- Jun 24, 2016
- 2,487
I personally find it useless to install an antivirus on an offline computer. Better protect with SD or Deep Freeze.
Please provide comments and solutions that are helpful to the author of this topic.
I agree with you. can also serve ..I personally find it useless to install an antivirus on an offline computer. Better protect with SD or Deep Freeze.
Thanks to @everyone for all the great ideas.
Yeah, OSArmor recently added USB protection, so that's pretty irresistible. Thanks to those who mentioned it.
OSA+McShield+Avast free is the config I am going with, and if I get more ambitious, I can add a default/deny app.
And thanks to @TairikuOkami for the good news that Avast registration is now optional. Cool!
PS This computer is mainly used by the children -- and their friends. Just trying to keep it safe and in operating order for them.
Unless you put some kind of firm default-deny on that system that stops the kids from doing "stuff," which is what you're trying to avoid = provide them default allow, you're going to have to do manual cleanup sooner or later. And, if you are letting out-of-household guests BYOD, and they end up putting something pernicious on that system, it can spread to your other systems. You have to look at the risk factors.
With kids, this is your answer to avoid the rigmarole of manual cleanup, but it isn't going to necessarily minimize the risk of spreading: Reboot Restore Rx Freeware | PC Time Machine Windows System Restore Software
Evidently other people beat me to the post, but it doesn't matter. It's the point that matters. Save yourself the hassle of cleanup.
OSArmor doesn't disable enough stuff.
Thanks to @everyone for all the great ideas.
Yeah, OSArmor recently added USB protection, so that's pretty irresistible. Thanks to those who mentioned it.
OSA+McShield+Avast free is the config I am going with, and if I get more ambitious, I can add a default/deny app.
And thanks to @TairikuOkami for the good news that Avast registration is now optional. Cool!
PS This computer is mainly used by the children -- and their friends. Just trying to keep it safe and in operating order for them.
Right on. This machine is guaranteed a cleanup REGARDLESS of what security you put on because of defaulting to allow. Reboot Restore RX is a solution but can 'frustrate' the hell out of average-joes because it can wipe game saves and other stuff.
I'd recommend a Desktop Chromebox running ChromeOS.. Then you can just powerwash it once a year or soemthing and clean it right up in 20 seconds, leaving all of the security theater behind.
Household guests on my network won't happen. Ever. I run strict physical port segregation and VDOMS even for internal users. But I am even more vicious to my house guests, they are tossed on a wide open physically isolated DMZ. I don't want them anywhere, and it is not my problem to deal with, a DMZ guarantees that.
He is letting kids use an un-networked tower PC.
Then who cares, let them use it and wipe it every 6 months. I'd just leave Forticlient with full Zoo download on it for offline AV.
Right. Flashdrives circulating from one computer to another within the household is a very credible threat.Carelessly connecting a USB to that system and then connect that USB to the networked PCs. LOL...