But still the question remain unanswered that what to use n how? Looks like for the time being using both is best bet, till the these industries find a better way out, isn't it? Even if it means two programms performing kernel-level scanning, atleast it is(was) working till now....