• Some users have recently had their accounts hijacked. It seems that the now defunct EVGA forums might have compromised your password there and seems many are using the same PW here. We would suggest you UPDATE YOUR PASSWORD and TURN ON 2FA for your account here to further secure it. None of the compromised accounts had 2FA turned on.
    Once you have enabled 2FA, your account will be updated soon to show a badge, letting other members know that you use 2FA to protect your account. This should be beneficial for everyone that uses FSFT.

Antivirus - still a thing?

We still have a windows xp system at work to run programs for our old HAAS CNC but it is not connected to the network.
 
We still have a windows xp system at work to run programs for our old HAAS CNC but it is not connected to the network.
1748701559260.png


that an exception and totally fine. one of the helicopter repair places out at our airport are still running old NT based specialty equipment. its offline, it works, dont mess with it.
 
We still have a windows xp system at work to run programs for our old HAAS CNC but it is not connected to the network.
My wife and I went to an Urgent Care for her foot the other day, and they had a POS running XP for sign in, and I saw Cat6E coming out the back...
Hopefully it was just hardwired to a hub and not a switch or router.

Reminds me of all those POS's at Target a few years back running XP that made the news.
 
Kicking this back up, I have a customer thats currently on Bitdefender, and I have no issues with BD...it works good and scans run and report as expected, but the console sucks..its like 5 clicks to see the list of machines/status.
Its a Windows environment (11 workstations, 3 servers), no Office 365 subs (although I do have one myself)
Whats the hive using for small business' ?
 
Microsoft has a paid version of Windows Defender, what do you think, is their free version just as good?
But I know how many systems I have cleaned of viruses because most "end users" think the free Windows Defender is "enough". Don't worry, use it, there must be work for the IT guys after all :whistle:
 
do you need or want the extra features?
if youre not tarded, it is enough.
 
Microsoft has a paid version of Windows Defender, what do you think, is their free version just as good?
But I know how many systems I have cleaned of viruses because most "end users" think the free Windows Defender is "enough". Don't worry, use it, there must be work for the IT guys after all :whistle:
Windows Defender free in windows is not great, It works based off known hashes, it has no heuristics, it can be disabled via a single command, so easily bypassed.
 
Pardon my ignorance, but if don't people who write viruses know that the first wall they need to get through to infect the masses is windows defender? Therefore it seems that it should not be enough?
 
Every report I get now days of "malware" at work is some website exploiting notification popups in Chromium browsers or search engine shortcuts redirecting to scam sites. Simply using GPO to disable notifications has fixed that. Oh, and not allowing Users to be Administrators. I just don't deal with malware anymore but I also layer in things like DNS filtering to also help remove users ability to even resolve known bad sites.

Security needs to be an onion.
 
Every report I get now days of "malware" at work is some website exploiting notification popups in Chromium browsers or search engine shortcuts redirecting to scam sites.
yup. i see "mcafee says the chromebook is infected" tickets at work all the time...
 
Pardon my ignorance, but if don't people who write viruses know that the first wall they need to get through to infect the masses is windows defender? Therefore it seems that it should not be enough?

The idea is that even with perfect knowledge of defender you can't figure out a way through (assuming you found a basic hole to get onto the computer in the first place).

Ideally such a tool should be open source, but that isn't common with windows components.

I just cleaned Norton off a friend's computer and it is a whole shitshow of consumer deception.
 
The irony being that McAfee in itself is like a virus. It's the first thing I remove from people's computer.
I think the point is, notification popups don't care if you're on a Chromebook and it's quiet possible to get a popup stating you need to call Microsoft right now while using Linux.
 
I run IT at a small company. I've started research to begin rolling out Defender for the Macs in my company as they are a smaller group of users, needy MF'ers but still smaller. That being said, Microsoft now has a huge business model around Defender for Endpoint. Microsoft isn't taking defender lightly. I know the consumer level and Defender for Endpoint aren't the same. But they share a lot of core components. I wouldn't be worried about running defender. If you aren't retarded you can probably be just fine running Defender and being mindful of the things you click.
 
Just as an example: Windows Defender doesn’t remove the WebCompanion malware, but Endpoint Defender does.

I can’t understand why people don’t realize that every product has its place, and ask questions like, “Are antivirus programs still relevant?” at a time when AI is being used to create viruses and malware that are harder to remove even by paid antivirus programs...
 
Use a dual boot.
Windows offline and linux for browsing internet

What is the point of AV software, when AV companies are forced to let government virus, rootkits and spyware to go through via backdoors, and Im not talking about only on the US. 😒
 
Use a dual boot.
Windows offline and linux for browsing internet

What is the point of AV software, when AV companies are forced to let government virus, rootkits and spyware to go through via backdoors, and Im not talking about only on the US. 😒
Linux for web browsing can still get your browser data compromised, as we know, most people save their user/password and such in the browser, CC info, maybe addresses, and what ever else...
 
Linux for web browsing can still get your browser data compromised, as we know, most people save their user/password and such in the browser, CC info, maybe addresses, and what ever else...

Thats why you use only one browser for bank and buying online, and a different for browsing. Dont save passwords in browsers. Write them down on a secure notebook.
 
Thats why you use only one browser for bank and buying online, and a different for browsing. Dont save passwords in browsers. Write them down on a secure notebook.
Ya, but most people do not do that, and using a different browser for banking only, wont stop said browser from getting scrapped if you get something from another browser as most infections look for all browser stores to take any saved data.

If we could get every one to use Phishing resistant MFA...life would be easier for all!
 
Thats why you use only one browser for bank and buying online, and a different for browsing. Dont save passwords in browsers.

You don't need a different browser. Starting a browser with a different on-disk profile is sufficient. ` --user-data-dir="$profdir"` in Chrome.

It won't share anything with the main profile, and most importantly not extensions. (unless you log both in to sync your user account and turn extension sync on, which you won't do for profile separation).
 
You don't need a different browser. Starting a browser with a different on-disk profile is sufficient. ` --user-data-dir="$profdir"` in Chrome.

It won't share anything with the main profile, and most importantly not extensions. (unless you log both in to sync your user account and turn extension sync on, which you won't do for profile separation).
ya but most infostealers search all browser stores on your system, so long as that browser store runs under your logged in user profile, any compromised thing running has access to said browsers and their profiles?
 
ya but most infostealers search all browser stores on your system, so long as that browser store runs under your logged in user profile, any compromised thing running has access to said browsers and their profiles?

Well, you run the other profile under a different user account, but still on the same display.

What you say is true, but very hard to avoid unless you go with a different account, or a VM or jail or chroot.
 
So far this year, every single instance of malware has been installation of emoji browser extensions from sketchy websites. Every.one.of.them.

People got to have their damn smileys wherever they can get them from. On a scale of one to ten...yada yada yada.
 
Back
Top