Super Antivirus Download

0 views
Skip to first unread message

Niobe Hennigan

unread,
Aug 5, 2024, 4:53:07 AM8/5/24
to chrisarineth
Onmy new Windows 10 PC Sophos antivirus is preinstaled defenetly not the best antivirus programm, but since I have no other have to live with it. The bigest problem with it is the deletion of files which it thinks to be malicious without even asking me. Is there a way to temporally deactivate antivirus? I tried to shut it down with task manager, but thats not working.I have also instaled Malwarebytes which could replace Sophos, but it was not working. Looks like Malwarebytes is not compatible with Windows 10, since had exactly the same problem on some other Windows 10 PC.

I use BitDefender Endpoint Protection on 200+ machines and servers. As I am about to renew the licence that is about 7000 USD / triennial, I was wondering is the antivirus necessary at all today on Windows 10?


EDIT: It said below I need to edit this question, so here gives: I am sysadmin for almost 20 years, and I need something measurable in AV protection comparison, especially from someone who is in similar position as I am. For example - if metrics say 99.4% vs 99.9% protection, that can mean much or nothing, depending on situation, so some explaining will help. The current situation is that it seems all AV programs are good, which makes the question is Windows Defender good enough from Enterprise point of view. Savings that could be made on this are huge, therefore this question must be considered. Over 6yr period AV programs costs about the same as Windows licence.


I have recently started using Ubuntu. I am wondering about the point of installing antivirus programs on Ubuntu. On SuperUser, I found the opinion that it only detects "windows viruses" and removes them. Is there a point in installing antivirus if I don't have any other OS?


Well, it factually is not... it's just less subject to hackers developing viruses that target Linux systems. Consumer grade computers usually run on Windows and thus, when targeting a wide audience, Windows is the way to go.


Some distros have additional protection layers such as SELinux in Ubuntu for example. Then there's the default firewall and the fact that alien files don't automatically have permission to be executed. Specific execution permission has to be granted before execution is possible.


Then there are several other factors that make Linux a hard place to be for viruses usually non-root users on Linux systems have no to little executable files at their disposal that would allow for viruses to stay undetected en propagate. Some programs just require you to be logged in as root (or by use of sudo) before they run or to access/modify directories other than your home. It's just a lot harder to develop a viable virus that would spread as good as it would in Windows.


As mentioned below, most machines that run Linux are either servers that are run by people who know a thing or two about what they're doing. People that run Linux for desktop use usually choose to and also do know what they're doing. Almost all computer illiterate run Windows and therefore it's much easier to get those computers infected. "Hey, this machine tells me that I have I virus and I have to purchase this Anti-Virus program called 'FAKETrojanHunter' to get rid of it... Okay, let's do it!"


Because no Linux distribution/installation is equal per se, it's harder to develop malware that would infect them all as efficient as possible. Furthermore, almost all software run on Linux is Open Source, making malware much more easily detectable since it's source is open to the public.


Yes there is. Imagine that you have a file with a windows only virus as part of the payload and it passes through your Linux machine. You have the opportunity to remove it before it is sent with e-mail or on a USB stick to a friend. If this happens the virus is now on his Windows machine.


The reason is simple: an antivirus can only detect known viruses. If his system gets security updates on time, this is just as good. Because the security updates usually roll in a fast as the antivirus signatures.


If you like installing third-party software from non-official package repositories "PPA"s, whatever that you cannot trust, if you manually install software that will not receive automatic security updates and just always jump the latest trends, maybe even try running windows sofware on Linux, then you are just as vulnerable as the average Windows user, who is downloading unsigned software over the internet. Get an Antivirus.


The power admin writes his own tool that frequently computes checksum for key parts of his system and sends them off-site for comparison. Since most of the files come from official software packages, there exists a known "truth" of correct checksum. Any modification of a system file is quickly detected, but since his checksum service is not off-the-shelf but a custom solution, any attacker misses this hidden trap, and triggers the alert. (There exist off-the-shelf solutions such as tripwire, but they are fairly easy to disable.)If the virus actually gets that far, and isn't earlier stopped by sandboxes and SELinux policies hand-crafted by the admin in minutious fine-tuning.An anti-virus provides virtually no benefit here.


With Linux systems I worry a lot more about penetrations/attacks. When I ran an SSH server on the normal SSH port I'd see hundreds of login attempts a day from China, mostly random account/password combinations but it made me nervous enough to move the port higher.


I think you'd get much more benifit from a system like tripwire than from a Windows-style antivirus. I believe tripware scans your logs for particular patterns, watches for elevated privilages and permission changes on files.


I have been using arduino since version 1.0.1, and I have never really experienced any issues with compile times on several different machines. Right now I have a sketch of about 600 lines using the FastLED library version 3.001.003 which I know works perfectly fine. When I compile+upload from my 5 year old lenovo laptop, the whole process takes about 50 seconds. The aforementioned computer runs win10 latest update with a dual core i7 3520m and 4GB of RAM.


However, when trying the same sketch with my gaming machine (quad core i5 6600k 16GB RAM and also win10) compiling alone takes around 3 minutes! Both machines are running arduino 1.8.0, and I had the same issue with 1.7 and 1.6. Does anyone know what is going on? Any suggestions will be most appreciated.


So if the antivirus has to scan each of those files it could slow it down significantly. Since the build folder name is different every time(something like arduino_build_788025) it might be difficult to whitelist it in your antivirus software. You might temporarily disable your antivirus for one compilation to determine if it's the cause of the slowness.


I've been taught that I should never install two antivirus (AV) softwares together, because they will conflict. Even Windows Defender (since Windows 8) disables itself upon detecting another AV software.


I'm curious how two can conflict. The only scenario I can currently figure out is when both detect the same virus and try to quarantine it simultaneously, which can result in a "virus conquest battle". To me this surely isn't a convincing reason not to install two AV softwares.


AV software with live protection features deeply integrates itself into operating system. It patches some of OS code so that it can observe whatever programs attempt to do and prevent them from doing so, if necessary. Operating systems don't provide such capabilities out-of-the-box, so AVs use less conventional methods to achieve this effect.


For example, it can replace the "write file" function that OS provides with its custom one. When a program attempts to write to a file, it will call the "write file" function. But the function was patched by AV and program's request will be redirected to AV instead. AV will inspect it and decide if it looks OK. If it does, it will call actual "write file" function. Otherwise, it will take appropriate action to prevent malicious software from doing any damage.


Unfortunately, patching of OS code is not only necessary for AVs, but also suspicious. If you were creating a virus, wouldn't you also like to be able to intercept system operations, for example to prevent AV from scanning virus files?


In some cases, even AV scanners without live protection can interfere. How do AVs detect viruses? Well, they have their virus signatures, ie. databases of distinctive features of known viruses. And so it happens that such database can also appear suspicious, because, well, they have distinctive features of viruses. So one AV could hypothetically detect other AV's signatures as malicious code.


There are also AV engines designed to coexist with other AVs, for example Hitman Pro. ClamWin (which is free and open-source) should also be relatively issue-free when coexisting because it contains only a scanner without any live protection.


Programs conflict when they both attempt to use the same resource. When multiple programs attempt to operate on a resource at the same time, there is a risk of Concurrency Problems. Concurrency problems occur when one process performs a change on the resource, and the other program (which was in the middle its own modification to the resource) is unaware of it, and thus unable to accommodate.


A married couple have a shared bank account and ATM cards. They have 1000USD in their account. In their daily life, they are on opposite sides of town, and both access the ATM at the same instant. They both withdraw 1000USD. The ATMs both know that the balance is 1000, so they allow the withdrawl, and then write back to the central database that the new balance is 0.


There are a few ways to deal with these kinds of issues. One is to use software that arbitrates between the multiple parties accessing the resource. These arbiter programs have two options, depending on the scope and predictability of the operations:

3a8082e126
Reply all
Reply to author
Forward
0 new messages