Internet.com
CWSApps
CWS Toolbar
 

Stroud's Reviews
Virus Scanners


Anti-viral software often encompasses two very separate functions -- virus scanning and virus cleaning. Most of the current apps integrate these dual functions, but you'll typically find an app that excels at one yet lags at another. The best app in this category, McAfee's VirusScan, does an excellent job of finding known and possible new viral infections. However, before it's latest release (v3.0), VirusScan was nowhere near being the best client for removing exposed threats. Clients like F-Prot Pro and Norton AntiVirus are also adept at finding those deadly terrors that lurk deep within the recesses of your computer, but they do an even better job of ensuring that those terrors are eradicated efficiently and without damage to the rest of the computer. Thankfully, there are anti-viral apps for most every OS available now. ThunderBYTE AntiVirus and Carmel AntiVirus are two apps that cover a large number of OSes -- each has released separate versions for all of the major Windows platforms.

The danger of your computer contracting a viral infection cannot be underscored. Two years ago I learned firsthand the lethal potential of these miscreants. Thanks to a strain of the virus Azusa, my computer met a very untimely death. Since then, I've grown to depend on virus scanners to ensure that the same thing doesn't happen again. College students and those who often download files from friends, BBSes, LANs, and even the 'net itself are prime targets, but the potential for a virus is shared by most all computer users. Although the chances of contracting a virus are generally slim, the havok that one can wreak far outweighs the cost and time involved in using a virus scanner. For thease reasons, I thoroughly recommend checking out one or all of the apps featured in this section.

The following are reviews for each application featured on the 16-bit and 32-bit Virus Scanner pages. Additionally, you can add your own comments and discuss the clients reviewed here with other users in our online user conferencing area. Each app has its own conferencing room which can be accessed by clicking on the individual chat icons below.



VirusScan -- McAfee's VirusScan is an excellent utility for catching any viruses that may be hiding out in the darkest recesses of your hard drive. Its graphical interface is both visually appealing and intuitive. VirusScan can run in the background, allowing you to continue working on other projects while it does its job. The newer releases do an excellent job of using minimal resources while running in the background. VirusScan's on-line help documentation provides useful insight into the program's many options. These options include the ability to configure the level of scanning desired, the ability to keep and/or print an activity log, and several additional user-configurable preferences. VirusScan's best feature is the fact that it gets updated very often to accommodate for new viruses. While great at catching many viruses, the 2.x and earlier versions of VirusScan lacked the ability to remove many types of viruses. For this task, a program like F-Prot or the latest VirusScan version is necessary.

The latest release of VirusScan, v3.0, offers the highest level of virus detection rates in the industry as well as advanced removal capabilities and stellar overall performance. In addition, the new release also includes Virus Shield, which runs in the background and automatically checks files for viruses, and the impressive new Hunter scanning technology, which dramatically improves scanning performance thanks to its 32-bit, multithreaded implementation designed to utilize the latest advances in memory and I/O management. The 3.0 release is available for Windows 3.x, 95, and NT platforms and also supports virus detection and removal of polymorphic and macro viruses (including Office97 viruses). Additional features in this release include ZIP file scanning, an Emergency Disk creation utility, activity log reports, and ScanPM (a command-line scanner that operates in protected mode environments like DOS), All in all, VirusScan 3.0 is by far the best virus scanner in the industry.

Pros: Easy to use, scans in the background, cool interface, advanced virus scanning engine
Cons: The older releases (2.5.x) do not remove (or scan) viruses as well as F-Prot and other scanners
New: Hunter scanning technology, VirusScan Console, Office97 virus detection and removal, more
New for July VirusScan DAT: Detection of 165 and removal of 84 new viruses (v3108); complete list here

New in v3.1.8/9: Desktop Management Interface (DMI) alerts, compressed file scanning support (ZIPs, CABs, etc.), improved detection technology for polymorphic viruses, scanning support for LS-120 floppy drives, more
Upgrade Meter: 4

Version Reviewed: 3.1.9
Date of Review: 8/18/98
Conf Add your own comments in our
online user conferencing area

Operating Systems / Latest Versions:

Windows 95/98 - v3.1.9 DAT 3107a. Windows NT: Intel - v3.1.4; Alpha - v3.0.2. Windows 3.x - v3.1.9.
UNIX: IBM AIX - v3.1.4; Sun Solaris, HP-UX - v3.1.2; Sun OS, FreeBSD, Linux - v1.0.1
Macintosh - v3.0.1. OS/2 - v3.1.7. DOS - v3.1.5




Inoculan -- Inoculan has long been recognized as the premier virus scanning suite for Windows NT network environments, but with the recent release of a Windows 95 version the client now performs just as well on standalone computers. Those in need of a single package for effectively eliminating virus threats from floppy disks, removable disks, shared network files, e-mail attachments, and Internet downloads will find an excellent solution in Inoculan. Even better, for a limited time users can purchase the Windows 95 version of Inoculan for a discounted price of $29.95 (regularly $69).

It should come as no surprise that Inoculan performs at its best when protecting your LAN from viruses. Network protection features unique to Inoculan include Virus Wall, which prevents infected workstations from spreading viruses to other workstations or your servers; Virus Quarantine, which works with Virus Wall to isolate an infected file (or files) before damage can be done to other files on the computer or on a networked computer; Microsoft Exchange and Lotus Notes agents that work to ensure messaging and groupware protection for your network; seamless integration with Netscape and Internet Explorer to provide real-time scanning protection when downloading files over the 'net; real-time compressed file scanning capabilities for added protection against viruses residing in compressed files (with support for ZIP, ARJ, MIME, UUencoded, CAB, and Microsoft Compressed formats); and Macro Virus Analyzer, which gives you advanced protection from Macro viruses.

Additional Inoculan features include real-time scan and cure capabilities (via a VxD Virtual Device Drive that runs in the background), automatic virus definition and program updates (free for registered users), extensive alert options, real-time scanning for floppy disks, disaster recovery (via a rescue disk), advanced detection for all types of viruses (including boot sector, memory resident, file multipartite, stealth, and polymorphic viruses), heuristic technology for detecting many of the newer types of viruses (including a variety of known and unknown Macro viruses), command line support, traybar icon support, the ability to run as a system service (under Windows NT), an integrated virus encyclopedia (with brief details on the most common viruses), and web links to Inoculan's excellent Virus Information Center site.

While both Norton AntiVirus and McAfee VirusScan offer more polished interfaces and better overall performance, Inoculan reigns supreme when used in network environments, especially under Windows NT. The competing offerings also present the user with more options and configuration choices. But when it comes to maximum protection, state-of-the-art detection capabilities, and the ability to protect your users from all types of virus threats, Inoculan is one of the best virus scanners currently available. If you're looking for Fort Knox-style security in an inexpensive package, you won't need to look any further than Inoculan.

Pros: Excellent detection capabilities, advanced support for networks and Internet downloads, inexpensive
Cons: Performance and advanced configuration options lag behind competing offerings, homely interface
New: This is the initial review for Inoculan
New for July Definition Update: Detection and removal of new viruses (v4.11b - updated 7/27/98)

Version Reviewed: 5.0
Date of Review: 8/11/98
Conf Add your own comments in our
online user conferencing area

Operating Systems / Latest Versions:

Windows 95/98 - v5.0 Build 64. Windows NT: Intel, Alpha - v4.0 Build 270




F-Prot and F-Secure -- F-Prot for DOS was one of the first virus scanners ever released; today it remains one of the fastest scanners and one of the best clients available for both catching and removing viruses. Yet while the freeware DOS version manages to hold its own against other scanners in terms of speed and effectiveness, its limited usability and lack of support for platforms other than DOS continue to keep it from being more competitive with other virus scanners.

Thankfully there are now two deluxe commercial versions available called F-Prot Professional and F-Secure that capitalize on the freeware version's deficiencies while still retaining its distinctive competencies. F-Prot Pro and F-Secure deliver many of the same great features found in similar Windows-based scanners including the current champ, VirusScan. Both clients sport an intuitive, graphically appealing interface, can be updated regularly with new virus definitions to keep up with emerging virus strains, can run in the background while you work on other projects, and offer extensive help resources including direct links to the web for the latest virus information.

F-Secure offers the same features and interface as F-Prot Professional while also adding DataFellows' impressive new CounterSign technology. CounterSign technology makes it possible for standalone or networked users to benefit from the use of two or more scanning engines that perform multiple simultaneous scans, including both on-demand and real-time scans. The downloadable release currently uses both the F-PROT virus engine and the AVP engine.

One of F-Prot Pro and F-Secure's best features is the Gatekeeper, which, like VirusScan's VirusShield, actively scans files for you in the background. In addition to being used for common tasks like checking files on a floppy disk or scanning the contents of a compressed archive, F-Prot Gatekeeper is specifically designed for use with the Internet and to protect your computer from viruses that have been transmitted over the Internet. Using advanced Dynamic Virus Protection technology (DVP), Gatekeeper checks all your e-mail messages and downloaded files as they arrive, ensuring that any viruses are detected and removed before they have the opportunity to infect your computer. The real-time background scanner detects traditional viruses as well as polymorphic and encrypted viruses.

Additional features include a non-resident virus scanner, a rule-based scanner designed to detect previously unknown viruses, a checksumming program that both detects and destroys previously unknown viruses, advanced scheduling capabilities, and the F-Agent -- a traybar icon that allows for easy access to the F-Prot program and that also lets you know when Gatekeeper is running in the background. The virus scanners are available on all three major Windows platforms and also offer a unique feature called Web Club that allows registered users to access technical information, program updates, and updated virus definitions on the web.

While perhaps not the best clients in their class, both F-Prot Pro and F-Secure are extremely quick and effective virus scanners that deliver in all areas. And at just under $100, the scanners may be quite a bit more expensive than some comparable clients (including VirusScan), but for advanced users looking for the ultimate in redundant virus scanning capabilities the cost will be well worth it.

Pros: Quick and extremely efficient virus scanner; sports Dynamic Virus Protection technology (DVP)
Cons: Price, lacks some features found in VirusScan, updates aren't as readily available as for VirusScan

New: New Windows-based F-Secure release with CounterSign Technology, Dynamic Virus Protection technology (DVP), revised interface, F-Agent traybar agent, Gatekeeper, more
New in v4.01a: Now detects more than 2000 macro viruses, updated virus definition, bug fixes; Release Notes
Upgrade Meter: 2

Version Reviewed: 4.01a
Date of Review: 7/14/98
Conf Add your own comments in our
online user conferencing area

Operating Systems / Latest Versions:

Windows 95/98. Windows NT. Windows 3.x. (F-Secure AntiVirus - all v4.01a)
DOS. (F-Prot Professional - v3.01)




Norton AntiVirus -- Symantec's Norton AntiVirus (NAV) is designed to protect your computer from every imaginable type of virus, regardless of rather the virus has been contracted from a file downloaded off the 'net, a floppy disk, your hard disk, as an e-mail message attachment, or from an office network. NAV scans for and removes normal viruses as well as the more advanced Macro viruses (including Word and Office 97 varieties) and polymorphic viruses. The client will even scan up to one level deep within compressed files.

NAV is replete with user configurable options and includes several handy tools for a variety of tasks, including automatically downloading the latest virus definition updates (via LiveUpdate), creating an emergency backup disk in case a virus infects your system's boot sector or RAM (via RescueDisk), and automatically scanning your files in the background (via Auto-Protect). Scheduling routine background scans is another quick and painless process thanks to the integrated Norton Program Scheduler.

Pre 5.0 releases of NAV can also be set up as a helper application for your favorite browser, while the 5.0 release offers a web browser plug-in that automatically scans file downloads for you. The helper app in the earlier releases performs a similar function by scanning files for viruses as they are downloaded from the 'net.

Recent versions of Norton AntiVirus (v4.0 and later) incorporate Symantec's advanced Bloodhound technology to detect new and unknown viruses; currently the client detects more than 12,000 known viruses as well as many more unknown viruses via the Bloodhound technology. The program's help documentation is adequate but pales in comparison to those of rivals like VirusScan and F-Prot Pro.

However, Symantec does offer excellent help resources through the web, including the incomparable AntiVirus Research Center. And while no slouch at detecting viruses, Norton AntiVirus also lacks the blitzkrieg-like speed of its two closest competitors. Still, if you're looking for a fast, dependable virus scanner with free updates and excellent online help resources, Norton AntiVirus is your best bet.

Pros: Advanced Bloodhound technology, integrated program scheduler, excellent set of features, easy to use
Cons: Lacks the speed, help documentation, and some features of competitors like VirusScan and F-Prot Pro
New for August Definition Update: Detection and removal of new viruses (updated 8/19/98)

New: Bloodhound technology, Norton Program Scheduler, LiveUpdate, macro virus protection, more
New in v5.0 Beta 2: No information yet - check back or send us an e-mail if you have what's new info
Upgrade Meter: N/A

Version Reviewed: 5.0 Beta 2
Date of Review: 8/21/98
Conf Add your own comments in our
online user conferencing area




Carmel AntiVirus -- Carmel has created an efficient and easy to use Anti-Virus program with releases for Windows 95/NT as well as Windows 3.x. Carmel AntiVirus includes scanning and removal of a long list of common viruses, including Macro viruses, and monthly signature file updates are provided via Carmel's Web site to combat recent virus developments and mutations.

Heuristic scanning methods also assist in the task of combating new viruses and the engine will scan up to ten levels deep in compressed files. Carmel AV for NT comes with a simple built-in function to schedule basic scans, but if you wish to do unattended scans, you must manually enter all the parameters for the NT schedule service. As long as the user has the proper permissions, Carmel AV will scan network drives and scans for viruses in the background.

Carmel AV will create an emergency disk to boot from if a virus does manage to get a foothold in the system, and can then clean out the offending code. It also creates a database of EXE file lengths to look for possible virus infections at a later date and will create a log of all significant events during a scan. The help documentation is substantial, but it is not a substitute for a manual.

New features in the latest releases of the scanner include ICSA certification (International Computer Security Association), scanning for downloaded files, full drag and drop capabilities, e-mail scanning for viruses in attached files and archives (compliant with RFC 822), a new macro virus scanning and cleaning engine, and an improved internet update delivery program.

The client costs $89 to register and is available for a free thirty-day evaluation period. There are currently more than 6000 viruses in the database. The engine scanned 963 EXE files in 50 sec and 6308 total files (including compressed files) in 4:01. There are both less expensive and more powerful virus scanners available, but Carmel AntiVirus is a relatively quick, easy to use scanner that will do everything it takes to ensure the protection of your computer.

Pros: Easy to use, scans in background, virus updates with heuristic scanning, scans e-mail/file downloads
Cons: Slow startup due to exhaustive memory search, Win 3.x style help file, relatively expensive price tag

New: Automatic Internet updates, now scans downloaded files, full drag-and-drop capabilities, more
New in v2.4: ICSA certification, complete e-mail virus scanning, macro virus scanning and cleaning engine

Version Reviewed: 2.4
Date of Review: 6/4/98
Upgrade Meter: 5
Conf Add your own comments in our
online user conferencing area




ThunderBYTE Anti-Virus -- ThunderBYTE's Anti-Virus utility is another excellent client for catching and removing any viruses that may be crawling around your hard drive. Like McAffee's VirusScan, TBAV comes in both Windows 3.x and Windows 95 versions and sports an attractive graphical interface. TBAV runs well in the background but is slightly slower at this than VirusScan. Recently added features for ThunderBYTE include advanced security options, alarm sounds (with WAV audio clips), and detection for platform-specific viruses. Like McAfee's VirusScan, the 8.0 release of TBAV recently received a speed infusion thanks to its incorporation of AMIR technology. This technology aids in making TBAV's virus detection and cleaning engine extremely fast (but not quite as fast as VirusScan, thanks to its Hunter scanning technology). One significant advantage that TBAV has over VirusScan is its on-line documentation listing which explains the nature of thousands of viruses. While nowhere near as comprehensive or detailed as Patricia Hoffman's Virus Information Summary List, TBAV's listing is still more complete than that of VirusScan. In terms of performance, TBAV and VirusScan are very similar, with VirusScan having a slight edge in background processing. Both apps are updated frequently with new virus data files. In other words, deciding between these two clients will likely once again come down to your own individual preferences.

Pros: Easy to use, scans in the background, cool graphical interface, virus information
Cons: Doesn't remove (or scan) viruses as well as F-Prot, a bit slower than VirusScan
New: AMIR technology (lightning fast macrovirus detection and cleaning), security options, alarm sounds, more
New for May Definition Update: Detection and removal of new viruses (updated 5/26/98)

Version Reviewed: 8.07
Date of Review: 7/17/98
Conf Add your own comments in our
online user conferencing area



Copyright 1998 - Mecklermedia Corporation. All rights reserved. Legal Notices.
This material may not be published, broadcast, rewritten, or redistributed.
Stroud's Consummate Winsock Applications and The CWSApps List
are the exclusive trademarks of Mecklermedia Corporation.