Anti-Virus Software

The bottom line is this. No anti-virus software has a 100% detection rate. For this reason you need added protection. This does not, however, mean you should have two anti-virus software. It means you should have a solid anti-virus which has real-time shields, a good malware scanner such as Malwarebytes, a browser that doesn't resemble swiss cheese (IE and it's security holes), the proper add ons like MyWOT, AdBlockPlus, BetterPrivacy and a properly configured router to include enabled mac filtering and hidden wireless network (if using wireless access, disabled if not). Even with all this, there is no guarantee of no infections. For this reason regular scans are a prerequisite to keeping your machine clean. What anti-virus you choose is up to you of course and I am more and more convinced every day that the reviews by commercial testers are not as accurate as one would hope. The best reviews in my opinion are user generated. Remember though, the user is always the best preventer of infections.

Regards,
Joel

Hello All: Since this thread isn't closed, my question piezo how could you be so sure that they get infected using Internet?

It could be a USB/Other Removable drive - Do they have Autorun Disabled (using MS-KB-967715 for Win XP/2000)
Are they completely patched (I use Secunia PSI)
...

Hello Haider,

each of these PC's was infected with a ton of adware

Generally adware doesn't propagate through USB drives or CD's as if there is no internet connection there is not much point presenting adverts to the user as they won't be able to click a link to download/pay for whatever is advertised.

Do they have Autorun Disabled

While this will stop most current USB propagating worms you should have a read of This Thread in the news room, regarding a newly discovered vulnerability in Windows to which there is not yet a patch.

Hi Sludge3000: Thanks for the info, there are other ways to deal with such kind of threats - Using limited user account while on Internet in conjunction with properly configured Software Restriction Policy

By the way there is a temporary workaround available for Microsoft Security Advisory (2286198)

If you want to protect your usb's from autoruns check out this simple trick from Odd dude.
viewtopic.php?f=7&t=29496&p=506934&hilit=+ubuntu+#p506934

"tequesta" wrote:If you want to protect your usb's from autoruns check out this simple trick from Odd dude.
viewtopic.php?f=7&t=29496&p=506934&hilit=+ubuntu+#p506934

That post will not be visible to any Member who is not a student of the University.

"Haider" wrote:Using limited user account while on Internet in conjunction with properly configured Software Restriction Policy

Indeed this is so but many home users may have no idea on how to setup software policies and find lower privlege accounts an inconvenience, plus with XP defaulting to administrator accounts many people who don't understand computers are perfectly happy as it lets them do anything they want(which is what a computer should do in many peoples eyes). In a corporate environment this is much easier to enforce.

"Haider" wrote:By the way there is a temporary workaround available for Microsoft Security Advisory (2286198)

There certainly is and I believe it is linked to in the thread in the news room which can be found Here. I will add a link to the Microsoft 'Fix It' which is also now available.

"Gary R" wrote:

"tequesta" wrote:That post will not be visible to any Member who is not a student of the University.

So sad, I am not yet a student, however, I do expect to be accepted as my application is pending approval. Hopefully one day I would

I have a fully patched Windows XP Professional SP3 system (i.e. MS-KB967715 applied and I know that too is vulnerable). All my USB's have a blank Autorun.inf (read-only text files) residing inside a read-only folder Autorun.inf, hopefully it is going to prevent this kind of infection to some extent!

"Sludge3000" wrote:Indeed this is so but many home users may have no idea on how to setup software policies and find lower privlege accounts an inconvenience...

To me it means - what we need to do is educate end-users, besides a continued battle with these criminals

"Haider" wrote:what we need to do is educate end-users

Indeed that is one of the objectives of MRU, to educate users regarding computer security. Best of luck with your application and hope to see you in the student area soon.

sludge3000: Thank you so much