Freezer7Pro wrote:
I still don't see the downside of having an application which uses >20MB of RAM to keep an extra eye out for you. For example, my chatting computer has got the majority of scripts and such disabled, and yet it has, over the course half a year had almost 3500 pieces of spyware removed by the antivirus program I have on it.
the downside is you a have a low-level application intercepting all process calls to the system and inspecting them for viruses, malware etc. basically, whenever you click, run, install anything, the AV intercepts the call made from the shell to the sub-system, and inspects it for abnormal behavior.
off topic: the beauty of a root kit is that it actually operates as part of the subsystem itself, to hide itself from all calls made by the OS. for example, you wouldnt even see the infected files with your windows explorer, because anytime explorer makes a call to enumerate the file system, the rootkit can remove itself from the return value. AV is absolutely worthless in this case, because it uses the same techniques to watch processes that the OS uses.
im sure you can configure an AV product to only scan your downloads and what not, but most are very intrusive applications that cause a large performance hit.
for all you non-belivers out there, remember the days of blaster, and tcp attacks were generally around at a time when a firewall was still considered a hardware device that companies used. it wasn't until windows released SP2 that a software firewall was included. as long as your firewall is configured properly, this stops all internet-born threats cold in their tracks. until someone figures out a generically explotiable firewall hole, you wont see a blaster v2...