What do we think about computer antivirus protection?

[cantdrv55]

Do you use one on your personal computer? Which one and why? Or why not? Does it protect against identity theft as well?

[cabmandone]

I used to have Kaspersky and really liked it. Now I'm just using Defender. As for identity theft? I don't know that I have anything on my system that could lead to identity theft. Never gave that any consideration.

[id10t]

No A/V here

But then I dont run Windows either

[stevej37]

Defender also here.
It comes with comcast internet....if it didn't, I wouldn't pay for it.

[id10t]

Originally Posted by stevej37

Defender also here.
It comes with comcast internet....if it didn't, I wouldn't pay for it.

Defender comes with Windows

[stevej37]

Oops...my bad.

[Bob Kontak]

Originally Posted by id10t

Defender comes with Windows

Pretty robust if you keep the auto-update function on.

I did see something that says Windows 10 support is going away 10/2025, FWIW.

[GH85Carrera]

I use Defender, and the backup program I use is Acronis. It makes a clone of my boot drive to my RAID-5 and also my "work" drive. It comes with an identity protection that I really don't use.

It can make a backup to the "cloud" but I don't like the idea of putting my information on a site I don't control. When the CIA, FBI, Apple, Microsoft, AT&T, and healthcare companies have been hacked, I don't see the security. I have never been hacked!

My credit is locked on all the sites, and I use complex passwords. My router updates it's Firmware regularly, and I have strong protection on it.

I have little doubt my information is out on the dark web from hacks of my healthcare system, and other high profile hacks.

[id10t]

Originally Posted by GH85Carrera

I use Defender, and the backup program I use is Acronis. It makes a clone of my boot drive to my RAID-5 and also my "work" drive. It comes with an identity protection that I really don't use.

It can make a backup to the "cloud" but I don't like the idea of putting my information on a site I don't control. When the CIA, FBI, Apple, Microsoft, AT&T, and healthcare companies have been hacked, I don't see the security. I have never been hacked!

My credit is locked on all the sites, and I use complex passwords. My router updates it's Firmware regularly, and I have strong protection on it.

I have little doubt my information is out on the dark web from hacks of my healthcare system, and other high profile hacks.

Similar, except / is on a SSD stand alone, and /home is on a software RAID-5 volume. I can pull the drives that make up /home and stick 'em in any machine, boot with a LiveDVD image and get back everything I care about immediately.

[masraum]

When I had a Windows box (it's been ~5 years) I used the free Microsoft thing. I think there were a couple of different names including Defender and Windows Malicious Software Removal Tool. It had been MANY years (at least a decade) since I used anything else. If I was still running Windows, I'd probably still be using the microsoft stuff.

If you are running windows, another possibility would be to not have your usual login have admin permissions natively. Have a separate login for full admin permissions. I'd hope that by now, Windows allows you to elevate your permissions when required. That makes it a lot harder for a lot of bad stuff to happen.

[Alan A]

Have [several] Mac’s. The work one has a LOT of A/V stuff on it.
The others - nothing that apple doesn’t provide ootb.

The only difference I’ve noticed is in cpu utilization.

[masraum]

Originally Posted by Alan A

Have [several] Mac’s. The work one has a LOT of A/V stuff on it.
The others - nothing that apple doesn’t provide ootb.

The only difference I’ve noticed is in cpu utilization.

Does Apple provide anything ootb in MacOS? I haven't seen anything (other than the general design/operation of the OS).

[Alan A]

Xprotect is built in.

[masraum]

Originally Posted by Alan A

Xprotect is built in.

Interesting. This was the first time that I'd heard of it. But I assume that's because it's not something that you install. Like you said, it's already there. I've always (in my MS days) had admin rights. At some point after I moved to Mac, I disabled admin rights for my user after creating an admin user. I think that's another layer of protection. I don't natively have full access and the OS will ask me to elevate my access.

https://support.apple.com/guide/security/protecting-against-malware-sec469d47bd8/web

Apple operates a threat intelligence process to quickly identify and block malware.
Three layers of defense

Malware defenses are structured in three layers:

1. Prevent launch or execution of malware: App Store, or Gatekeeper combined with Notarization

2. Block malware from running on customer systems: Gatekeeper, Notarization, and XProtect

3. Remediate malware that has executed: XProtect

The first layer of defense is designed to inhibit the distribution of malware, and prevent it from launching even once—this is the goal of the App Store, and Gatekeeper combined with Notarization.

The next layer of defense is to help ensure that if malware appears on any Mac, it’s quickly identified and blocked, both to halt spread and to remediate the Mac systems it’s already gained a foothold on. XProtect adds to this defense, along with Gatekeeper and Notarization.

Finally, XProtect acts to remediate malware that has managed to successfully execute.

[stealthn]

It’s mandatory now a days

I use SentinelOne from my company, then 7 other layers of defence above that, but I’m in IT…

[zakthor]

I wouldn’t pay money for it.

Don’t use your machine on the administrator account.

Think about how the ‘virus’ got access. Truth is you allow the wrong binary or script to run your machine you can be owned in a way that the antivirus won’t see.

Be really careful about what binaries you allow on your box. We’d like version updates to be painless but they’re fraught.

[cabmandone]

Originally Posted by Bob Kontak

Pretty robust if you keep the auto-update function on.

I did see something that says Windows 10 support is going away 10/2025, FWIW.

This thread and more specifically this post by Super Bob got me thinking about my system and updating to Win11. No can do! It appears my laptop doesn't meet the requirements to upgrade. Seems you need TPM 2.0 (Trusted Platform Module) and my system doesn't have it. I've checked Dell's support site which recognizes my system configuration and my system isn't compatible. Guess I'll be buying antivirus protection in 2025. I've done too many updates to my system to just go out and buy a new one.

[GH85Carrera]

I have one very old computer I built back when Win 7 came out. It was updated to Win10 but is not able too run Wiin11. It has some software on it that does a few mapping tasks that the new software is stupid expensive. So I will keep using it, and use some aftermarket anti-virus. My laptop iis the same way.

[rattlsnak]

ESET - NOD 32 has been top rated for years..

[Deschodt]

Symantec and MacAfee are crap. They cause more issues than they protect you from in our enterprise but they are manageable enterprise wide with policies..... For a private machine, Defender comes with windows and at least it's SUPPORTED, kinda, not like the above that are useless ;-)
On a Mac, nothing much,maybe Avast or whatever once every year to double check, then I remove it.