Discussion Locked

Secure PCs with antivirus options

0 helpful
10 replies
Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.

Do you think the unplanned release of Windows source code will have serious security ramifications? Have you taken extra steps to secure your systems? What antivirus software does your organization use? Share your comments about the potential consequences of the Windows source code leak, as discussed in the March 1 Internet Security Focus e-newsletter.

If you haven't subscribed to our free Internet Security Focus e-newsletter, sign up today!
http://nl.com.com/acct_mgmt.jsp?brand=techrepublic

10 replies

by bg_27

At work for antivirus we use norton enterprise, which allows the antivirus server to see any virus on any computer on the domain where the enterprise client has been installed. This is a huge advantage to having individual clients installed (the personal anti virus edition), because the network admin will never know if a virus is on a pc, basically the enterprise server allows us to monitor all viruses and deal with them accordingly.

As usual a good security procedure is to be constantly keeping up to date with the latest windows updates, and keep up to date with the latest security news at securityfocus.com or other major news sites.

by jcostac69

WHY?? Why do we have to pay for Microsof mistakes?? Our computers are now exposed to attacks from hackers which could result in lost of information, or stolen vital information for our businesses. Microsoft at least should assume out costs, they should deliver free antivirus software... If, for example, you buy some Accounting Software that lets anyone update or delete information without the appropiate authorization, will you pay someone to correct it?? WHY?? WHY do we have to pay for Microsoft Mistakes???
Joaquin Costa

by oz_media

Isn't that just an oxymoron?

Windozw and security are either a full time job that is never completed or just a dead end waste of time.

There's no such thing as Windows security, perhaps patch chasing but not security.

by cohrt

updated Norton antivirusprogramme, Windows updates, ad-aware,spyblaster, spybot search and destroy,MRU-blaster,easy clearanance and take care in choosing offers.Being carefull goes a long way, but I almost forgot the most important arrangement the firewall ZoneAlarm plus.On and on it creates difficulties in using the internet,but raher that that anything else.

by nitrosoft

Whilst I agree that the leaking of the source is a problem, the article makes it sound a lot worse than it actually is,

In actual fact a 203MB zipped core dump has been leaked from mainsoft, a company that ports MS code to linux. this is not a significant amount of the entire windows source, and after three weeks the only 'hack' to come to light was a problem in the bitmap processing of IE, (which was fixed years ago.

The code is far from complete or usefull, in fact it won't even compile.

I believe this article is little more than sensationalism, which, if the author was really security consious they would not have written simply because the next time something that is actually a security threat comes along, people will assume it's more mindless sensationalism.

by jdii1215

Basically, as a tech who is on broadband and who has many local clients who are also on broadband, I do this:

AV I use is F-Prot. The core of F-Prot is knowing 104+ Thousand malwares and being able to kill them quickly and well. This not just AV in teh typical sense, it is Trojan aware and is also aware of macro viruses. It takes fewer system resources than NAV or McAfee AV or Trend Micro's products. Updates are often twice a week, and have gotten three in 6 days when new viruses hit. I have multiple boxes, got a 10-pack license for $50.00 US for one year. The core is so good that Kaspersky Labs licenses the heuristics code for their widnwos products. RAEInternet recommends that or BitDefender (Bitdefender is in Romania, gets a lot of the east->west propagating viruses reported and defined before the folks who operate in US have definitions as does F-Prot which developed in Iceland and works with Kaspersky some due to Kaspersky being an F-Prot customer for parts of the code, so they get new viruses that start in Europe and Asia close to when Kaspersky does, as work samples to dissect and have defs very fast) for their commercial clients, both have desktop versions also. I recommend these for broadband clients because of system resource use and having in use definition sets before the viruses hit the US in many cases.

I have run SpyBotS&D, HijackThis! (which is a trojan and worm killer that knows some of each), Adaware, and since I stuck F-Prot on a box, the only thing that showed up was a semi-benign Alexa link which got squashed and has not reappeared.

I use a cocktail apporach, it is like a cancer fight, you use a cocktail of approaches. So far, Comcast has squashed 95% of email viruses. Antispam in Thunderbird .5 is decent also, I use it to kill before seeing in many cases the email that 90% of viruses travel in. I run XP Pro and firewall with Sygate firewalling and router is firewalled to a large extent also. Layer and cocktail on end nodes, but for the more minor programs remember to update defs also, even Ad-Aware needs def updates.

John C. Danielson, II
DBA, Danielson Systems

by it security guy

I think this highlights that user security is the second line of defense and most PC owners do not know enough about PC security, they merely go with what they hear in the product hype from the salesman and they are not told they have to coninue to update their computers. If the government wants to do anything to help increase the security of the nation's infrastructure, they need to increase awareness of computer and network security for everyone. If there were free classes on PC security 100 & 101, plus training materials available free that can be installed on a PC or printed and mailed, that would at least give more information. The next step would be for people to use the resources.

by oldefar

To the vast majority of users, the PC is a tool. They want it to do what they expect it to do, work when they need it to work, and not have to any knowledge or responsibility beyond knowing how to turn it on, launch the application they need, and turn it off.

This is not unlike most car owners and drivers, most owners of home heating and air conditioning systems, TV watchers, telephone users, grocery shoppers, and a host of other everyday aspects of life in the 21st Century.

Rather than expecting all drivers to share a mechanic or automotive engineer's enthusiasm for how cars work, the car is fairly self contained. Routine maintenance can be accomplished with a stop at the dealer whenever a reminder card or call is sent or an idiot light pops on.

The same should apply to computer technology. The users should not have be concerned with keeping their system up to date, securely configured, or even routine maintenance. This should be part of the warranty of the device.

Now just imagine the incentive to both hardware and software companies if the burden of ensuring their customers were properly protected fell on the source, not the user. Perhaps we would see a market dominated by quality, not marketing, as those who failed to do right the first time are tasked with the cost of repair.

Here on a technical forum it is great to discuss the underlying aspects of technology, but we need to remember that for everyone of us there are 1,000 or more users who have no interest beyond a tool that works as advertised.

by robley3939

In the article I read Microsoft claimed the source code that was compromised was no big deal. That particular piece of code was not at the "heart" of Windows and could not contribute to much hacker/cracker damage.
Reds

by tbbrickster

Not enough of the code was released to cause "serious secuity ramifications." The real security problem is the whole of Micro$ux' bug-ridden code.

I run a Novell server with GroupWise for internal email and MySQL. My users have to use some flavor of M$OS so I've got them on Netscape's browser and mail client to POP off external email. I use SAV enterprise, have the PCs to auto warn for M$ crit updates, and use Spybot S&D for the malware. As another poster suggested, I've found the cocktail approach to work the best.

Oh, one last thing, I regularly hammer at them f2f and in emails not to open up unexpected and/or email attachments.

brick

This discussion is closed to new replies.