Anti-virus on Windows 8.1

[mojo]

Just upgraded to Windows 8.1, and I'm wondering what others are using for anti-virus protection, firewall etc. I used to use the free versions of Zonealarm and AVG whenn I had XP. I didn't really use anything on Windows 7.

So what are you guys using? Is the inbuilt Windows Defender any good?

Cheers
Sean

[Eevo]

Microsoft Security Essentials/Defender is good.
its all i use now days.


having a backup of important things is more important.

[Bytemrk]

Windows defender is pretty good now days.

I run Sophos as I can access it through work, good solid product. But I'm not sure if they sell a consumer version.

Should something slip past, Dave has some great advice here: http://www.aulro.com/afvb/computers/206533-incs-windows-system-trojan-virus-cleanup-procedure.html

[theresanothersteve]

Microsoft Security Essentials/Defender is good.
its all i use now days.


having a backup of important things is more important.

MSE on Windows 8? W8 uses a beefed up defender that, while running in the background, doesn't offer the functionality of a dedicated anti-malware program. In some ways its the worst part of upgrading.

I've used AVG (free version) and have recently moved to the subscription version of malware bytes. Telstra claimed I had a virus, which I did not believe, but on the off chance they were right I moved anti-malware. I was right, they were wrong, so AVG was doing its job.

I'd consider running diminished log on privileges as well. Make all your users normal users (not administrators) and have an admin log on for installing software or making system changes. Sure the UAC (user access control) offers similar protection, but sometimes people click yes without reading the dialog box or understanding what they are doing.

[spudboy]

Yeah - I use AVG (free version) too, and so far have not had any issues with viruses. Have got it running on 4 Win 8.1 machines.

There might be better out there, but I've never come to grief with AVG, so I stick with it.

[incisor]

you guys talking up avg are the best thing ever for computer mobs that do virus cleanups... ;)

i currently rate it at junk status myself, mainly because 80%+ of systems that i have come in from new clients for clean ups, come in with it installed.

MSE is much better, much lighter and with very few exceptions, much better at cleaning up any mess, generally speaking

do i rate it as sufficient if your using torrents and other out of the ordinary tasks, no, but it is better than most of the freebies by quite some distance...


:angel:

[spudboy]

OK - that is interesting. I will have to take another look at MSE then.

In the early days, anything to do with Microsoft and Viruses was a joke, so I've stayed away from it.

Am guessing I have to uninstall AVG to "install" MSE, or does MSE come as an inbuilt part of Win8.1?

[incisor]

mse is called defender in 8.1

if you uninstall avg..

after reboot go to the action center and make sure antivirus and anti malware support is turned on

do my cleanup like mark pointed out

see where you end up.

[spudboy]

I've just uninstalled AVG and am installing MSE on a test Win7 PC to see how it goes... if it's all OK I'll try it out on my main Win8.1 machine.

[~Rich~]

Try Avast free version.
Much better than Microsoft versions.
Avast 2015 | Download free antivirus software for virus protection (http://www.avast.com/en-au/lp-ppc-win-03?cha=ppc&sen=google&ste=avast%20free&var=51491946016&omcid=EN-AU_Search_Brand_Free&gclid=Cj0KEQiAneujBRDcvL6f5uybhdABEiQA_ojMgr3nAfx7 v92x4sXJHNjpwzPnfSJpMnRsqSZ4zQy9hs4aAoEE8P8HAQ)

[mojo]

Thanks for the advice guys. I'll guess I'll just stick with Defender for now. Might try Dave's cleanup procedure in a couple of months to see if I've picked up any nasties!

Cheers
Sean

[incisor]

Try Avast free version.
Much better than Microsoft versions.
Avast 2015 | Download free antivirus software for virus protection (http://www.avast.com/en-au/lp-ppc-win-03?cha=ppc&sen=google&ste=avast%20free&var=51491946016&omcid=EN-AU_Search_Brand_Free&gclid=Cj0KEQiAneujBRDcvL6f5uybhdABEiQA_ojMgr3nAfx7 v92x4sXJHNjpwzPnfSJpMnRsqSZ4zQy9hs4aAoEE8P8HAQ)

interferes with too many email programs to be rated too highly

causes slow transfers and timeouts

live mail in particular ...

[Ferret]

...Telstra claimed I had a virus, which I did not believe, but on the off chance they were right I moved anti-malware. I was right, they were wrong, so AVG was doing its job.

Telstra claimed I had a virus - Isn't this a scam.

<In a an Indian accenct> "Hello My name is Sanjay and I calling you from Telstra Technical Department to tell we have detected your computer has a virus, blah blah blah"

How would Telstra know?

[loanrangie]

Try Avast free version.
Much better than Microsoft versions.
Avast 2015 | Download free antivirus software for virus protection (http://www.avast.com/en-au/lp-ppc-win-03?cha=ppc&sen=google&ste=avast%20free&var=51491946016&omcid=EN-AU_Search_Brand_Free&gclid=Cj0KEQiAneujBRDcvL6f5uybhdABEiQA_ojMgr3nAfx7 v92x4sXJHNjpwzPnfSJpMnRsqSZ4zQy9hs4aAoEE8P8HAQ)

I got sick of the constant messages and re registration with avast so now use MSE on all 4 of our home pc/laptops with win7.

Sent from my GT-I9300 using AULRO mobile app

[theresanothersteve]

Telstra claimed I had a virus - Isn't this a scam.

<In a an Indian accenct> "Hello My name is Sanjay and I calling you from Telstra Technical Department to tell we have detected your computer has a virus, blah blah blah"

How would Telstra know?

No. I contacted Telstra support about abnormal bandwidth use, I have a history of this happening with them. If you have a minute:

Earlier this year the DNS for my domain, hosted overseas, stopped resolving through Telstra's DNS servers. Telstra level 1 and 2 support didn't understand what was going on, so I switched my DNS to be resolved by OpenDNS. My domain started resolving again (interestingly I learnt more when my domain host rang me from the US so we could work out why I couldn't access my domain and email).

One issue is IPs issued by Telstra can be blocked by spamhaus. This happens if the P issued to you by Telstra has been used for spamming in the past. Telstra want you to get it unblocked by spamhaus if this happens, rather than rebooting your router to get a new IP and releasing the dud one back into the pool. Yeah, right. I'm going to waste my time doing that...

Was eventually contacted by level 3 support, who agreed there was something wrong and they would investigate. Never heard any more.

A while later I saw abnormal bandwidth consumption, exactly 4,294,967,296 up and down (IT savvy people will realise that is a significant number, and to have the same up and down is highly unusual). Again Telstra Level 1 and 2 were no help, so off to the ombudsman...

Turns out, there was a DNS issue. Telstra fixed it, but didn't bother to tell anyone experiencing DNS issue it was resolved.

The internal team for ombudsman complaints told me the DNS issue was fixed, I switched back to Telstra DNS and my domain resolved. They agreed using an overseas DNS resolution could be the reason for the abnormal data use.

Since then I have watched my data use closely, using the 24X7 Telstra app to get a quick view and logging on to my account to see the up/ down mix if I think the quick view isn't quite right.

So, the other week I noticed abnormal bandwidth consumption for uploading and got onto Telstra support. The IP Telstra had assigned was blocked by spamhaus. I rebooted, and the new IP from the pool was fine. Back where the story began, above.

So the IDIOT on the other end of the phone said it was not a Telstra issue, and I must have a virus. I considered unlikely as all machines run anti-malware and all users log on with diminished privileges. He wouldn't listen (he must have been able to view my previous history to realise it might not of been a routine issue) so I asked to speak to his supervisor. Twenty minutes later I hung up and contacted the ombudsman (again).

To be on the safe side I ran deep anti-malware scans, including scanning for root kits, on all machines. Zilch. Followed Telstra's instructions for IPs blocked by spamhaus, nothing wrong my end... Changes the anti-malware program to the paid version of Malware Bytes, deep scan. Nothing.

So no, it wasn't he scam you were thinking of. I've provided the story to help others in a similar postion. I know of other people using 4G for internet (the only way I can get decent speeds) who have experienced similar issues, and Telstra claim they haven't come across it before.

I'll get off the soapbox now...

[Eevo]

To be on the safe side I ran deep anti-malware scans, including scanning for root kits, on all machines. Zilch.

you do know that some nasties wont be picked up with scans.

[dullbird]

I have seen a lot of talk up for bitdefender

What do you guys think about this one? It's not supposed to effect performance of the machine.

I too am looking for an antivirus with a small footprint because I'm about to go to 8.1 and I really don't want anything to hungry or fussy.

[incisor]

I don't like it much as it interferes with other programs too much

[incisor]

Clamwin is okay in conjunction with 8.1 for doing full scans on a schedule and free bit pedantic at times though

[dullbird]

So Microsoft security essentials it is by the looks of it then...:)

[Eevo]

How would Telstra know?

telstra are bringing out a product called t-safe that monitors your connections.
its by subscription.
if its see's a lot of traffic going to nasty-virus.com it will email you to notifiy you there is a potentialy a virus on one of your computers.

[theresanothersteve]

you do know that some nasties wont be picked up with scans.
Of course.

That's why all the machines are running on diminished privileges and I watch and investigate abnormal bandwidth use.

I reckon if:
a) nothing unusual is happening on my system
b) there is no abnormal bandwidth used
c) I can account for traffic going through my network cards
d) using antimalware with its most aggressive settings
&
e) conducting regular scans

I am as safe as I can reasonably expect to be.

When I worked in a coding shop the head programmer reckoned the diminished privileges was all you had to do. While I disagree and think you need to be a bit more vigilant, it shows how important this basic, and often overlooked, preventative measure is.

[theresanothersteve]

telstra are bringing out a product called t-safe that monitors your connections.
its by subscription.
if its see's a lot of traffic going to nasty-virus.com it will email you to notifiy you there is a potentialy a virus on one of your computers.
This is what really annoys me about Telstra.

They have the ability to provide more information when something screwy is happening but when you ask elevated support they can't provide it. You can look at your bandwidth consumption and ask for a breakdown and they can't (or won't) provide it. But if you're prepared to pay a little extra...

Its not going to cost them anything to provide this service, and if its not as if we get Telstra broadband at a bargain price.

[Eevo]

ask for a breakdown and they can't (or won't) provide it. But if you're prepared to pay a little extra...


your talking about two different things.
the first would be illegal. no ISP will do that.

[harro]

I have always used Avira (free version). Can't say I have had any issues but would be interested in opinions.

Paul.

[theresanothersteve]

your talking about two different things.
the first would be illegal. no ISP will do that.
No. I asked them if they could tell me the IP for the site(s) involved with my sudden (and identical upload/ download) bandwidth. They said it can't be done. Now you've heard they can block URLs (Which are translated to IPs by their DNS servers) if we're prepared to pay...

I also think they should be able to provide a better breakdown on bandwidth use. They supply upload/ download for a 24 hour period. I'm pretty certain years ago they provided hourly breakdowns. If the account holder had access to better analytics it would be easier to identify what is happening when things go wrong. Like I said, we pay premium prices for Telstra Internet. Unfortunately they are the only ISP who can provide anything near acceptable speeds at my place, and we rely on the NextG network for mobile broadband, we're too far from the exchange (and have a couple of kilometres of pair gain) to get ADSL.

[Eevo]

No. I asked them if they could tell me the IP for the site(s) involved with my sudden (and identical upload/ download) bandwidth. They said it can't be done. Now you've heard they can block URLs (Which are translated to IPs by their DNS servers) if we're prepared to pay...

1) their not blocking urls
2) the product isn't launched yet, hence can't be done.