Anti-virus recommendations please

[ponder]

For years I used avast or avira but for the last 5yrs or so I've just stuck with mse/defender. Never had issues and I've tested with other av products. mse/defender use way less resources and stays out of your way.

As with any av product you have to keep it updated.

 

[Bryn]

For years I used avast or avira but for the last 5yrs or so I've just stuck with mse/defender. Never had issues and I've tested with other av products. mse/defender use way less resources and stays out of your way.

As with any av product you have to keep it updated.

Defender looked very poor from my understanding of the 2016 report from AV Comparatives.

Avira is the most hidden antivirus I've ever had thus far - no notifications ever. And one of the areas it stood out in the report (in which it won the Product of the Year) was its low resource use. I would feel uneasy having Defender as my only line of defence beyond the firewall.

 

[cyberbob1979]

I used to use AVG until the endless ad popups pissed me off.

So I changed to Avira - and I found a popup blocker for its built in ads (just google it - it's called BGPKiller and just nullifies the popups so you never see it.

Quite happy since then.

 

[w1z4rd]

Thanks seems like you do too keep formatting.

To give you a tiny idea of how wrong you are I made this video .....

[video=youtube_share;Rk8SvEiW2Fs]https://youtu.be/Rk8SvEiW2Fs[/video]

I really hope it inspires you to learn more about security. Your advice is dangerous.

 

[w1z4rd]

I hope our Windows Defender defenders learnt something from my video. You can not secure windows, if you think you can, you are a security risk.

However since its a constant toss off between functionality and security, and you decide you just have to have MS Word (or if you are like me, play games on it), then segment your lan. If you do not, that windows machine can be used to pivot into the rest of your network. Any Windows machine on your network is a big "pick me" sign to a hacker. Any Windows machine with just Defender on it is a little like clubbing baby seals.

The biggest lie, IT people tell themselves is, "I am too small to hack or for hackers to care about". They say this with being ignorant to the fact that 75% of SME companies have been hacked and as larger companies start waking up to the new security reality of the modern internet and hardening their defenses..... more and more of the smaller companies will become low hanging fruit for the ever growing ocean of hacker opportunists.

More people are getting connected who come from disadvantaged communities around the world. Lots of unemployed poor people with Internet access and time. Your distance away from them means nothing. The security you had a year ago will not be good enough in a years time from now. Things are escalating.... and most IT people (which is scary, because like backstreetboy, they advise people who know less) are still stuck in the 90`s on how they think and handle modern day infosec.

An antivirus, just isnt good enough anymore. Even if you are installing the best antivirus, you are behind the times, if you still are stuck with defender... or advising people to use it... then your lack of ability to change and adapt is going to hurt you and those you give advice to.

 

[backstreetboy]

Good morning IT people

I bought a new PC for use in a small business. It is a standalone and not connected to any network.

What do you recommend as antivirus software? ESET or AVG?

Thanks

.

 

[w1z4rd]

.

Still bad advice. Do I need to make more videos involving USB payload injectors? Have you met Mr Rubber Ducky?

 

[lord-of-war]

I hope our Windows Defender defenders learnt something from my video. You can not secure windows, if you think you can, you are a security risk.

However since its a constant toss off between functionality and security, and you decide you just have to have MS Word (or if you are like me, play games on it), then segment your lan. If you do not, that windows machine can be used to pivot into the rest of your network. Any Windows machine on your network is a big "pick me" sign to a hacker. Any Windows machine with just Defender on it is a little like clubbing baby seals.

The biggest lie, IT people tell themselves is, "I am too small to hack or for hackers to care about". They say this with being ignorant to the fact that 75% of SME companies have been hacked and as larger companies start waking up to the new security reality of the modern internet and hardening their defenses..... more and more of the smaller companies will become low hanging fruit for the ever growing ocean of hacker opportunists.

More people are getting connected who come from disadvantaged communities around the world. Lots of unemployed poor people with Internet access and time. Your distance away from them means nothing. The security you had a year ago will not be good enough in a years time from now. Things are escalating.... and most IT people (which is scary, because like backstreetboy, they advise people who know less) are still stuck in the 90`s on how they think and handle modern day infosec.

An antivirus, just isnt good enough anymore. Even if you are installing the best antivirus, you are behind the times, if you still are stuck with defender... or advising people to use it... then your lack of ability to change and adapt is going to hurt you and those you give advice to.

So what is your recommendation?

 

[backstreetboy]

So what is your recommendation?

 

[Geoff.D]

So what is your recommendation?

I hope our Windows Defender defenders learnt something from my video. You can not secure windows, if you think you can, you are a security risk.

However since its a constant toss off between functionality and security, and you decide you just have to have MS Word (or if you are like me, play games on it), then segment your lan. If you do not, that windows machine can be used to pivot into the rest of your network. Any Windows machine on your network is a big "pick me" sign to a hacker. Any Windows machine with just Defender on it is a little like clubbing baby seals.

The biggest lie, IT people tell themselves is, "I am too small to hack or for hackers to care about". They say this with being ignorant to the fact that 75% of SME companies have been hacked and as larger companies start waking up to the new security reality of the modern internet and hardening their defenses..... more and more of the smaller companies will become low hanging fruit for the ever growing ocean of hacker opportunists.

More people are getting connected who come from disadvantaged communities around the world. Lots of unemployed poor people with Internet access and time. Your distance away from them means nothing. The security you had a year ago will not be good enough in a years time from now. Things are escalating.... and most IT people (which is scary, because like backstreetboy, they advise people who know less) are still stuck in the 90`s on how they think and handle modern day infosec.

An antivirus, just isnt good enough anymore. Even if you are installing the best antivirus, you are behind the times, if you still are stuck with defender... or advising people to use it... then your lack of ability to change and adapt is going to hurt you and those you give advice to.

Am really interested in what you would recommend. So please what should we do?

I have for years used Norton and still have a valid subscription. But as I said in my post, I have two PCs I help keep up to date, both have Norton installed on them and both also have available Windows Defender. On the one machine the owner runs Norton with Defender disabled. On the other Defender runs with Norton disabled.

Once a month I update software on these machines and I run a full scan. I then swop over Defender and Norton and run another full scan. The results are the same on both machines Defender and Norton pick up exactly the same problems if there are any.
I am keen to know what to do in 4 month time about renewing the Norton subscription. At the moment, There is no evidence to suggest that it is nec at all, and that Defender is "okay".

 

[w1z4rd]

Am really interested in what you would recommend. So please what should we do?

I have for years used Norton and still have a valid subscription. But as I said in my post, I have two PCs I help keep up to date, both have Norton installed on them and both also have available Windows Defender. On the one machine the owner runs Norton with Defender disabled. On the other Defender runs with Norton disabled.

Once a month I update software on these machines and I run a full scan. I then swop over Defender and Norton and run another full scan. The results are the same on both machines Defender and Norton pick up exactly the same problems if there are any.
I am keen to know what to do in 4 month time about renewing the Norton subscription. At the moment, There is no evidence to suggest that it is nec at all, and that Defender is "okay".

SophosXG is a gateway server I currently use, and you can stay in their product range for the rest of the end point devices . They have a comprehensive suite, but definitly XG as your gateway, and I would go Bitdefender (paid edition) For PC`s, the phone AV is still kinda a much of a much. If you want uniformity, Sophos range is good, or bitdefender. I like sophos for its firewall. Its what I use, it lets me to do packet inspection on the fly. Kerio, a big industry infosec player use Sophos filter rules for their firewall and I have a ton of respect for Kerio (these are all stand alone firewalls, ie appliance, not software installs for your PC). However, Im thinking of trying bitdefender box with bit defender, as bitdefender is just an awesome antivirus.

Its one of three or 4 that would have detected the attack type I show in the video as it warns the target if they are being arp poisoned.

Im not all that sold on Sophos AV, its not as good as bitdefender AV, but it really really fits in nicely as a uniformed system. So when you need to manage lots of networks with many remote sites, it rocks.

The best performing AV is TrendMicro. It is more secure than Bitdefender or Sophos, but for me, crosses the security vs functionality trade off and its a little too strict. Great for locking down employees though.


Notable exclusions:
Kaspersky. Good antivirus, but unless you believe Putin has your best interests at heart... there may be trust issues.
ESET: I dunno, it used to be awesome, but lately I have noticed it can sometimes score really high, and sometimes score pretty average. Its up and down... The paid version can also detect arp poisoning. I dunno, I just lost my buzz for it. I am currently underwhelmed. Nothing really critical on it, but nothing I can honestly say "its awesome" about.
AVG: Most payload generators come with AVG avoidance methods as its so common.
Panda: Its chinese, by default I avoid.
Avira: Solid, free version cant detect arp poison, never tried the paid version

 

[Ishisheean]

Thank you Ghoti, comprehensive response.
I was balancing between Kaspersky and Bitdefender for my home network.
so you have given some food for thought.
Would be keen to hear your opinion on Bitdefender Box

 

[DeadZone1121]

Eset

+1. We do our system cleanups in store using eset.

 

[SYNERGY]

I believe FNB offers Trend Micro for free.

On Premier at least.

 

[Bryn]

SophosXG is a gateway server I currently use, and you can stay in their product range for the rest of the end point devices . They have a comprehensive suite, but definitly XG as your gateway, and I would go Bitdefender (paid edition) For PC`s, the phone AV is still kinda a much of a much. If you want uniformity, Sophos range is good, or bitdefender. I like sophos for its firewall. Its what I use, it lets me to do packet inspection on the fly. Kerio, a big industry infosec player use Sophos filter rules for their firewall and I have a ton of respect for Kerio (these are all stand alone firewalls, ie appliance, not software installs for your PC). However, Im thinking of trying bitdefender box with bit defender, as bitdefender is just an awesome antivirus.

Its one of three or 4 that would have detected the attack type I show in the video as it warns the target if they are being arp poisoned.

Im not all that sold on Sophos AV, its not as good as bitdefender AV, but it really really fits in nicely as a uniformed system. So when you need to manage lots of networks with many remote sites, it rocks.

The best performing AV is TrendMicro. It is more secure than Bitdefender or Sophos, but for me, crosses the security vs functionality trade off and its a little too strict. Great for locking down employees though.


Notable exclusions:
Kaspersky. Good antivirus, but unless you believe Putin has your best interests at heart... there may be trust issues.
ESET: I dunno, it used to be awesome, but lately I have noticed it can sometimes score really high, and sometimes score pretty average. Its up and down... The paid version can also detect arp poisoning. I dunno, I just lost my buzz for it. I am currently underwhelmed. Nothing really critical on it, but nothing I can honestly say "its awesome" about.
AVG: Most payload generators come with AVG avoidance methods as its so common.
Panda: Its chinese, by default I avoid.
Avira: Solid, free version cant detect arp poison, never tried the paid version

Why do you say that Trend Micro is the best performing AV? In the 2016 AV-Comparatives report it was only on the map for false positives. It was a no-show in every other category.

Bitdefender and Kaspersky won best performance, and overall top product went to Avira.

 

[Clive2]

Yea, Nod32 Eset rocks!
Best one I ever used - powerful, small footprint, user friendly.
After it expired, can't seem to find a shop retailer (RSA) that stocks it.
Kaspersky ok, but irritatingly naggy when offline.

 

[zippy]

A PC not connected to any network. Is that even possible ?

I only discovered that my PC's DVD drive had never worked 2 years after I bought it. I dont think the power cable is plugged in. That was about 8 months ago. I still havent bothered to investigate further.