Antivirus Scanners
What to look for
Antivirus software is an essential consumer application.
Once installed, you’ll usually have to complete a setup process. This could involve:
* scheduling scans and updates;
* selecting which files to scan;
* choosing what to do in the case of an infection; and
* opting to receive email notification of viruses and updates.
In many cases, the software’s initial settings should provide adequate protection, but for other software, be prepared to make adjustments to ensure improved protection.
On-access detection
A key part of successful antivirus software is how and when it detects viruses. Products should identify an infected file before it gets on your system or when it’s manipulated, such as opened or renamed. This is called on-access or real-time detection. It runs in the background while your computer is switched on, checking for changes to your system or suspicious activity.
On-access detection may involve:
* looking for changes to file sizes;
* checking parts of a file that’s opened, moved or renamed; or
* scanning different entry points (see glossary below).
Antivirus software should perform some level of on-access detection, by default, such as scanning all file types.
On-demand detection and scheduled scans
Antivirus software can also be set to scan your entire computer or selected files and folders at a time that suits you. This is called on-demand or manual detection. It’s generally more thorough than on-access detection so can take some time.
Most products will automatically schedule the on-demand scan, but you should be able to choose a time that suits you. You should also be able to scan specific files and folders. However, to ensure your computer isn’t infected by a virus, your settings shouldn’t exclude parts of your system.
To check for a product with sensible on-demand detection settings, look for software that scans all files and file types and offers a high level of protection by default.
Automatic updates
Simply installing antivirus software isn’t enough to completely protect your system from viruses and worms.
Unlike most other software, antivirus requires regular updating - it’s only as good as its last update.
Most antiivirus software will automatically update the signatures files by default. This is done by routinely connecting to the manufacturer’s server via the internet, checking for new files and then downloading them. Programs typically do this every time you log onto the internet, every 24 hours or every 15 minutes.
The problem is that many default times may not match your web usage patterns and you need adequate time to download the files. If you disconnect from the internet during the middle of a download, the software won’t be up-to-date and your computer won’t be protected from a new virus outbreak.
Antivirus software should provide the option to change any of these settings and to schedule the automatic updates at a specific time, such as when you know you’ll be online for an extented period.
Many products have a manual update function, which may be useful for people on a slow dial-up connection. However, because you have to remember to update weekly, or more often, we recommend you avoid using this, if possible.
Alerts
If your computer is infected with a virus, antivirus softwrae should alert you to the infection (if it detects it). Some alerts are very basic, simply notifying that a virus has been detected and dealt with. Others are more detailed, providing the file names, the location on your computer and current status.
Some software will automatically try to delete, repair or clean the infected files, while others will let you choose to conduct a complete scan of the file or decide what action to take.
The most important thing to remember about alerts is not to panic. An alert doesn’t mean that your computer is going to need a complete overhaul. In most cases, it’s simply showing you that your antivirus software is doing its job - identifying viruses and worms and dealing with them before they can cause damage.
Most software should provide a number of ways to handle infections, including quarantine, repair, move/rename, cure and delete. There’s usually a default setting, but you should be able to change it.