard"?) and P2P Shield but what are the other two for?

Is Web Shield some type of anti-phishing/Link Scanner?

Network Shield? Some protection for a LAN or Intranet network?

Would be grateful for a breakdown/explanation of what each one does.

Thanks 


Offline .: L' arc :.

  • Avast Evangelist
  • Super Poster
  • ***
  • Posts: 1780
  • Thinking with Portals
Re: What providers do I really need?
« Reply #1 on: February 26, 2009, 12:11:40 PM »
-= based on what I know:    [correct me if I am wrong]

-= Standard Shield     -->  resident shield.. a scanner running in background.. scans several ports..
-= Web Shield           -->  protection from internet spreading viruses
-= Network Shield      -->  [if I am not mistaken] for computers in a network..?
-= Internet Mail         -->   for e-mails
-= P2P Shield            -->   for P2P [Peer to peer transfers].. e.g. limewire, frostwire, utorrent.. Transfer of file from other pc to your pc
-= instant messaging  -->   IMs
-= Script Blocker        --> for blocking malicious Java and many other format scripts..
Windows 7 (64-bit) Home Premium SP1
avast! 9 RC1

Offline alanrf

  • Avast Evangelist
  • Massive Poster
  • ***
  • Posts: 3870
  • Just an avast user
Re: What providers do I really need?
« Reply #2 on: February 26, 2009, 12:31:01 PM »
For Internet Mail provider ... I could argue with

Quote
Lots of posts on different forums suggest thet you do not need to run an e-mail scanner as your ISP should catch any viruses

but the argument that is better to never let a virus into email database to begin with rather than catch it later and risk the antivirus product deleting your entire email database may not change your mind.  Nevertheless, please read this post for an added value of this provider.

Chaswey

  • Guest
Re: What providers do I really need?
« Reply #3 on: February 26, 2009, 12:36:15 PM »
Thanks for your reply.

I notice that you mention "Script Blocker". In my version (4) this has been replaced by Outlook/Exchange.

Yes, I suppose Network Shield speaks for itself. As I am not connected to a computer network, I'll disable this.

Web Shield? Not too sure about this. Would have thought the Resident Shield (Standard Shield) would have picked this up. That's what makes me think it's some type of Link Scanner. I find link scanners a pain as they are only as good as the latest database (which is always out of date).

Offline alanrf

  • Avast Evangelist
  • Massive Poster
  • ***
  • Posts: 3870
  • Just an avast user
Re: What providers do I really need?
« Reply #4 on: February 26, 2009, 12:43:35 PM »
The avast Webshield is not a link scanner; it is a comprehensive scanner of your Internet accesses ... including finding viruses in code/data downloaded during your Internet surfing.  Again, prevention being better than cure.

You are connected to a computer network ... the Internet ... the Network shield provides defense against attempts to exploit your system from the Internet and (yes, as you say only as good as the database ... but better some defense than none) to block accesses - with a warning - to known malware sites.


Chaswey

  • Guest
Re: What providers do I really need?
« Reply #5 on: February 26, 2009, 12:50:15 PM »
Thanks alanrf.

Take your point about e-mail scanning. Also, that the providers don't use much resources.

I do use P2P occasionally so I guess I'll just disable IM and Outlook/Exchange. Thanks again

Mr.Agent

  • Guest
Re: What providers do I really need?
« Reply #6 on: February 26, 2009, 12:56:10 PM »
If you got Home then you dont got script blocker its only in the Avast Pro u got it

Alan Baxter

  • Guest
Re: What providers do I really need?
« Reply #7 on: February 27, 2009, 05:47:09 AM »
Hi, Chaswey.  Avast works well for me without Web Shield or Internet Mail protection.  I'm the only user on this PC and I practice safe hex.  I'm using these providers.
- Instant Messaging
- Network Shield
- P2P Shield
- Standard Shield

Of course the Standard Shield is essential.

Offline alanrf

  • Avast Evangelist
  • Massive Poster
  • ***
  • Posts: 3870
  • Just an avast user
Re: What providers do I really need?
« Reply #8 on: February 27, 2009, 07:27:22 AM »
Alan Baxter,

Publishing opinions is very easy and perfectly reasonable, but they are just opinions and not backed up by any rationale.

avast provides a number of protective providers ... they are low in resource consumption and there are very clear reasons for not using some if they are not applicable (like IM if the avast user does not use any Instant Messaging services).  What technical analysis of yours supports the advice to fail to use the Webshield or the Internet Mail provider (for users of email clients)?   

Alan Baxter

  • Guest
Re: What providers do I really need?
« Reply #9 on: February 27, 2009, 07:50:58 AM »
What technical analysis of yours supports the advice to fail to use the Webshield or the Internet Mail provider (for users of email clients)?

- Web Shield.  It's not necessary, so I choose to avoid the load and complexity added by its HTTP proxy implementation.
1) From avast! - help: resident protection, Web Shield - Provider Settings
Quote
avast! will prevent the infection thanks to its Standard Shield provider (which scans all files that you start of open).
2) Firefox 3 scans all downloaded files with Avast

Web Shield does provide other features available through its Settings, but I don't use any of them.

- Internet Mail
http://thundercloud.net/infoave/tutorials/email-scanning/index.htm

Offline alanrf

  • Avast Evangelist
  • Massive Poster
  • ***
  • Posts: 3870
  • Just an avast user
Re: What providers do I really need?
« Reply #10 on: February 27, 2009, 08:08:48 AM »
Quote
Web Shield.  It's not necessary, so I choose to avoid the load and complexity added by its HTTP proxy implementation.

Sorry .. but again this is an opinion and your technical backup is .... ?

Quote
2) Firefox 3 scans all downloaded files with Avast

What makes you believe this fallacy?

As for Internet Mail, again, you are welcome to believe any unsubstantiated posting on the Internet ... as you appear to.  I know avast  ... (forgive my presumption but I dare to think that I may yet still know it a little better than you).  If this article is your evidence ... well let's say it is just not convincing.

As to load .. .what load?  These providers are low resource and is not some defense better than none ... is not prevention better than cure?

Let's continue the debate.       















« Last Edit: February 27, 2009, 08:27:35 AM by alanrf »

Offline RejZoR

  • Polymorphic Sheep
  • Serious Graphoman
  • *****
  • Posts: 9406
  • We are supersheep, resistance is futile!
    • RejZoR's Flock of Sheep
Re: What providers do I really need?
« Reply #11 on: February 27, 2009, 09:08:57 AM »
Standard Shield, Network Shield and Web Shield. These are the basic ones for optimal protection.
Since i don't use POP3 mail i also have Internet Mail provider, but i have its heuristics set to extreme sensitivity. So if only one mail is being sent through SMTP on my PC, avast! will jump up.
Great proactive protection against mass mail worms.
Visit my webpage Angry Sheep Blog

Offline DavidR

  • Avast Überevangelist
  • Certainly Bot
  • *****
  • Posts: 88895
  • No support PMs thanks
Re: What providers do I really need?
« Reply #12 on: February 27, 2009, 04:36:41 PM »
@ Alan Baxter
Well I don't know of what complexity you talk of with the web shield proxy, it is transparent in newer OSes with no input required of the user. Load is negligible in both RAM and CPU with modern systems with GB+ of RAM and fast CPU, but even with lower performance PCs it isn't a huge drain. If RAM is a factor then it is cheap and will improve overall system response.

It is by far better to keep malware off your system, rather than have to actually try to remove it when it is on the system, IMHO, but that's just another opinion.

Whilst firefox 3 has introduced scanning of downloads, it also stated it doesn't work with all AVs and guess what, it 'doesn't' work with avast as it clearly hasn't got a clue about what executable (ashquick.exe) to use and nor does it have anywhere to input the executable.

The Internet Mail provider when set to High, could be your first indication that you have an undetected or hidden spam bot on your system.

There are times when what you post on here is going to be read by someone with little knowledge and that could put them at risk, you only have to look at the rash of infected/hacked web sites to see just how valuable the web shield is.
Windows 10 Home 64bit/ Acer Aspire F15/ Intel Core i5 7200U 2.5GHz, 8GB DDR4 memory, 256GB SSD, 1TB HDD/ avast! free 24.2.6105 (build 24.2.8918.824) UI 1.0.799/ Firefox, uBlock Origin, uMatrix/ MailWasher Pro/ Avast! Mobile Security

Alan Baxter

  • Guest
Re: What providers do I really need?
« Reply #13 on: February 28, 2009, 11:35:01 PM »
Hi, David.  Sorry to take so long getting back to you, but life beckoned.

Thank you for your detailed, informative reply.  I especially appreciate your opinion, the facts you provide, and, I hope, the willingness to try to understand where someone else is coming from.  If I may, I'd like to clarify some things and ask some followup questions in my response.

Well I don't know of what complexity you talk of with the web shield proxy, it is transparent in newer OSes with no input required of the user. Load is negligible in both RAM and CPU with modern systems with GB+ of RAM and fast CPU, but even with lower performance PCs it isn't a huge drain. If RAM is a factor then it is cheap and will improve overall system response.

Perhaps it wasn't clear, but both of my previous posts were about how I personally use Avast, and, in response to alanrf's request for justification, why I choose to use Avast this way.  That's why I said I'm the only user of this PC, and, more importantly, that I practice safe hex.  My PC is a nine year old 600MHz PIII machine with 1GB RAM on fully patched Windows XP SP3.  As you can see, I've got plenty of RAM, which is confirmed by the Task Manager and a third-party page file monitor.  My CPU is slow enough that page loading and rendering is severely CPU bound for non-trivial web pages.  Hence my avoidance of any additional CPU load caused by the Web Shield. (No matter how small. I didn't measure it.)

I wasn't referring to complexity of Web Shield's setup, which does appear to be completely transparent to the user.  I meant bugs and false positives, no matter how few, which are introduced by any additional layer of software.  I usually reduce my exposure to these issues by limiting myself to software which provides functionality I need and features I find desirable.  Since the Avast documentation indicates Web Shield blocks only the same malware that Standard Shield would intercept, I feel just as safe without it.  It's possible I might feel differently if I actually downloaded malware occasionally, but the fact of the matter is I never have.  None of the AVs I've used have ever found malware on my PC, except for eicar test files and false positives.  Safe hex is my belt and Standard Shield is my suspenders if my belt ever breaks.

Quote
It is by far better to keep malware off your system, rather than have to actually try to remove it when it is on the system, IMHO, but that's just another opinion.

I don't have any experience with that, so I defer to your opinion.  It sounds like Web Shield would help keep malware from ever getting saved to disk, but wouldn't a routine scan detect the download and remove it?  There's no danger of actually getting infected, because Standard Shield will prevent any malware Avast has in its database from executing.  Right?  I'm not advocating that using Web Shield is a foolish waste, rather I'm trying to understand if it's essential for me.

Quote
Whilst firefox 3 has introduced scanning of downloads, it also stated it doesn't work with all AVs and guess what, it 'doesn't' work with avast as it clearly hasn't got a clue about what executable (ashquick.exe) to use and nor does it have anywhere to input the executable.

Aaack! The Firefox 3.0.6 Downloads window says something like "Scanning for viruses...", but you say that it isn't!  I verified it doesn't load ashquick.exe with the Task Manager.  I don't like Firefox misleading me like that, but the Standard Shield does scan the test virus file eicar.com as soon as an attempt is made to write it to disk, either by Firefox or my third-party download manager.  Avast is the only AV installed on my PC.  Is Firefox lying to me?  Apparently IE7 doesn't automatically scan downloads either, but at least it doesn't seem to be claiming it does.  No matter.  I usually us a third-party download manager anyhow.

Edit: I've confirmed the erroneous and misleading "Scanning for viruses..." message in Firefox 3 in Mozilla Bug 461989.

Quote
The Internet Mail provider when set to High, could be your first indication that you have an undetected or hidden spam bot on your system.

Why's that?  Shouldn't Avast detect the spam bot's exe as malware and prevent it from running?  OK, let's suppose this is a case where the bot isn't in Avast's database.  I expect my personal firewall would detect an attempt to make an unauthorized Internet connection.

Anyhow, once you've allowed malware to actually execute on your system, isn't it pretty much "game over"?  I'm probably being overly pessimistic here.  I haven't had the experience with successfully repairing compromised systems you may have.

Quote
There are times when what you post on here is going to be read by someone with little knowledge and that could put them at risk, you only have to look at the rash of infected/hacked web sites to see just how valuable the web shield is.

According to my understanding of the Avast docs, the Standard Shield should prevent any malware from being executed that Web Shield would have caught being downloaded.  Am I mistaken here?  Have you run across any actual cases where Standard Shield allowed malware to run that Web Shield would have stopped?  In any event, I'll leave the Avast configuration advice up to those of you that have more experience lending this assistance.  I was just telling my story.

Just one more question.  I haven't disabled the IM provider, even though I never use IM. (I barely know how to spell it.)  I verified I don't use any of the programs in the IM settings dialog.  But the Instant Messaging details page reports 205 scans in the last hour.  The last scanned is D:\Documents and Settings\Alan Baxter\Local Settings\Temporary Internet Files\Content.IE5\TLOT839l\indexCAPWRRU6.htm.  What is it scanning if I'm not using IM?  Feel free to spank me and send me back to the FAQ if I've overlooked this issue there.

Edit: Added Mozilla Firefox bug report.
« Last Edit: March 01, 2009, 01:11:48 AM by Alan Baxter »

Offline .: L' arc :.

  • Avast Evangelist
  • Super Poster
  • ***
  • Posts: 1780
  • Thinking with Portals
Re: What providers do I really need?
« Reply #14 on: March 01, 2009, 02:44:21 PM »
-= its still more recommendable to leave all providers running.. well, avast is a light antivirus so a few drop in speed wont sacrifice your enjoyment while using pc..
Windows 7 (64-bit) Home Premium SP1
avast! 9 RC1