Not sure how to answer you question, although my understanding is that WSA will defer to other AVs first and only spring into action if needs be.If Avira says a file is clean, WSA probably does nothing, although WSA doesn't scan files anyway  unless they are executables, or other potentially dangerous files.

 

However, I do have a question of my own: Why do you feel the need to run Avira with Webroot? It is clearly duplication and Avira is a significant drain on resources. If you want another layer of security, it is far better to use a complementary soft rather than a one that purports to do the same thing.

 

 

---

Hi Like2know

 

Welcome to the Community Forums.

 

I believe that WSA will still scan any file that it would normally, irrespective of what Avira may have done prior...that makes sense given how would WSA know what Avira's determination would be should they differ? However, as Nemo correctly stated WSA will only scan a much smaller set of files focussing on only those that are known potential infection vectors or active, i.e., it does not waste it's time or resources on unproductive scanning, as inactive malware is not dangerous...until it activates...at which time WSA will pounce on it.

 

Hope that helps?

 

Regards, Baldrick

---

Hi Nemo,

 

Thanks for your insight.

 

I'm using an additional AV because I do a lot of work offline (without WSA cloud access).  Additionally, Avira's assessment of URLs is highly rated, and I like overkill in URL evaluation.

 

I'm still wondering about WSA's interaction with other AVs. I'd be happiest if WSA would go ahead and inspect an executable after Avira said it was clean, because WSA might notice something that Avira had missed.  (WSA's cloud-based information probably arrives sooner than Avira's updates, and WSA's algorothims might be slightly different from Avira's.)

 

Also, you mentioned complementary software that might fit better with WSA than just adding another AV.  I'm hoping you could name some things that might be complementary, if not by name, then perhaps by general category.  At present I periodically run Malwarebytes-free manually. What do you think?

 

Thanks very much.

---

Hi Like2know

 

Just to add in relation to offline use; WSA protects very well without an internet connection as it does have some special signatures/definitions stored locally for just suchma circumstance...but also when offline WSA's Offline Shield ramps up the heuristic detection features to compensate in terms of detection.

 

But it is worth pointing out that if offline the potential exposure to threats is much reduced and is in some way different to when online...hence WSA approaches that situation somewhat differently too.

 

Hope that helps further?

 

Regards, Baldrick 

---

Hi Like2know

 

I see you are using MBAM free as a second opinion scanner and that is a good choice used by several of us here.

 

You may wish to complement WSA with an Anti-Executable and could do worse than try the software Baldrick refers to in his signature.

 

There are other options, for example an additional Anti-Exploit, and you can PM me if you would like to take this further as we are not supposed to discuss other software directly in the community.

 

 

---