A little research of Avast Realtime Shields by Me!

[naren17]

I did a little research on Avast Realtime shields, FileShield, WebShield & NetworkShield with 100 zeroday malware links from various malware downloadable sites like MDL, malwareblacklist, malc0de, etc.

I found out that

FileShield & WebShield has same protection, NetworkShield has different protection i.e

I copied all the links in notepad in 2 category, links blocked by WebShield & links blocked by NetworkShield.

I observed that all the malware blocked by WebShield were also blocked by FileShield. Not a single miss by FileShield.

All the malware blocked by NetworkShield were not blocked by FileShield. FileShield missed many blocked by NetworkShield.

My conclusion is that

WebShield, IMShield, MailShield & ScriptShield has the same protection as FileShield.

The only advantage of the shields are they can detect a malware before it reaches the FileShield & with different shield you can have different protection like default setting for FileShield & high setting for WebShield, etc. Otherwise I find the protection same.

So I am running Avast with FileShield, NetworkShield & Behaviour Shield.

This is just my observation. So if I am wrong or missing something, plzz correct me or guide me.

Thanxx
Naren

[DavidR]

Sorry, but the web shield can detect hacked/exploited sites with injected scripts, etc. etc. without even needing to know what the payload might be/do. The file system shield can't do that.

You only need to view the viruses and worms forum to see this in action, the web shield IMHO is probably the most important pro-active shield.

[CraigB]

  some poeple shouldn't tinker with thing's they know nothing about 

[igor]

Yes, you are wrong, for many reasons - some of which might be hard to explain

You are right that the scanning of WebShield & FileSystem shield is very similar, but:
1. they have different settings of unpacked archives (which, in case of P2P and IM Shield actually works as an optimization - you can scan specific files (the ones downloaded by P2P or IM programs) with full unpacking, while keeping the rest of the system on default settings, which doesn't slow down your machine)
2. the FileSystem Shield doesn't scan all the files by default (and if you set it to do so, it will slow down your system a lot) - so it may actually not detect some files downloaded by your browser, even if we forget about archives and unpacking
3. if you have a vulnerable browser (or browser addon/plugin), the exploit / malicious code may be executed there before, or even without, being written to disk - i.e. the damage can be done before the FileSystem Shield has any chance to stop it.
4. some detections may be bound to a particular shield; I'm not saying there are many of them, so it's unlikely you'd meet them with 100 samples, but they exist
5. WebShield also acts as a provider of the file source (it can store the information about where the file was downloaded from) - which may be used later even by the FileSystem Shield. So, by disabling the WebShield you actually lower the detection of the FileSystem Shield (or behavior of the AutoSandbox).
...

[naren17]

some poeple shouldn't tinker with thing's they know nothing about 

Its not like that buddy. People like me who think they are smart enough & show their smartness get a chance to learn something from their smartness & get even more smart

So thanxx for the info, knowledge frds & making me more smart.

By the way showing the smartness again, installed Avast with all the shields

Regards
Naren

[CraigB]

Yep it a good place to learn things around here, i just dont try anything till iv learn't it first though 

[Shiw Liang]

I think I should thank you narren17, I think I learned something new in this topic today

[naren17]

Yep it a good place to learn things around here, i just dont try anything till iv learn't it first though 

And I learn by trying things

Try to learn things by trying them & not after learning them coz the experience is amazing when learning things through mistakes, rather than learning things without mistakes. This way you will have lots of amazing stories to share with your kids & grandkids

Regards
Naren

[naren17]

I think I should thank you narren17, I think I learned something new in this topic today

You are most welcome to the GANG of learners

Regards
Naren

[CraigB]

Yep it a good place to learn things around here, i just dont try anything till iv learn't it first though 

And I learn by trying things

Try to learn things by trying them & not after learning them coz the experience is amazing when learning things through mistakes, rather than learning things without mistakes. This way you will have lots of amazing stories to share with your kids & grandkids

Regards
Naren

Im only talking about computers here and not lifes lessons as we all learn from our mistakes through life little journey's 

[naren17]

Yep it a good place to learn things around here, i just dont try anything till iv learn't it first though 

And I learn by trying things

Try to learn things by trying them & not after learning them coz the experience is amazing when learning things through mistakes, rather than learning things without mistakes. This way you will have lots of amazing stories to share with your kids & grandkids

Regards
Naren

Im only talking about computers here and not lifes lessons as we all learn from our mistakes through life little journey's 

Well lifes little journey means every journey of life including Avast Forum & computers, wot say?

Regards
Naren

[CraigB]

I would say that i dont know any kids that would give a two hoots about what amazing journey i might have been on and learnt on the forum, they would probably think i was on drugs if i bothered to try and tell them and then they would stick there heads back in there iphone 

[naren17]

I dont think so & I am sure your kids will love listening your amazing experiences, whateever they will be, but do remember you should be not on drugs at the time when sharing your experiences with them, then they too will share their iphone with you

Regards
Naren

[CraigB]

Getting back to reality! i dont have any kids, i dont have any drugs and i dont have an iphone, i wonder which one i should have  lifes a bliss 

[naren17]

As I already mentioned to you learn things trying . So learn to have kids trying, learn to have drugs trying, learn to have iphone trying, but it all depends on you what you want to learn trying

Regards
Naren