On or around Wed, 23 Aug 2006 23:05:36 +0100, "William Tasso" enlightened us thusly:
You must be lucky, or live right. I don't use OE and I take pains not to open suspicious stuff, but still get the odd one spotted by the AV software. The only one I had trouble with is one I opened deliberately to see what it was, having carelessly not updated the AV first. AV now on daily automatic updates...
I'd rate them more useful than that, although you're right that for the bets firewalling ability you need a separate box. not always practical though, and a software one is better than none. Correctly configured, the better software ones do things that a separate box won't - Outpost for example allows detailed control of what apps are allowed to do and where they're allowed to connect, and also flags changes in apps for you to check - if you know you've not changed any software and it pops up with "components have changed" then you think "'ello, why's that, then?"
granted that lot is more than yer normal firewall stuff, but it's very handy. Almost all the apps here are only allowed to connect to where I say they can, for example: the mail program can only do POP and SMTP to the mail server, not to any other address. Granted it could send viruses through that server, but if a virus were to get onto the machine and attempt to send mail by pretending to be OE for example, it'd get nowhere.