Av is only good for stopping the known bad and needs to be up to date daily. Whitelisting with it is the best way.