If I turn on “Show detailed action” on the WebShield the message (like “Scanning http://www.xxx.yy/index.html”) does not display in the tray until AFTER the page is ready rendered (all items displayed). Should the code be scanned BEFORE anything is renderes at all?
Or is this just a delay in the display?
Or is it becuase I have a proxy (WebWasher) filtering the pages?
Could be this if you do not ‘un-check’ the ‘Ignore local traffic’ option and add the port number of the WebWasher to be scanned by avast.
Click here to test avast! WebShield.
This should bring up a window asking to abort the connection or, at least, the popup message that an infected file was blocked by WebShield.
Another way to see if it’s working is loading a web page from your browser and see if it it shows up on WebShield panel as being the last scanned.
But, if the messages appears after all, well this is strange as it should be done ‘before’ saving the content to the disk. :
:-\
This is displayed when the last byte of the page is delivered - and as browser downloads in-line content in other threads, those may be downloaded before the index.html in it’s entirety.
However every byte is scanned before it leaves webshield and then the whole file is rescanned with packers enabled when the download is (almost) finished. If you want just the finall scan and want WebShield to block the content before unpackers proved not to be compressed virus - turn the intelligent stream scan off.
The pages ARE scanned (and filtered by WebWasher). Bacuse I both loose the ads, AND get virus warning on some pages. I guess avast! monitors port 80 and checks for viruses before WebWasher gets the page (WebWasher filters port 80, and acts as a proxy on 8080 for InterNet Explorer - so IE gets all pages from local proxy at 8080).
This “double” scanning. Will it slow down things? Or is it not noticable? If I turn of intelligent stream scanning, will thing get less secure (will a virus be able to get through), or will the display of the page be slower (will it wait to display it until everything is complete)?
I don’t think the “double scanning” would slow down anything. The first pass is scanned “plaintext only” (i.e. without unpacking any archives - which would be a problem anyway if the file isn’t completely downloaded), so it’s very fast.
Yes, if you turn off the stream scanning, the display will be slower (the page will be displayed after everything is downloaded, no progress).