Forum Home
PC World Chat
 
Thread ID: 116458 2011-03-04 21:16:00 Latest PCworld Rubbish wainuitech (129) PC World Chat
Post ID Timestamp Content User
1183595 2011-03-08 20:04:00 But I think that Greven is probably right in general. Digby (677)
1183596 2011-03-08 21:04:00 Have the rest of you noticed that techs in large businesses tend to sing the praises of Symantec products & recommend them to all & sundry even though they have no experience with infected PCs because their systems are locked down too tight to catch anything?

There is that, but also remember that the corporate versions are not the same as the consumer versions of their applications.

:pf1mobmini:
johcar (6283)
1183597 2011-03-08 23:27:00 There is that, but also remember that the corporate versions are not the same as the consumer versions of their applications.

:pf1mobmini:

And most corporations have robust hardware firewalls and spam filters before anything gets close to workstations!
SolMiester (139)
1183598 2011-03-09 00:12:00 And most corporations have robust hardware firewalls and spam filters before anything gets close to workstations!

Yes - the biggest PITA for corporates is staff bringing in flash drives and similar media from home (with god knows what on it) and plugging them into their workstation.... :stare:
johcar (6283)
1183599 2011-03-09 01:56:00 When I was working for EDS they disabled the USB ports on client workstations for that very reason. Still didn't stop CDs or DVDs considering most came with burners :p

:pf1mobmini:
Chilling_Silence (9)
1183600 2011-03-09 04:03:00 Still didn't stop CDs or DVDs considering most came with burners :p

My high school simply ordered PCs without optical drives :p
pcuser42 (130)
1183601 2011-03-09 06:22:00 OK so I figure I could wait for PCW to do it, or I could do it myself.

1) Build XP VM on server (Just so happens to be in a datacenter, so as soon as I configure the LAN, its publicly available to the world with no NAT to hide behind)
2) Take snapshot of vanilla OS
3) Install Antivirus A
4) Infect
5) Try and install Symantec after and see what it picks up that Antivirus A missed
6) Try and install NOD32 after and see what Symantec also missed
7) Rinse and repeat with multiple AV apps
8) Win!

So, if you know of any websites I can visit to get infected, or you have malicious emails that you can send to me, then I'm keen as and please PM me!

Will let you all know how I go :)
Chilling_Silence (9)
1183602 2011-03-09 10:44:00 Just as an extra test Chill, image those vanilla instances and create a version with each AV pre-installed and do the same test.

People don't usually get infected and THEN install an AV. The AV is usually already installed and just doesn't do it's job (in the case of Norton and McAfee, for instance).
johcar (6283)
1183603 2011-03-09 17:24:00 Yes, that's right, that's why 3) is install AV, and 4) is Infect :D

Hence why I need people to PM me sites they know to be dodgy and install viruses / trojans / stuff ...
Chilling_Silence (9)
1183604 2011-03-09 21:01:00 Sorry Chill - it was late, and in my defence, I had had a couple of pretty hard days in a row at work .









The couple of beers last night probably didn't help my powers of concentration either . . . . :D
johcar (6283)
1 2 3 4 5 6 7 8 9