FromTheRafters said:
Referring to your stated opinion that AV is for virus recovery
rather than for preventative measures, followed now by your
statement "I worry more about getting them than cleaning them".
It is precisely this preventative aspect of AV that is needed.
Most other threats can be negated by safe computing practices.
It is the nature of "viruses" to go beyond socially engineered
ploys to trick users into running malicious code. They hide
*within* programs that the user actually does want or need to
execute. AV was needed to mitigate this approach to getting
users to run malicious code.
I know that no matter what AV I have, it can not protect me 100%, I also
know that there is always the chance I will get a virus, no matter if I buy
the most expensive, highest rated, state of the art virus slayer on the
market. It can only 'try' to protect you, but, in the event of a failure, a
shortcoming on it's part, or the users. It's efficiency as an impenetrable,
efficient coat of armor is just not there. Therefore, I am concerned. (i.e.
worried). To me, it's primary job is to be able to clean the curd if you do
get one, for whatever reason, and recover the system without damage.
However, the virus may be of a stain that requires other methods of cleaning
outside the normal capabilities of any AV. . The fact that I don't agree
with you, or others, in my thinking of the AV priorities, is merely a matter
of opinion, and not necessarily wrong. It just means you don't agree with
me. That's fair enough.
Oh, you didn't say that. You did say that AV was for "cleaning
up the mess" that using poor practices allowed to happen. It
is sort of like the idea of crisis management - let it become a
major problem and then deal with it rather than taking steps
to avoid the problem altogether.
It is.....in a way of thinking. I see it with people at work all the time,
and with some of my friends, who consider themselves computer savvy users.
But, they do stupid things, or sometimes, just make a mistake. And then they
run their AV to clean the curd. For them, it is crisis management. A
majority of people don't know, and don't want to waste their time to get the
tools that are available, most of them even free, that will help them keep
their system clean and running at peak performance. Besides, once you get
them, then..Dang! ...you have keep them updated. Right? If it don't up date
itself, then it's too much trouble so they don't bother. Why? Because, they
have an AV..right?
Because your machine runs too fast without it? :O)
Ahhh....hee hee and hee.... ;-)
Yes, but on access scanning is *definitely* preventative because
detection and cleaning could be done at any time. On demand is
also of a preventative nature (if used correctly). Saying that AV's
primary role is to clean up the mess is just wrong - it is an added
feature that apparently gets people to misunderstand its primary
role - detection.
Sure, it is prevenative, and yes it can look for the dust bunnies under the
bed and wax any it finds all at the same time, no argument there....
well.....
I don't think my view makes me totally wrong. I would indeed
be wrong if I held that detection was not important. I agree that it is a
very important part of the over all program function.
The on-demand AV is a real Ace in the hole. Especially, the DOS versions.
But, I've had need of my F-Prot on more that one event with both Norton and
McAfee, and it has earned my confidence and loyalty.
I was only taking issue with the whole "AV is a mop and bucket"
approach.
Oh......'k.....I forgive you.
;-)
True (same for me), which is why I have to laugh at some of the
posters when they say "I switched to BrandX AV after ACME-
AV let a virus slip through" - it usually tells more about the poster
than it does about ACME-AV (the one that is preferred by nine
out of ten genius coyote's)
Can't be *that* bad (or can it?).
Well...I dunno....but...my fellow members of the choir make me hum the
songs.........silently. ?..?
True, and AVs calling everything a "virus" doesn't help either.
(Grrrr)
That is very confusing. My cousin is elderly and not very computer
experienced, especiailly with viruses and scumware. He called recently and
said he got his e-mails to me be back saying they had something in them
called MyDoom. Did I know why they had been sent back. After a good deal of
explaing things in as few, easy words as I could, I asked when he had last
run his AV. He said he had run it several times after he got the last
e-mail back, and it didn't find anything at all. I asked what the name of
his AV was, and he said SpywareHunter, that he had bought it off the
Internet and downloaded it a couple of months ago.
GHAK!!! I explained the difference and asked if he had ever had a different
AV before. He said yes, and he still had the Norton. When I asked when he
had last updated it, he said he hadn't done that yet. I asked how long he'd
had the Norton. Oh..about 2 years or so. <sigh> But, see, here is a
perfect example of someone thinking that the SpywareHunter was an AV, and
not taking the time to learn how to properly use the AV he already had.
When malware adopts the use of retaliatory payloads for any
attempt to remove it while active, you will find more people
leaning toward prevention.
Well...in view of what has been happening recently and what is out there
now, and due only to get worse, you'd think most would already be convinced
to take some responsibility on their own. And learn how.
I agree with that view, and I don't have anything really bad to say about
removal tools in general - just that they are not AV programs. They only
scan for a small subset of known malware, and their primary function is
to remove the malware that it knows how to remove.
Agreed. Omigaw! Did we just agree on something here?!?! Dang! How did
that happen? Now stop that!
;-)
Jan