Advice Request Best antivirus for offline computer?

Please provide comments and solutions that are helpful to the author of this topic.
shmu26 said:
Thanks to @everyone for all the great ideas.
Yeah, OSArmor recently added USB protection, so that's pretty irresistible. Thanks to those who mentioned it.
OSA+McShield+Avast free is the config I am going with, and if I get more ambitious, I can add a default/deny app.
And thanks to @TairikuOkami for the good news that Avast registration is now optional. Cool!
PS This computer is mainly used by the children -- and their friends. Just trying to keep it safe and in operating order for them.
Click to expand...

Unless you put some kind of firm default-deny on that system that stops the kids from doing "stuff," which is what you're trying to avoid = provide them default allow, you're going to have to do manual cleanup sooner or later. And, if you are letting out-of-household guests BYOD, and they end up putting something pernicious on that system, it can spread to your other systems. You have to look at the risk factors.

With kids, this is your answer to avoid the rigmarole of manual cleanup, but it isn't going to necessarily minimize the risk of spreading: Reboot Restore Rx Freeware | PC Time Machine Windows System Restore Software

Evidently other people beat me to the post, but it doesn't matter. It's the point that matters. Save yourself the hassle of cleanup.

OSArmor doesn't disable enough stuff.
 
  • Like
Reactions: harlan4096, Deleted member 178, shmu26 and 2 others
Lockdown said:
Unless you put some kind of firm default-deny on that system that stops the kids from doing "stuff," which is what you're trying to avoid = provide them default allow, you're going to have to do manual cleanup sooner or later. And, if you are letting out-of-household guests BYOD, and they end up putting something pernicious on that system, it can spread to your other systems. You have to look at the risk factors.

With kids, this is your answer to avoid the rigmarole of manual cleanup, but it isn't going to necessarily minimize the risk of spreading: Reboot Restore Rx Freeware | PC Time Machine Windows System Restore Software

Evidently other people beat me to the post, but it doesn't matter. It's the point that matters. Save yourself the hassle of cleanup.

OSArmor doesn't disable enough stuff.
Click to expand...

Right on. This machine is guaranteed a cleanup REGARDLESS of what security you put on because of defaulting to allow. Reboot Restore RX is a solution but can 'frustrate' the hell out of average-joes because it can wipe game saves and other stuff.

I'd recommend a Desktop Chromebox running ChromeOS.. Then you can just powerwash it once a year or soemthing and clean it right up in 20 seconds, leaving all of the security theater behind.

Household guests on my network won't happen. Ever. I run strict physical port segregation and VDOMS even for internal users. But I am even more vicious to my house guests, they are tossed on a wide open physically isolated DMZ. I don't want them anywhere, and it is not my problem to deal with, a DMZ guarantees that.
 
  • Like
Reactions: harlan4096 and bribon77
shmu26 said:
Thanks to @everyone for all the great ideas.
Yeah, OSArmor recently added USB protection, so that's pretty irresistible. Thanks to those who mentioned it.
OSA+McShield+Avast free is the config I am going with, and if I get more ambitious, I can add a default/deny app.
And thanks to @TairikuOkami for the good news that Avast registration is now optional. Cool!
PS This computer is mainly used by the children -- and their friends. Just trying to keep it safe and in operating order for them.
Click to expand...

Have you thought about installing a special operating system for children?
You may find this information interesting

Linux for kids

You can use a DNS service that blocks inappropriate content or install specific parental control software.
 
  • Like
Reactions: bribon77
I would still install something light like Avast just to turn off Windows Defender. But I would reduce its protection to the minimum.
As long as the computer from which you transfer files is protected you should have some sort of herd immunity.
 
ForgottenSeer 58943 said:
Right on. This machine is guaranteed a cleanup REGARDLESS of what security you put on because of defaulting to allow. Reboot Restore RX is a solution but can 'frustrate' the hell out of average-joes because it can wipe game saves and other stuff.

I'd recommend a Desktop Chromebox running ChromeOS.. Then you can just powerwash it once a year or soemthing and clean it right up in 20 seconds, leaving all of the security theater behind.

Household guests on my network won't happen. Ever. I run strict physical port segregation and VDOMS even for internal users. But I am even more vicious to my house guests, they are tossed on a wide open physically isolated DMZ. I don't want them anywhere, and it is not my problem to deal with, a DMZ guarantees that.
Click to expand...

He is letting kids use an un-networked tower PC.
 
Thanks, guys.
Shadow Defender and similar solutions don't fit the needs of this computer, because the kids store music, pics, and school projects on it. So they don't want all of that to vanish at reboot. But I do take a system image from time to time.

Traditional AV is not totally worthless, because the computer is not exposed to zero-days due to lack of internet access. Avast has an offline updater, so it is better than nothing, IMO.

If another infection occurs, I will have to install a default/deny solution.

But @Lockdown's comment that this computer could spread infection to my other computers is an important point. I didn't think about that. duh!
 
  • Like
Reactions: bribon77 and neon
ForgottenSeer 58943 said:
Then who cares, let them use it and wipe it every 6 months. I'd just leave Forticlient with full Zoo download on it for offline AV.
Click to expand...

Carelessly connecting a USB to that system and then connect that USB to the networked PCs. LOL... I'm not saying BadUSB, but just sayin'... people forget. It is easy enough to do.

Candyland infection will be about it, but you know how it is. Anything is possible.
 
  • Like
Reactions: harlan4096, bribon77, neon and 1 other person
If the router can handle it, it can be set to allow the PC to go online during a particular time just to allow the security software to update.
 
  • Like
Reactions: Sunshine-boy
Not sure if anybody mentioned it but what about using Linux? Wont't most windows stuff can't be spread there?
In SD you can exclude folders (for kids stuff). How having a folder with infected stuff on a otherwise clean system is another thing :D
 
No one actually knows which anti-virus is THE best. They all have their advantages and disadvantages. Ratings, performance and security of the applications changed month to month, it would be hard to establish one. However, there are a couple of possibilities to explore.
Currently, Windows natively has its own anti-virus Windows Defender, and it works relatively well (Not the best by any means, but well). The majority of the popular providers have free versions of their software to test out, and they also do the job.

So, for anti-virus, I recommend Comodo, Avast, Avira, Bitdefender, Kaspersky or Norton. All of them proven formidable. But if you are worried about the performance of your PC, Windows Defender is your best option.

With anti-virus, you usually will need to run anti-malware software. Not every single anti-virus has the full package included. Any of the popular software solutions will be solid as well. My recommendations towards ADWCleaner, Malwarebytes, Hitman Pro.
 
Comodo Firewall with cruelsister's settings. That's all you'll need.

For USB protection, McShield will do (though I never use it anymore, outdated for me)
 
  • Like
Reactions: harlan4096

You may also like...