AVG seems to shit the bed harder than most. Symantec doesn't break so much as...suck right from the getgo. McAfee seems about as okay as you can get these days. I'm looking into ClamAV...it would be nice to have a free alternative that didn't blow :)
If you don't know how to frotz your antivirus, you REALLY have no business being on IRC.
If you aren't deliberately using IRC, it's really a good fucking idea to block your computer from getting to it (as best as you can), given that IRC is how zombies report in to Master.
I don't agree with your "no business being on IRC" comment. However, it does make a (little (tiny)) bit of sense to shut off the stoopid zombie bot CnC vector.
The other three are more commonly occurring vectors for noobs because there are more noobs USING them, not because they are more or less safe.
IRC is a wretched hive of scum and villainy. Yes, yes, I know, you have fun there, blah blah blah - but it's about on par with Limewire for "noob safety", if not worse.
I am not saying "nobody should ever go to IRC", but I maintain that if you don't even know how your antivirus works, you should NOT be going there.
Agreed. In fact back in the day when IRC were more popular than it is now, the majority of people with compromised machines had zombie clients fuckin' shit up via IRC (and had no idea, either). I'd see that way more than DoS attacks or virii.
Seriously, are you kidding me? It's not, for the most part, a technical reason - IRC isn't inherently unsafe because of some particular protocol failing or anything - it is simply a wretched hive of scum and villainy. Full of everything from malicious kiddies telling noobs to delete system32 to script kiddies pawning trojans off on people to trojaned warez getting passed around.
Actually I saw some pretty interesting articles a while back about some malware that did precisely that - people were running various browsers under Wine and getting Windows malware that RAN under Wine. Interesting, in a thoroughly repulsive way.
ClamWin works great, as long as you don't want active hooks into your filesystem or mailsystem (ie, automatic scanning of everything you do). All ClamWin gives you is the ability to right-click a file or folder and scan it manually.
Which suits me PERSONALLY just fine, but I can't exactly recommend it to clients.
Unless it's your own computer and not a customer's, just leave 'em with whatever they're using. Every tech knows the AV software's only half the solution; a clue is the other half. I could tell you stories of the problems I've fixed that started with someone in my family alone saying "Oh, well I'll just disable the virus scanner.".
When I came to create a VMWare image of a running server, a while ago, I found the disk usage to be ~50GB higher than it should be. After some time* I managed to track it down to ... Trend Micro, which had 50GB of log files in its Program directory.
Seriously, WTF, Trend? 50GB?!
* Side question. When crap like this happens, I have to get the file size of each directory tree in the root and work my way down. Does anyone know of anything similar to Konqueror's file size view that would allow me to easily see where the disk usage is?
I usually write a little script which pulls the disk usage of each subdir in the starting directory, sorts by size, prints the first one (size and name), and then takes the name of that particular subdir and recurses until it hits a directory with no subdirs.
(No, it's not particularly efficient. It'd be moreso if it pulled all the subtree data at once and then worked on the resulting file, but hey.)
I assume you're using something like "du -k | sort -n" at the moment? There's a du for Windows at sysinternals.com if it's just for the one machine. Or you could write something complicated in batch, or less so under WSH, or any one of a number of options. There's a bunch of third-party utilities which will do it, and I hear that Vista has folder size sort as an advanced option (but haven't confirmed it personally).
no subject
Date: 2008-10-01 12:12 am (UTC)Not, you know, in any technical sense, but aesthetically, it's kind of cool-looking.
no subject
Date: 2008-10-01 10:13 am (UTC)no subject
Date: 2008-10-01 12:23 am (UTC)no subject
Date: 2008-10-01 01:10 am (UTC)...yeah.
no subject
Date: 2008-10-01 01:45 am (UTC)If you don't know how to frotz your antivirus, you REALLY have no business being on IRC.
If you aren't deliberately using IRC, it's really a good fucking idea to block your computer from getting to it (as best as you can), given that IRC is how zombies report in to Master.
no subject
Date: 2008-10-01 01:47 am (UTC)no subject
Date: 2008-10-01 02:28 am (UTC)I don't agree with your "no business being on IRC" comment.
However, it does make a (little (tiny)) bit of sense to shut off the stoopid zombie bot CnC vector.
no subject
Date: 2008-10-01 03:09 am (UTC)... shens!
no subject
Date: 2008-10-01 03:27 am (UTC)1) Email?
2) The WWW?
3) AIM?
no subject
Date: 2008-10-01 03:29 am (UTC)2) yes
3) yes
The other three are more commonly occurring vectors for noobs because there are more noobs USING them, not because they are more or less safe.
IRC is a wretched hive of scum and villainy. Yes, yes, I know, you have fun there, blah blah blah - but it's about on par with Limewire for "noob safety", if not worse.
I am not saying "nobody should ever go to IRC", but I maintain that if you don't even know how your antivirus works, you should NOT be going there.
no subject
Date: 2008-10-01 04:22 am (UTC)no subject
Date: 2008-10-01 01:20 pm (UTC)The IRC protocol can be used to control evil software, therefore chatting via IRC is to be avoided by noobs?
no subject
Date: 2008-10-01 01:12 pm (UTC)Why?
but it's about on par with Limewire for "noob safety"
Again, why? I sense that you have a point here, but are continually failing to make it.
no subject
Date: 2008-10-01 01:27 pm (UTC)no subject
Date: 2008-10-01 03:36 pm (UTC)no subject
Date: 2008-10-01 04:08 pm (UTC)no subject
Date: 2008-10-01 11:59 pm (UTC)Seriously, IRC is no worse than spam with attachments or cleverly scripted webpages. Me things you must have gotten stung on IRC at some point.
no subject
Date: 2008-10-02 12:15 am (UTC)no subject
Date: 2008-10-02 12:16 am (UTC)no subject
Date: 2008-10-01 01:28 pm (UTC)(And don't use Windows)
no subject
Date: 2008-10-01 01:29 pm (UTC)no subject
Date: 2008-10-01 01:48 pm (UTC)Now, these trojaned warez.. do they run under Wine...?
no subject
Date: 2008-10-01 04:09 pm (UTC)Actually I saw some pretty interesting articles a while back about some malware that did precisely that - people were running various browsers under Wine and getting Windows malware that RAN under Wine. Interesting, in a thoroughly repulsive way.
no subject
Date: 2008-10-01 03:30 am (UTC)no subject
Date: 2008-10-01 01:11 pm (UTC)That's the biggest virus/worm vector there is! Stay *far* away!
no subject
Date: 2008-10-01 01:41 am (UTC)Which suits me PERSONALLY just fine, but I can't exactly recommend it to clients.
no subject
Date: 2008-10-01 01:53 am (UTC)no subject
Date: 2008-10-01 01:29 pm (UTC)no subject
Date: 2008-10-01 01:30 pm (UTC)no subject
Date: 2008-10-01 08:59 pm (UTC)no subject
Date: 2008-10-01 01:57 am (UTC)no subject
Date: 2008-10-01 10:28 am (UTC)Funny you mention that....
Date: 2008-10-02 01:15 am (UTC)no subject
Date: 2008-10-01 01:26 pm (UTC)no subject
Date: 2008-10-01 12:32 am (UTC)no subject
Date: 2008-10-01 02:13 am (UTC)no subject
Date: 2008-10-01 01:16 am (UTC)no subject
Date: 2008-10-01 02:10 am (UTC)no subject
Date: 2008-10-01 02:32 am (UTC)no subject
Date: 2008-10-01 02:45 am (UTC)no subject
Date: 2008-10-01 02:38 pm (UTC)Seriously, WTF, Trend? 50GB?!
* Side question. When crap like this happens, I have to get the file size of each directory tree in the root and work my way down. Does anyone know of anything similar to Konqueror's file size view that would allow me to easily see where the disk usage is?
no subject
Date: 2008-10-01 04:20 pm (UTC)Scanner is your friend.
You're welcome :P
no subject
Date: 2008-10-01 04:24 pm (UTC)(No, it's not particularly efficient. It'd be moreso if it pulled all the subtree data at once and then worked on the resulting file, but hey.)
I assume you're using something like "du -k | sort -n" at the moment? There's a du for Windows at sysinternals.com if it's just for the one machine. Or you could write something complicated in batch, or less so under WSH, or any one of a number of options. There's a bunch of third-party utilities which will do it, and I hear that Vista has folder size sort as an advanced option (but haven't confirmed it personally).
no subject
Date: 2008-10-01 09:36 pm (UTC)For Windows, you want SequoiaView.
FOSS solution for you
Date: 2008-10-02 01:11 am (UTC)no subject
Date: 2008-10-01 04:48 pm (UTC)no subject
Date: 2008-10-02 01:59 pm (UTC)I've, errr, been using PC Tools antivirus stuffs on my home computer. Got annoyed with AVG and Avast. Haven't had any problems with it so far.