CastleCops, Internet Crime Fighters
Need help? Click here to register for free! Absolutely zero advertisements on this site!

Donation/Premium
spacer
block bottom
Security Central
spacer
· Home
· PIRT/Fried Phish
· MIRT
· SIRT
· Deutsch
· Wiki
· Newsletter
· O16/ActiveX
· CLSID List
· Contest2007
· Downloads
· Feedback (send)
· Forums
· HijackThis
· Hijacktrend
· LSPs
· My Downloads
· O18
· O20
· O21
· O22
· O23
· O9
· Premium
· Private Messages
· Proxomitron
· Reviews
· Search
· StartupList
· Stories Archive
· Submit News
· WsIRT
· Your Account
· Acceptable Use Policy
block bottom
spacer spacer

How necessary is an Anti-Virus?
Goto page Previous  1, 2
 
Post new topic   Reply to topic       All -> FavForums -> AntiViruses [del.icio.us!] [digg it!] [reddit!]
View previous topic :: View next topic  

Is Anti-Virus software essential?
Yes, for everyone
58%
 58%  [ 20 ]
Yes, for most people
38%
 38%  [ 13 ]
Usually better off without
2%
 2%  [ 1 ]
Absolutely not
0%
 0%  [ 0 ]
Total Votes : 34

Author Message
Snib

Trooper
Trooper


Joined: Jun 25, 2004
Posts: 14
Location: USA

PostPosted: Sun Feb 10, 2008 2:52 am    Post subject:
Reply with quote

Quote:
FYI...

AV vendor AvSoft site hacked....
...


I can't find any information to see if Firefox, Opera or another relatively "safe" browser is vulnerable to this attack....personally I disable iFrames universally, since most sites just use them to display ads.

But I see your point. It can happen to anyone. Being safe (using a secure browser, subscribing to a mainstream security provider, etc) would probably reduce the chance of it affecting you, but the chance is always there.

Personally, with all my stuff backed up, I'm willing to go without an AV. I can rebuild my computer in about a half-hour if necessary, and my programs & files can be easily restored from a backup. But usually any malware can be effectively removed with the proper tools in a matter of minutes.

Quote:
I keep hearing that Linux and Macs are bulletproof... well Superman was bulletproof too and look what happened to him! Wink


Oh there have been viruses for Mac and *nix...the chances getting infected are a bit slimmer since there are not as many attacks on non-Windows machines, but the same principles apply, really: Safe browsing reduces the chances. No one is perfect, but in at least some cases, an on-access scanner really does not seem necessary. I would say certainly not on a Mac or *nix machine.

But, if you're not willing to take the chance, go for an AV. It doesn't seem to me like it would help enough to be worth the money and resources, but if you're extremely security-conscious, I'll admit an AV can help in some situations. Just not enough to make it worth it IMO Wink

Cheers

snib

Back to top
View users profile Send private message Visit posters website
AplusWebMaster

General
General


Joined: Mar 14, 2004
Posts: 4807
Location: USA

PostPosted: Sun Feb 10, 2008 2:04 pm    Post subject:
Reply with quote

FYI...

- http://www.us-cert.gov/reading_room/trojan-recovery.pdf
"Michael D. Durkota, US-CERT
It can happen to anyone. Considering the vast number of viruses and Trojan horses traversing the Internet at any given moment, it’s amazing it doesn’t happen to everyone..."

> http://www.f-secure.com/weblog/archives/00001351.html
"...half-a-million malware detections by the end of the year... Quite the way to end 2007…"

Shocked


_________________
AplusWebMaster
~ Are you up to date or vulnerable to Hackers? ...or both?
.
Back to top
View users profile Send private message Visit posters website
beversoll

Trooper
Trooper


Joined: Mar 13, 2008
Posts: 10


PostPosted: Fri Mar 14, 2008 1:19 am    Post subject: my two cents
Reply with quote

Being a casual user (browsing, and Blackboard for school) I need AV protection. Reading through this post I did not understand some of the terms and concepts (sandbox, online scanners, etc). I agree that safe-browsing is the best way to avoid problems. I rarely download off of the internet, unless I am positive it is safe. I think it depends on your knowledge of maliscious content. If I had no protection (Trend) I would be very vulernanble due to my lack of knowledge.

Back to top
View users profile Send private message
Mister2

SRT Team Lead
SRT Team Lead
Premium Member

Joined: Oct 28, 2004
Posts: 7326

Moderators MVP Premium SRT Team F@H

PostPosted: Fri Mar 14, 2008 6:03 am    Post subject:
Reply with quote

Hi beversoll,

I have to agree that safe surfing is an important (and often overlooked) side of computing. As with most things, moderation is the key - there is a lot of good content on the internet that may get overlooked if one is too hesitant.

I use the Firefox browser with the Site Advisor plugin. Any time I search on Google the results are classified as safe, malicious or unknown. That helps me steer clear of the baddies (unless I need to visit for a specific reason).

A sandbox is a method of running your computer in a totally safe environment. In theory, whatever you do in a sandbox is lost when you switch off (though there are ways round that), so anything malicious can't interact with your system and disappears when you're done. Compare it with kids playing in a sandbox and leaving everything behind when they come in for dinner.

Online scans refer to sites such as this or this . They are safe and very effective - they tend to be bang up to date and work well, though they take a little time to run.

Using a good AV, anti-spyware and firewall along with a dose of common sense should keep you clear of most things.

Happy computing! Smile


_________________
Never stop learning
Back to top
View users profile Send private message
AplusWebMaster

General
General


Joined: Mar 14, 2004
Posts: 4807
Location: USA

PostPosted: Sat Mar 15, 2008 9:27 pm    Post subject:
Reply with quote

FYI...

- http://www.av-test.org/index.php?lang=0&menue=2
2008-03-10 (March test results of Antivirus programs*)...

* http://sunbeltblog.blogspot.com/2008/03/march-test-results-of-antivirus.html
(From Andreas Marx of AV-Test.org) - "...The number of MD5-unique malware samples received by AV-Test.org increased from about 333,000 in 2005 to 972,000 in 2006, and 5,490,000 in 2007. During January and February 2008 alone we found more than 1.1 million samples spreading in the internet..."


Shocked


_________________
AplusWebMaster
~ Are you up to date or vulnerable to Hackers? ...or both?
.
Back to top
View users profile Send private message Visit posters website
innerpeace

Captain
Captain
Premium Member

Joined: Mar 27, 2006
Posts: 398

Premium

PostPosted: Sun Mar 16, 2008 4:15 am    Post subject:
Reply with quote

Mister2 wrote:
A sandbox is a method of running your computer in a totally safe environment. In theory, whatever you do in a sandbox is lost when you switch off (though there are ways round that), so anything malicious can't interact with your system and disappears when you're done. Compare it with kids playing in a sandbox and leaving everything behind when they come in for dinner.

I'm very interested in the ways around a sandbox's protection. Specifically the virtualization type of sandbox like Sandboxie. I understand that nothing is perfect and the bad guys will persist, but it's pretty darn good if you take the time to understand it a little.

I have it set to block access to my D: and E: partitions and only allow internet access to firefox and winamp. Either should help if a keylogger should find it's way into the sandbox and is able to run. I also scan everything I download and restore from the sandbox and keep everything up to date.


_________________
Being sane is enough to drive anyone crazy.
Back to top
View users profile Send private message
ErikAlbert
Warnings : 3

Captain
Captain


Joined: Jan 20, 2005
Posts: 424


PostPosted: Tue Mar 18, 2008 2:56 pm    Post subject:
Reply with quote

Mister2 wrote:


A sandbox is a method of running your computer in a totally safe environment. In theory, whatever you do in a sandbox is lost when you switch off (though there are ways round that), so anything malicious can't interact with your system and disappears when you're done.


Hmm.... I think to be accurate, I think in this context, one isn't running the whole computer in a "safe environment" but rather selected programs/processes. (Though there are virtualization
type proggies like Retunril that do "sandbox" the whole computer)

Sandboxed processes/programs are restricted from carrying out dangerous activities that can affect system intergrity. So they can be run safely, and when they try to harm the system they will fail.

On the market , there are roughly 2 types of sandboxes (of the type we are discussing)...

Policy based sandboxes, which is basically the standard type of sandbox discussed

and sandboxes with virtualization.

The later allows "virtualized" changes by processes in the sandbox, which can then be reversed/removed by emptying the sandbox....

The former does not do so....

Sandbox +



It doesn't necessarily disappear from your system though.

Back to top
View users profile Send private message
ErikAlbert
Warnings : 3

Captain
Captain


Joined: Jan 20, 2005
Posts: 424


PostPosted: Tue Mar 18, 2008 3:00 pm    Post subject:
Reply with quote

quacker wrote:
Just when I thought I was invincible, the [insert zero-day vulnerability here] came and happened to me...


One of the biggest misconceptions is that your AV can effectively stop zero-day vulnerabilities....

Back to top
View users profile Send private message
blade007

Trooper
Trooper


Joined: Oct 29, 2007
Posts: 22
Location: USA

PostPosted: Sun May 18, 2008 10:37 pm    Post subject:
Reply with quote

For me, yes, I download lots of freeware off of download sites, and I would get a virus about once a week.

Back to top
View users profile Send private message
Alvaro

Trooper
Trooper


Joined: Jan 28, 2008
Posts: 31
Location: Reno, NV (USA)

PostPosted: Sun May 25, 2008 1:28 pm    Post subject:
Reply with quote

[snark]
I am bulletproof against zero-day attacks - I am running Windows 95 and software released before 1998 so... Plus my AV is also pre-1999 so I'm protected against Y2K as a bonus.
[/snark]

More seriously... There's no better mark than one feeling secure. Don't trust me, trust the pros: no system is invulnerable.

I love the Returnil approach also.

Not mentioned here yet, but BartPE is another, more spartan alternative to the sandbox approach, i.e. by booting from a (read-only) CD/DVD.

Back to top
View users profile Send private message Visit posters website
Display posts from previous:   
Post new topic   Reply to topic       All -> FavForums -> AntiViruses All times are GMT
Goto page Previous  1, 2
Page 2 of 2

 
Quick Reply:
Username: 

Quote the last message
Attach signature (signatures can be changed in profile)
 
You can post new topics in this forum
You can reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
You cannot attach files in this forum
You can download files in this forum


Powered by phpBB © 2001 phpBB Group
spacer spacer