Just a few years ago...
Avira was too slow on the draw to prevent injections attacks. It could recognize the zip file; but couldn't stop it in time to prevent total pwnage of my clients machine by a .bat file. It did a remarkable job recognizing most threats though. Maybe it has improved. I hear it uses more RAM than most solutions now, so maybe it has improved on the trigger.