I am looking for an antivirus solution that does not require internet access to offer basic protection. Our customer's computers are mostly not connected to the internet, but vunerable to infection by USB Sticks or other media.
If the computer to protect are networked then your best bet is to use some sort enterprise package (McAfee, Nod32, Kaspersky just to name a few) that allows you to use a local server as an update delivery server. That way you could load the virus definitions onto the server, and let the rest of the computers update their virus bases from there.
Download File https://tlniurl.com/2yLFgU
You could look for something like ThreatFire, but I don't think that it will help people who are unable to manually update virus definitions. It will look for any suspicious process and prompt user for action. This can interfere with normal functioning of some programs and can cause problems if user can't tell difference between regular program and virus.
So, if your user are inexperienced with computers, a standard anti-virus with automatic updates is the best solution. It will normally update itself whenever the user does finally connect to the Internet.
If not all computers are connected to the Internet, but all are connected to the internal network, you could set up a centralized server (connected to the Internet) that will push the definition updates to the entire network.
An antivirus needs Internet connection only for update virus database. So every antivirus can work without connection long time. But without update it can't detect new viruses. The problem is that costumer can use usb with data which is newer than virus database.
The question is what do you mean "basic protection". If you mean protect from old viruses you can use every antivirus software. If you mean good protection I don't believe that any antivirus can be sufficient for this task.
I need to upgrade from PAN 9.0.4 to 10 but without an internet connection where i have to upload the images manually, what im not sure about is that i read i need to make sure i meet the minimum content release for the target version which makes the upgrade process very frustrating , am i supposed to upgrade content release for each version along the way and for each feature like app , url , antivirus ? also it it possible to download the content offline and upload it and install it without internet connection
You just need to go to the support.paloaltonetworks.com site and login. There you'll find all of the dynamic updates and software updates that you actually need for this. As for the content update, you'll simply download the the Apps + Threats bundle and install the latest version (8374-6538 at the moment). You should take the time to install the updates to the other dynamic updates that you have subscriptions for as well; if you're paying for those subscriptions and never updating them you're just throwing money in the garbage.
I've been handed a computer for cleaning. It's infected with the Phobos ransomware (Deuce variant), and because the infection is probably still active, I really don't want to connect it to my network, or any network I care about at all. The standard MalwareBytes install would seem to be a small installer that then goes out to the internet for (at least) definitions. Is there any way for me to retrieve a copy of the full installer, with definitions, that I can drop onto this machine via a thumb drive?
STEP 03
Please download the Farbar Recovery Scan Tool and save it to your desktop.
Note: You need to run the version compatible with your system. You can check here if you're not sure if your computer is 32-bit or 64-bit
Just to confirm before I crank this up - I note that both AdwCleaner and Farbar Recovery are relatively small, 5 and 10 MB range. Given how many viruses are out there, this would suggest that there are no definitions included in these programs. Do these programs fetch definitions from the Internet - do I have to have a hot connection to run them?
Also, MalwareBytes has already been run on this machine and isolated four files and one directory that were identified as PUP varieties, rather than active ransomware. I expect that a scan now will show no problems, making the scan report useless, and I'm wondering if there is a way to get a virus chest report in the format you want?
FRST is not an antivirus or malware scanner. It's just a tool to see what is running on the system. AdwCleaner can get updates from thee Cloud but like Malwarebytes both will run locally without updates if there is no network.
Certainly. Files are attached. MB11.txt is the MalwareBytes scan from today. I have the scan that caught PUPs as well if you need it. AdwCleaner actually made two log files, an S00 scan log and a C00 clean log; attached is the C00 clean log. And of course the FRST logs are attached as well. Farbar did complain about no internet connection, AdwCleaner did not.
Run FRST or FRST64 and press the Fix button just once and wait.
If the tool needs a restart please make sure you let the system restart normally and let the tool complete its run after restart.
The tool will make a log on the Desktop (Fixlog.txt). Please attach or post it to your next reply.
I'll note that a large number of applications would report failure to start originally; some of the more important ones looked to be preload bits for QuickBooks - this machine is used for accounting, apparently. After the fix, I'm not getting quite as many of those notifications. It would appear that this particular version of ransomware also will encrypt a lot of executable files, and programs were failing to start because their DLLs were no longer readable.
Just before the reboot, there was a warning that UAC settings were less than optimal, and offered to correct them. I think that was from Kaspersky which - stupidly - I forgot to disable. I can easily rerun FarBar with a new fixlist to cover anything Kaspersky refused it permission for, if necessary. I'm guessing that Farbar changed UAC so that it could autorun on reboot, and I'm hoping it changed them back.
Alas, not Kaspersky. One of the things this virus did was break my Internet connectivity. Vexingly, it seems to have decided to encrypt DLLs as well, and one or more of the DLLs it has destroyed seems to be a filter driver on the network stack; the machine can see that it has a cable plugged in, and may eb able to get an IP address via DHCP, but can't see anything on the network. Every file that I've posted here, and every download that has run on that computer, has been transferred by thumb drive, because that's the only form of communication it has.
I was very afraid that would be the case. Alas. Apart from paying these clowns the ransom, there's unfortunately no way to get the data back... and what was supposedly a pretty solid AV just let this thing have its way with the machine. Saddening, it is.
One can always back up the data in the hopes that a decrypt tool will be released in the future. At different times there have been tools released to restore data. In some cases because the person doing the attack accidentally stored or left the private key somewhere.
If you're not backing up your data and you're still using Google Chrome then you're just not serious about Privacy, Safety, and protecting your data. Malwarebytes is a fantastic program but you still need to back up your data and you still need to block scripts and Ads in your browser.
If you're still using Google Chrome I would highly suggest you consider using Firefox instead. For more advanced users you might consider installing NoScript as well (it does have a higher learning curve though)
Help Secure your browsers
You may be interested in using our new Malwarebytes Browser Guard to help protect your browser from items that uBlock or others don't target.
Just because you are connected by WiFi or Ethernet to your Router does not mean you can connect to the Internet. Could be a bad modem, or your connectivity to your ISP network or some problem that the ISP is having.
With WiFI turned on, hold the Option-key (sometimes called "Alt") down while you click on the WiFi menubar icon and select "Open Wireless Diagnostics...". That may give you some clues as to what's gone wrong.
I see some signs in your diagnostics file that your computer was able to connect to an Apple server successfully, so it doesn't look like it's a universal issue. Is this only affecting a particular app?
If you're having the same problem in safe mode, then whatever the cause of the problem is, it's not third-party software, including malware. It's a configuration issue somewhere, probably on your Mac, but I'm not sure what that might be.
Since the network connections done in the diagnostics were to raw IP addresses, that could mean that the problem is with your DNS settings, and the problem isn't with the network connection itself, but rather is with the ability to look up IP addresses for domain names. See:
There has been malware that has been known to change network settings. It's not particularly common, but it has happened. So I'm definitely interested in continuing to follow what's going on, and we can still give advice regardless.
I let Malwarebyte run a test and it found 2 files which where put into quarantine. I deleted this 2 files. After that my internet connection was lost, but my wifi is still connected. Any app which uses internet doesn't work anymore (safari, chrome, app store ...)
7fc3f7cf58