Real Time Scanning
The Real time Scanning (aka 'On-Access Scanning') is always ON and checks files in real time when they are created, opened or copied. (as soon as you interact with a file, Comodo Antivirus checks it). This instant detection of viruses assures you that your system is perpetually monitored for malware and enjoys the highest level of protection. You also have options to automatically remove the threats found during scanning and to update virus database before scanning. It is highly recommended that you keep the Real Time Scanner enabled to ensure your system remains continually free of infection.
The Real Time Scanning setting allows you to switch the On Access scanning between Disabled, Stateful and On Access and allows you to specify detection settings and other parameters that are deployed during on-access scans.
To set the Real Time Scanning level
-
Click on the 'Real Time Scanning' tab in the 'Scanner Settings' panel.
-
Drag the real time Scanning slider to the required level. The choices available are Disabled (not recommended), Stateful (default) and On Access. The setting you choose here are also displayed in the Summary screen.
-
On Access - Provides the highest level of On Access Scanning and protection. Any file opened is scanned before it is run and the threats are detected before they get a chance to be executed.
-
Stateful (Default) - Comodo Antivirus is one of the most thorough and effective AV solutions available and it is also very fast. CAVL employs a feature called Stateful File Inspection for real time virus scanning to minimize the effects of on-access scanning on the system performance. Selecting the 'Stateful' option means CAVL scans only files that have not been scanned since the last virus update - greatly improving the speed, relevancy and effectiveness of the scanning.
-
Disabled - The Real time scanning is disabled. Antivirus does not perform any scanning and the threats cannot be detected before they impart any harm to the system.
Detection Settings
-
Automatically quarantine threats found during scanning - When this check box is selected, the Antivirus moves the file detected to be containing the malware, to Quarantined Items. From the quarantined items the files can be restored or deleted at your will (Default = Disabled).
-
Automatically update virus database - When this check box is selected, Comodo Antivirus checks for latest virus database updates from Comodo website and downloads the updates automatically, on system start-up and subsequently at regular intervals (Default = Enabled).
However, some people like to have control over what gets downloaded and when it gets downloaded Antivirus and program updates can sometimes be quite large (for example, 50 MB). If somebody has a slower connection (or tends to have many downloads going at the same time - movies, software etc.) then an automatic update for Comodo Antivirus can interfere with their other work. It can also slow down general web surfing - causing aggravation to the user. Furthermore, business users (or network administrators) may not wish to automatically download because it will take up to much bandwidth during the day. They may wish to download the updates in the evening. A user that deselect virus updates have to periodically select 'Update Virus Database'.
-
Show notification messages - Alerts are the pop-up notifications that appear in the lower right hand of the screen whenever the on-access scanner discovers a virus on your system. These alerts are a valuable source of real-time information that helps the user to immediately identify which particular files are infected or are causing problems. Disabling alerts does not affect the scanning process itself and Comodo Antivirus still continues to identify and deals with threats in the background. For more details on Antivirus alerts, click here (Default = Enabled).
-
Heuristics Scanning Level - Comodo AntiVirus employs various heuristic techniques to identify previously unknown viruses and Trojans. 'Heuristics' describes the method of analyzing the code of a file to ascertain whether it contains code typical of a virus. If it is found to do so then the application deletes the file or recommends it for quarantine. Heuristics is about detecting virus-like behavior or attributes rather than looking for a precise virus signature that matches a signature on the virus blacklist.
This is a quantum leap in the battle against malicious scripts and programs as it allows the engine to 'predict' the existence of new viruses - even if it is not contained in the current virus database.
The drop-down menu allows you to select the level of Heuristic scanning from the four levels:
-
Off - Selecting this option disables heuristic scanning. This means that virus scans only uses the 'traditional' virus signature database to determine whether a file is malicious or not.
-
Low(Default) - 'Lowest' sensitivity to detecting unknown threats but will also generate the fewest false positives. This setting combines an extremely high level of security and protection with a low rate of false positives. Comodo recommends this setting for most users.
-
Medium - Detects unknown threats with greater sensitivity than the 'Low' setting but with a corresponding rise in the possibility of false positives.
-
High - Highest sensitivity to detecting unknown threats but this also raises the possibility of more false positives too.
-
Do not scan files larger than - This box allows you to set a maximum size (in MB) for the individual files to be scanned during on-access scanning. Files larger than the size specified here, are not scanned. (Default = 20 MB).
-
Keep an alert on the screen for - This box allows you to set the time period (in seconds) for which the alert message should stay on the screen (Default = 120 seconds).