Anti-virus and anti-malware programs?

[jinjuku]

YouTube has ads with blatant Crypto-Currency minebots embedded

 

[jinjuku]

HTTPS Everywhere generally is good, but on occasion could mess up a poorly made website into appearing to be broken. If some site doesn't load, try to disable it and see if it helps.

If your site isn't HTTPS you shouldn't be getting any visitors.

 

[sholling]

@rojo
@jinjuku
@sholling
@panteragstk

I'm most in agreement with jinjuku on post #25

I'm not saying "don't protect yourself". What I am saying is that 3rd party AV software is NOT some magic bullet that will prevent you from getting and spreading viruses. When you look at the advantages vs. disadvantages of 3rd party AV, it becomes clear that you need a multi-faceted approach to protect yourself and you should not be relying on 3rd party AV as your primary line of defense.

All of the items mentioned by jinjuku tend to do a better job than 3rd party AV s/w, while using less resources for the CPU, the $ has nothing to do with it.

If you think 3rd party AV s/w will protect you 100% of the time, and if you rely on 3rd party AV s/w for 100% of your protection, then the Norton marketing dept has gotten one over on you! And, I use Norton as the example b/c it is not the best 3rd party AV s/w by far, it simply has the best/most marketing.

And, yeah, BACKUPS are critical!

No malware product is perfect and not it is not a substitute for common sense safe computing, but it's just silly to fall for the line that good 3rd party software is always a resource hog or that you're just too smart to need it. Are you too smart/too good a driver to bother with seatbelts or anti lock brakes? Script kiddies aside, the professionals developing ransomware and botnet software are pretty darned smart themselves and are experts at getting their nasties on other peoples' computers. Just ask the geniuses at the NSA who installed Russian AV software only to learn later that the Russians may have installed a backdoor for spying. Ask the geniuses at hospitals and universities that were locked out by ransomware. Ask all the folks whose passwords were stolen because the kid surfed to a porn site or downloaded a cracked game. No, anti-malware software is not foolproof but skipping it makes no more sense than skipping anti-lock brakes or fire/carbon monoxide detectors. Don't get me wrong, some on here may just be sooooooo smart and so careful that they really don't need to bother with effective (that does not include Windows Defender) anti-malware products, but urging other less knowledgeable or less careful members or members with kids to skip simple common sense safety precautions is irresponsible.

 

[sholling]

Sholling I hope you are retired, as I think your career is pretty much if not entirely obsolete.

I'm semiretired but the job is nearly as obsolete as ER doctors - after all most of us have 1st aid kits, aspirin, and the internet.

Please tell me what bank or major financial institution fails to install commercial AV software so I can make sure that I have no stock in them.

 

[BoredSysAdmin]

Just ask the geniuses at the NSA who installed Russian AV software only to learn later that the Russians may have installed a backdoor for spying.

Not accurate. https://www.theguardian.com/technology/2017/oct/26/kaspersky-russia-nsa-contractor-leaked-us-hacking-tools-by-mistake-pirating-microsoft-office

Ask the geniuses at hospitals and universities that were locked out by ransomware.

Not accurate at all. All medical equipment is severely lacking in basic security. Many of medical devices still run ancient versions of Windows and they need to connect to hospital network to be centrally managed. Not much hospital's underpaid, understaffed, and under-experienced IT team could do about. Could steps be done to mitigate some of these issues - Sure, but it needs to start at the top - people who decide the policy and budgets - you know the boring stuff. Maybe they should offer a bit higher IT salaries, maybe they should look to hire at least security consulting companies once in a while. Maybe security audits needed to be mandated part of HIPAA compliance. In short - people who allowed such critical ransomware attack to happen are NOT geniuses because hospital management could not be bothered to care about IT besides basic functionality.

More info:
https://www.hipaaformsps.com/medical-device-security/

 

[jinjuku]

I wouldn't argue against having AV / Anti-Malware, its just that the included MS tech (Defender, *sorry but I shouldn't have said security essentials*, firewall, AppLocker) with other means is needed.

UTM products from Sophos, WatchGuard, Barracuda are going to be in use at Banks and Hospitals.

The recent hospital ransomware was because IT staff at hospitals and their budgets are seen as evil.

 

[jinjuku]

I have a few hospitals for customers. One with 70 beds has a single IT person.

 

[BoredSysAdmin]

I have a few hospitals for customers. One with 70 beds has a single IT person.

So, either computers don't break at night or they must be close and everyone leaves home for the night, right?

No, I know! That single IT staffer suffers from clinical insomnia and doesn't need to sleep, ever

 

[jinjuku]

So, either computers don't break at night or they must be close and everyone leaves home for the night, right?

No, I know! That single IT staffer suffers from clinical insomnia and doesn't need to sleep, ever

She's the one that told me she's the only IT staff. I don't know if that's just her shift but she sounds absolutely worn out when I talk to her.

It's not like I flew out to validate what was said during a tech support call.

 

[MrBoat]

I've used Linux on/off for around 20 years. I keep a Win machine typically for games and music. Since then, I have not had an issue with a virus, or a crash, for that matter.

Have always had careful surfing habits. Every virus I ever had, was not by something I did, but always from letting other people/kids use my machine.

People in my email address book have been advised not to send frwrds. If they can't help themselves, I delete (Sorry, mom) them.

My PC means nothing to me. I have redundancy that is not attached to it. If my PC becomes problematic, I have no issue with formatting and starting over. I think it's actually healthy to start out with a fresh OS occasionally.

 

[BoredSysAdmin]

She's the one that told me she's the only IT staff. I don't know if that's just her shift but she sounds absolutely worn out when I talk to her.

It's not like I flew out to validate what was said during a tech support call.

I was clearly sarcastic, but yeah. It must be very hard on her

 

[jinjuku]

I was clearly sarcastic, but yeah. It must be very hard on her

Thanks for the clarification. I wouldn't want to work in health care IT.

 

[Cos]

Unless your PC is really old or using the most basic of processors, a good AV program will not take up much resources, at least not enough that you will notice.

• I would say that 99.9999% of PC users won't even notice a difference in performance, if it does, you can always turn it off/disable it when you are not surfing the web
• Two best programs I would recommend (for home) are Webroot and Bitdefender. I say this from having used pretty much every program over the years, this may change, but for now I don't think you can go wrong with either. Both test extremely well from independent studies, and use minimal resources.
• Fry's has a special on Webroot Internet Security Complete (I currently use) it's 29.99 but if you have a frys promo code you can get it for $19.99. The program is normally 59.99 I have used it for the past 2 years
• SPECIAL NOTE: Don't every pay for more than 1 year license, they always try to get you buy extra years or auto-renewal at insane rates. Just check sites like www.techbargains.com, www.dealigg.com, www.dealsea.com, they always run promos and you would be ignorant to spend more than 20-30 dollars vs 50-70 renewal they try to charge you.

I am very safe when I surf, but even I type in the wrong address sometimes or accidently click on the wrong thing. Yes I could go back and do a system restore, clean out my caches, etc. but for 20 dollars which is less than a 2 dollars a month, its worth the investment.

I have both Webroot Internet Complete and Malwarebytes (Which I bought a long time ago and have lifetime license with). I have never gotten a virus so both were purchases well spent.

Yes the technical people who preach "Don't use Virus Protection or Don't Need" probably don't need it because, as has been demonstrated by a few of the posters here, there are steps you can take to greatly reduce your chance of Virus/Malware. But...for the other 95% of users, I wouldn't recommend surfing the web without one. It is definitely not a silver bullet, but it will greatly reduce the chance of getting a virus.

 

[panteragstk]

Thanks for the clarification. I wouldn't want to work in health care IT.

I did for almost a year. For a MAJOR hospital in Dallas. The outdated security alone is enough to give you a headache, but the EUs are the worst I've ever dealt with.

I ask, "did you restart the computer?" "yes" I remote in and it hasn't been restarted in over 90 days. 25 people still logged in. Wayyyy too many staff using multiple computers without logging off. This was in 2013 and they had JUST gotten away from netware.

Don't get me started on the outdated OS on the MRI, CT machines. Glad the vendor gets to work on those.

 

[jinjuku]

This was in 2013 and they had JUST gotten away from netware.

Is that a joke?

 

[panteragstk]

Is that a joke?

Sadly no...I worked for the state of TX for a few years and they used Netware AND AD. That was a giant mess. Granted that was in 2005 so not as bad, but come on.

I won't be working for any government agencies again. Way too far behind.

 

[pewternhrata]

Not accurate. https://www.theguardian.com/technology/2017/oct/26/kaspersky-russia-nsa-contractor-leaked-us-hacking-tools-by-mistake-pirating-microsoft-office

Not accurate at all. All medical equipment is severely lacking in basic security. Many of medical devices still run ancient versions of Windows and they need to connect to hospital network to be centrally managed. Not much hospital's underpaid, understaffed, and under-experienced IT team could do about. Could steps be done to mitigate some of these issues - Sure, but it needs to start at the top - people who decide the policy and budgets - you know the boring stuff. Maybe they should offer a bit higher IT salaries, maybe they should look to hire at least security consulting companies once in a while. Maybe security audits needed to be mandated part of HIPAA compliance. In short - people who allowed such critical ransomware attack to happen are NOT geniuses because hospital management could not be bothered to care about IT besides basic functionality.

More info:
https://www.hipaaformsps.com/medical-device-security/

Not to scroll too far off topic.
Interesting thing with hospitals running old versions of Windows is bc most systems basically run into compatibility issues...It's a cost that trickles down the line, upgrade windows, upgrade every other bit of software. Most software providers patch versions of their software to run on certain versions of Windows, but these are also more sensitive programs.

I remember trying to play a few games from win 95 on Windows Vista, compatibility wasn't there.

I've seen windows getting very good with attacks, a lot better than they used to be. For me, I keep windows updated, every now and then I'll scan with other software and never find anything except a full internet cache lol. For commercial I see a huge reason to run additional protection but id say it's more due to the sensitive software and servers that are used. A bank that has remote access all over the world has a lot more holes to cover than a consumer laptop.

 

[panteragstk]

Not to scroll too far off topic.
Interesting thing with hospitals running old versions of Windows is bc most systems basically run into compatibility issues...It's a cost that trickles down the line, upgrade windows, upgrade every other bit of software. Most software providers patch versions of their software to run on certain versions of Windows, but these are also more sensitive programs.

I remember trying to play a few games from win 95 on Windows Vista, compatibility wasn't there.

I've seen windows getting very good with attacks, a lot better than they used to be. For me, I keep windows updated, every now and then I'll scan with other software and never find anything except a full internet cache lol. For commercial I see a huge reason to run additional protection but id say it's more due to the sensitive software and servers that are used. A bank that has remote access all over the world has a lot more holes to cover than a consumer laptop.

To be fair, nothing was compatible with Windows Vista...

 

[slipperybidness]

Back from the dead, beware the zombie thread

But, this just popped up, I haven't even had time to completely read it yet, but definitely relevant to this thread.

Windows Defender is enough for most PC users.

https://www.engadget.com/2018/09/28/the-best-antivirus-is-not-traditional-antivirus/

 

[Verdinut]

I'm just curious what you all use for your anti-virus and anti-malware programs. I'm currently using the free versions of AVG and Malware bytes. I'm considering paying for the pro version of malware bytes, which is supposed to also have an anti-virus component. Anyone use it? I'd love to get rid of AVG free and their annoying pop-up ads.

I am using Windows 8.1 on my desk computer and I also use AdBlock. I have been using the Malwarebytes Premium software for more than 10 years, I believe. I am one of the lucky ones who has a lifetime license with free updates and installation of the latest versions.

This anti-malware and AV protection software is an excellent protection. At least one of the experts who wrote one or several Windows Inside/Out books recommended using this software to clean your computer should it be infected.

I am using Firefox as the default web browser. Recently, it got infected somehow. When I typed a website address, it was trying to take me to a malware site, but Malwarebytes prevented my computer by blocking the access. I had to uninstall and reinstall Firefox to get rid of the situation.

Malwarebytes say that, with their Premium software, you are also protected against viruses. But as a backup protection, I use the free Avast software. Avast now owns AVG. They also bug me for add-ons or purchasing their premium software. But so far, Avast has not caught anything that Malwarebytes blocked. Recently, NASCAR had their computers infected, and they had the help from Malwarebytes to resolve the situation just before a race.

I would recommend Malwarebytes without reservation whatsoever for their frequent updates which you can't have with any Microsoft Windows OS. Frequent updates are of prime importance because hackers and malware offenders are always ready to put out a new attack.