![[H]ard|Forum](/styles/hardforum/xenforo/logo_dark.png){kind=logo}
Cody8417 said:
IceWind said:
People like this vote for Bush. . Class, focus on your Security 101 teacher. Security comes in layers. There is no foolproof system. The more layers the better. How many layers depends on how exposed you are. For even just standard browsing, you should have at least three minimum layers:
I don't download things on this pc, I also don't store email on it, and I am the only user on it. I keep the pc updated too...I don't know how a virus could get onto the pc without the user allowing it to happen. I do occasionally run the TrendMicro HouseCall though and I have never come up with anything...jimnms said:
Blue Fox said:
LonerVamp said:Wow, some of you guys should really just not say things like this in a security forum.
<snip>
The bottom line is, use some sort of AV and firewall. Even if the firewall is just in your DSL/Cable router or even if your AV is something small and free like Antivir. At least use something...because if you don't, you have no one to blame but yourself if something bad happens.
Steel Chicken said:
Blue Fox said:
DR_K13 said:the new generation of viruses do not need an exe. type of file to install. I wrote a virus and embedded it in a pictute ( bitmap ) of a kitten. dont worry Its still on a foppy disc, i just wanted to see if I could do it.
The ignorance dancing around in this thread is astounding. Direwolf20 said:
I'm in total agreement. The laws of the market apply here. If there wasn't a need for AV software, then how/why do we have so many hours and dollars dedicated to stopping this problem. When Melissa hit (I love you), our mail server was down for 2 days, costing our company thousands of dollars in missed business, not to mention the 30+ hours of manually removing the messages in the database that I had to do. With the prevalence of criminal organizations designing viruses to infect unknowing users, and plant a trojan program to record accounts and passwords, this type of ignorance hurts us all. Be a better citizen. Be a better netizen, do your part and secure your part of the network. Once your hooked into the internet, you affect (or infect) us all.
As far as the 'it's bloated' and 'it's hogging cpu cycles' statements - hogwash. Once a file has been flagged as scanned, if you're using a properly configured AV program, it shouldn't scan it again unless the file is being changed. In this day and age of GHZ computers, and 10,000 RPM drives, this barely touches the resources on the machine.
If you don't have any AV software installed how do you know you have no virus?Rabbit said:
Direwolf20 said:
"I don't download stuff on this computer, and theres no way a virus can get on without the user knowing." - Blaster
"I have a firewall" - Nimda, or any one of the million mass mailing worms
"I get windows updates" - You realize windows updates come AFTER the exploit is found, right? Hence, you are vulnerable to a virus until microsoft releases its patch.
As a network admin, my brain is starting to feel squishy inside. Seriously guys, just get a freaking virus scanner. I've never had a virus on my rig either (10+ years of PC stuff), but that doesn't mean I don't have a virus scanner. You can get a free one in 5 minutes of effort.
My God you people are lazy. You don't even have to waste CPU cycles if thats your issue. Just schedule a nightly, or even WEEKLY virus scan to occur at like 5am, or some time when you are almost always sleeping. Yay, no more constant scanning.
MY BRAIN HURTS!
P.S. This thread came up about a month or two ago, and it was shot down back then too. Virus scanning may not be absolutely 100% needed for basic computer use, but its very worth doing. The risk of being a zombie PC that propegates this garbage is not worth taking.
I didn't read throught this entire thing so this could be a repost but this was listed a few threads down.warhead said:
sc0tty8 said:
Dr.Khron said:
Ice Czar said:
M11 said:No kidding. I nearly lost my job over a rootkit. Heres the story:
I basically assume sysadminship at a technology consulting firm, and one of my first tasks was to renovate the stale and depriciated network of the company's #3 client. Well, I can't wipe the server and go from 2000>2003 yet, so I find myself getting the PCs on XP, redoing group policy, etc. Well, they continued having break-ins including loss of data, spam being relayed through their mailserver(checked the SMTP logs and found "Administrator" was sending it
It turns out that the previous tech guy had been running keygens from the server, and thats how a rootkit got installed. Had I not found the keygens in an obscure folder, it would have taken me even longer to figure it out. This was enough to warrant moving to 2003 immediately, as neither of the 2000 servers could be trusted (both tested positive for the rootkit).
So please folks, remember that rootkits remain one of the greatest evils of the networked age. You don't know the computing practices of everyone on the machine, and thus assumptions anymore are hard to make.
