Vista - Re: Windows Firewall and 3rd Party Firewall

04-23-2009

On Wed, 22 Apr 2009 18:47:08 -0400, "FromTheRafters" <erratic
@nomail.afraid.org> wrote:

Quote:

>From:
>
>http://technet.microsoft.com/en-us/l.../cc507878.aspx
>
>"Virus Scanning Programs
>
>Most anti-virus software has a real-time scanner program that starts
>when the user logs in and scans all files accessed by the user, looking
>for possible virus contamination. Make sure your rules allow your virus
>scanning programs to run."
>
>Why would they mention that if it were no longer needed?

Try keeping things in their proper perspective.

Quote:

>> Now I do agree with you, that there is a little chance to get infected
>> when I use my admin account to install new software.
>> But is it really a threat?.

>
>Maybe not now, as malware writers have plenty of low hanging fruit to
>harvest. Things could change though.

As humans we can imagine all kinds of stuff. But try to keep some
realism to the discussion.

Quote:

>> You only have to follow one rule. Always download software from
>> trusted sources and think.
>> You would have the same issue if you want to find a good plummer or
>> restaurant. What do you do?.
>> You do some research (google), ask your friends or famile, ask your
>> co-workers, ask in forums etc.
>> Even a complete newbie, should be able to handle that.
>> To me its really that simple. There is no reason to complicate that
>> fact and spread fear to the users and newbies.
>> Combin the above with a little education, we will win the war on
>> malware in a very short time.

>
>...and then you wake up...

and try staying a little serious.

04-23-2009

"Root Kit" <b__nice@xxxxxx> wrote in message
news:rbl1v4168hmdiqdellga8jk60bf3q5hdeh@xxxxxx

Quote:

> On Wed, 22 Apr 2009 18:47:08 -0400, "FromTheRafters" <erratic
> @nomail.afraid.org> wrote:
>

Quote:

>>From:
>>
>>http://technet.microsoft.com/en-us/l.../cc507878.aspx
>>
>>"Virus Scanning Programs
>>
>>Most anti-virus software has a real-time scanner program that starts
>>when the user logs in and scans all files accessed by the user,
>>looking
>>for possible virus contamination. Make sure your rules allow your
>>virus
>>scanning programs to run."
>>
>>Why would they mention that if it were no longer needed?

>
> Try keeping things in their proper perspective.
>

Quote:

>>> Now I do agree with you, that there is a little chance to get
>>> infected
>>> when I use my admin account to install new software.
>>> But is it really a threat?.

>>
>>Maybe not now, as malware writers have plenty of low hanging fruit to
>>harvest. Things could change though.

>
> As humans we can imagine all kinds of stuff. But try to keep some
> realism to the discussion.
>

Quote:

>>> You only have to follow one rule. Always download software from
>>> trusted sources and think.
>>> You would have the same issue if you want to find a good plummer or
>>> restaurant. What do you do?.
>>> You do some research (google), ask your friends or famile, ask your
>>> co-workers, ask in forums etc.
>>> Even a complete newbie, should be able to handle that.
>>> To me its really that simple. There is no reason to complicate that
>>> fact and spread fear to the users and newbies.
>>> Combin the above with a little education, we will win the war on
>>> malware in a very short time.

>>
>>...and then you wake up...

>
> and try staying a little serious.

I am serious. AV is still needed even after a strict adherence to what
Jesper has outlined. You could still have your files infected through
worm intrusion or by viral infiltration into the trusted source
scenario.

Another tidbit from the same document:

"Scope of Software Restriction Policies

Software restriction policies do not apply to the following:

[] Drivers or other kernel-mode software.

[] Any program run by the SYSTEM account.

[] Macros in Microsoft Office 2000 or Office XP documents.

[] Programs written for the common language run time. (These programs
use the Code Access Security Policy.)"

Malware is the way it is, because the environment is the way it is.
Reduce the quantity of the low hanging fruit, and malware will become
more sophisticated. AV will still be necessary.

04-23-2009	#1 (permalink)
Root Kit n/a posts	Re: Windows Firewall and 3rd Party Firewall On Wed, 22 Apr 2009 18:47:08 -0400, "FromTheRafters" <erratic @nomail.afraid.org> wrote: Quote: >From: > >http://technet.microsoft.com/en-us/l.../cc507878.aspx > >"Virus Scanning Programs > >Most anti-virus software has a real-time scanner program that starts >when the user logs in and scans all files accessed by the user, looking >for possible virus contamination. Make sure your rules allow your virus >scanning programs to run." > >Why would they mention that if it were no longer needed? Try keeping things in their proper perspective. Quote: Quote: >> Now I do agree with you, that there is a little chance to get infected >> when I use my admin account to install new software. >> But is it really a threat?. > >Maybe not now, as malware writers have plenty of low hanging fruit to >harvest. Things could change though. As humans we can imagine all kinds of stuff. But try to keep some realism to the discussion. Quote: Quote: >> You only have to follow one rule. Always download software from >> trusted sources and think. >> You would have the same issue if you want to find a good plummer or >> restaurant. What do you do?. >> You do some research (google), ask your friends or famile, ask your >> co-workers, ask in forums etc. >> Even a complete newbie, should be able to handle that. >> To me its really that simple. There is no reason to complicate that >> fact and spread fear to the users and newbies. >> Combin the above with a little education, we will win the war on >> malware in a very short time. > >...and then you wake up... and try staying a little serious.
My System Specs

04-23-2009	#2 (permalink)
FromTheRafters n/a posts	Re: Windows Firewall and 3rd Party Firewall "Root Kit" <b__nice@xxxxxx> wrote in message news:rbl1v4168hmdiqdellga8jk60bf3q5hdeh@xxxxxx Quote: > On Wed, 22 Apr 2009 18:47:08 -0400, "FromTheRafters" <erratic > @nomail.afraid.org> wrote: > Quote: >>From: >> >>http://technet.microsoft.com/en-us/l.../cc507878.aspx >> >>"Virus Scanning Programs >> >>Most anti-virus software has a real-time scanner program that starts >>when the user logs in and scans all files accessed by the user, >>looking >>for possible virus contamination. Make sure your rules allow your >>virus >>scanning programs to run." >> >>Why would they mention that if it were no longer needed? > > Try keeping things in their proper perspective. > Quote: Quote: >>> Now I do agree with you, that there is a little chance to get >>> infected >>> when I use my admin account to install new software. >>> But is it really a threat?. >> >>Maybe not now, as malware writers have plenty of low hanging fruit to >>harvest. Things could change though. > > As humans we can imagine all kinds of stuff. But try to keep some > realism to the discussion. > Quote: Quote: >>> You only have to follow one rule. Always download software from >>> trusted sources and think. >>> You would have the same issue if you want to find a good plummer or >>> restaurant. What do you do?. >>> You do some research (google), ask your friends or famile, ask your >>> co-workers, ask in forums etc. >>> Even a complete newbie, should be able to handle that. >>> To me its really that simple. There is no reason to complicate that >>> fact and spread fear to the users and newbies. >>> Combin the above with a little education, we will win the war on >>> malware in a very short time. >> >>...and then you wake up... > > and try staying a little serious. I am serious. AV is still needed even after a strict adherence to what Jesper has outlined. You could still have your files infected through worm intrusion or by viral infiltration into the trusted source scenario. Another tidbit from the same document: "Scope of Software Restriction Policies Software restriction policies do not apply to the following: [] Drivers or other kernel-mode software. [] Any program run by the SYSTEM account. [] Macros in Microsoft Office 2000 or Office XP documents. [] Programs written for the common language run time. (These programs use the Code Access Security Policy.)" Malware is the way it is, because the environment is the way it is. Reduce the quantity of the low hanging fruit, and malware will become more sophisticated. AV will still be necessary.
My System Specs

Similar Threads
Thread	Forum
Windows Firewall and 3rd Party Firewall	Vista security
3rd party Firewall Question	System Security
3rd Party Firewall	Vista security
Third party firewall killing my Internet connection	Vista networking & sharing
Do I really need a third party firewall?	Vista General