virus on a lan

[jes]

Is it true that if you have a LAN with one internet connection that it is essentially pointless to have a virus scanner on every system?

[classicsoftware]

In a word no. It depends on the LAN and if you have a server and if the server controls all internet access. It is still a great idea to have AV and anti-spyware programs on individual workstations.

[PrntRhd]

Viruses can come in via the Internet connection, but also via e-mails that get opened, and via shared media and files. If you don't have AV on each device and infection occurs, the machines without AV will reinfect all the others on the network.

[Variable]

Well, I will disagree with everyone. In a small LAN one PC with up-to- date virus scan and access to all shared drives can take care of most virii. This will not stop all AV from affecting each machine although, you can clean the shared drives. What would happen is someone would get infected and either through the virus trying to replicate or data that was infected was scanned by the protected machine,would alert the AV which would then would locate it, classify it and tell you whether it can remove it. It would be sort of like a watchdog with the ability to eat intruders if you wanted it to. Many small offices do this, it's cheaper. It is a kluge way of doing things but, with PC's that are not that important it will work fine. my 2 cents anyway.

Variable

[classicsoftware]

Absolutely wrong variable. I disagree in no uncertian terms. You would have to scan every drive in order to find it. How often would you do that? Do you let any of your systems go unprotected???

It would be a mistake, in my opinion, to have any computer that has acces to the internet on line without having windows o/s completely up to date, a fully fucntioning anti-virus with all definitions up to date and sufficient spyware protection.

Just because you can scan it after you get it to eliminate it??? Would you have sex with someone who has VD just because you can take antibiotics afterward. It's exactly the same. You prevent infections not go out of your way to get them because you can treat them later. In order to save what? Avast and AVG are free so no money is involved???

First off, I never allow the O/S partition of any drive to be shared to prevent an insider from doing anything to the O/S on another computer.

I could go on, but I'll just leave it at that. Folks, don't do it. But if you do and when you get infected and you will if you follow variables advice please post your threads here (http://www.pcguide.com/vb/forumdisplay.php?s=&forumid=22)

[Variable]

Well you got your panties in a wad ;p
You have some unresolved issues with ole' Variable im not aware of? hehe

Well, you can say what ever you want, as can I. I have seen this done in businesses and worked in enviroments doing it and it works fine, as long as you remember that a machine without AV may become fully infected and have to be cleaned by the main machine. Many small networks have machines that simply run an old printer or it may be a used as a fax machine or a unused desktop. Not eveyone buys AV for every machine lol, some don't even have enough system resources to run it and do what it supposed to do ... Not to mention updating the AV every week and fixing any bugs they cause. It all depends on what the LAN is, your solution is just one, not the only one and not the best for every situation.

I know what I am talking about. So your little tirade doesn't bother me. : )


Variable




;)

[classicsoftware]

I think you think what I said was personal. It's not. You just happen to wrong, in this case. There are plenty of people who smoke, drink to excess and take drugs. This is america and they are free to do it. Just like you are free to not protect your system if you want to. Just becuase there are a large number of people who shoot up herion does not make it right. Just because you know people foolish enough to do this also does not make it right.

I suggest you click on the link above and see the amount of time being spent on these problems on a daily basis. Part of the reason is people who have unprotected systems have there systems taken over by trojan horses. These machines become spam zombies, perform DDOS attacks, spread themselves and other viruses. That's when I become pissed off. If you want a computer on your network to be a little print server, hey, just block all internet access with a firewall and live and be well. Drink all you want at home, just don't get in your hummer and run over my kids.

There are people who who are wasting my bandwith with this crap. Legitmate business are spending BILLIONS of dollars every year on spam, and a large part of it is spewed from unprotected computers.

Finally, there are worms that spread accross network shares like sircam, that cannot be cleaned accross a lan.

It is the general consensus of the security experts here and elsewhere that it is unwise to do as you suggest.

Look, you can do as you see fit, it's a free world. Just because you crossed the expressway blindfolded at rush hour every day for a week does not mean on the eith day you won't get hit by a truck.

But like I said when you do, post your problem in the link above we'll still be here doing battle with the problems you want to ignore.

Since you don't bother with AV on your lan you have time to

read this thread (http://www.pcguide.com/vb/showthread.php?s=&threadid=30162)
or
this one (http://www.pcguide.com/vb/showthread.php?s=&threadid=30205)

[Variable]

Whatever Sparky. I never argue with a no-it-all with a chip on his shoulder.
Next time I contradict you on a post though try not to go as overboard.
Eventually, as you age, you will learn that all problems can have many solutions.

[PrntRhd]

Variable,
I know all about risk v reward ratios but I have seen Lovegate and Bugbear attacks and you really are taking huge risks IMHO if you don't have some sort of AV on the clients. Free AV is the answer, Avast is my pick.
;)