So today my friends at tech support where I work got a pc full of malware from one of our higher ups, while this caused a lot of laugher considering some were porn ads, we actually got into a discussion of what means do you have to prevent malware into your organization's computers.
We do have mcafee antivirur (because fuck buying anything actually useful) and a proxy that blocks certain stuff like porn, whoever it isnt perfect.
Also discussed about the best means to remove them, as we currently use Ad-Aware but some other options came up that I never heard of before.
>>54383223
You're terrible at your job. Quit and then kill yourself.
There is no supreme method for avoiding malware infection, though there are steps you could take to reduce your probability of becoming a victim. Contrary to popular belief, one does not need to explicitly download and run a trojan to become a host... there are several different infection vectors we employ.
t. malware developer
>>54383223
- Use an AV that you can centrally manage
- Put filtering for exe, zip, rars, etc on e-mail. Easy to do with Exchange.
- Don't give users admin permissions unless they need it.
Goes without saying, ALWAYS have a backup that you know you can recover from. Cryptolocker can fuck your shit up.
>>54383353
Might be worth asking, which do you consider the best anti-malware application?
>>54383469
Definitely Kaspersky. Although like all AVs there are and will always be ways to circumvent it, it is one of the few that integrated heuristics and other tactics. McAfee and Norton are absolute garbage.. they're completely sig based and they're slow to discover new samples
>>54383223
Corporate-wide ad blocking
Email filtering
Group policies to disable execution in MS Office documents
Good host based AV with automatic removal policies.
Take as much power away from your users that you can get away with.
Firewall with packet inspection, AV, and content filtering.
Group policies regarding passwords, account lockout, etc.
Good spam filter on your mail server with strict attachment policies.
User training on phishing, ads, etc.
Do these basic things and you are in a pretty good place with regards to security. Log everything and audit regularly.
>>54383223
Ad Blocker installed in both Chrome and Firefox.
No running of unsigned Office macros.
Microsoft AV.
Pretty much knocks out any issues. If a user still manages to infect themselves, they have 3 shots until their administrative privileges on their local machine are revoked.
>>54383469
Adblock
>>54383223
I read this in a poo in loo accent
