[SML] OT: Virus/malware protection

[Brian Munroe]

Ray, you are so right. 

The guy this happened to (let's call him Harry) forwarded me an email that was clearly phishing -

Harry: "what is this, I can't open it" (the attachment)
Me: "don't open that, it is spam"
Harry: <awkward silence>

Sent from my iThingy. Please excuse any typos

> On May 2, 2016, at 8:24 PM, Ray Gibson via Stagecraft <stagecraft at theatrical.net> wrote:
> 
> There is a very high probability that no level of virus protection would have prevented the ransomware infection.  go ahead and use the built in windows defender (windows 10) or download microsoft security essentials (windows 7) and then take additional precautions to prevent a ransomware attack, including:
> 
> 1. User education about opening attachments
> 2. Change your DNS server settings to use OpenDNS (www.opendns.com)
> 3. User education about opening attachments.
> 4. Strongly consider some group policy objects (which can be emulated on a non domain computer) that prevent ransomware.  A not-too-old article that links to a couple of these is here: http://www.calyptix.com/malware/ransomware-prevention-5-ways-to-protect-your-business/ -- there are some other things here that could be useful as well, such as blocking tor end nodes.
> 5. User education about opening attachments.
> 
> Good luck.
> 
> Ray
> 
> 
> 
>> On Mon, May 2, 2016 at 3:36 PM, Brian Munroe via Stagecraft <stagecraft at theatrical.net> wrote:
>> What are folks using for virus protection on their windows computers these days?
>> 
>> My local basically has five computer users, all with different virus programs.  One of our users just go burned - their subscription ran out and they didn't renew. Got hit with ransomware that corrupted most of his files. So now we are looking to move to something more suitable for a small office that one administrator can manage across the five users.
>> 
>> Our computer repair guy installed both a kaspersky demo and a malwarbytes demo on the one laptop that got burned. Frankly I'm not sure of the difference between anti-virus and anti-malware software. I always thought you should only run one security program on your computer, two would conflict with each other.
>> 
>> What are the small offices out there doing theses days?
>> 
>> Brian Munroe
>> 
>> Sent from my iThingy. Please excuse any typos
>> 
>> ____________________________________________________________
>> For list information see <http://stagecraft.theprices.net/>
>> Stagecraft mailing list
>> Stagecraft at theatrical.net
>> http://theatrical.net/mailman/listinfo/stagecraft_theatrical.net
> 
> ____________________________________________________________
> For list information see <http://stagecraft.theprices.net/>
> Stagecraft mailing list
> Stagecraft at theatrical.net
> http://theatrical.net/mailman/listinfo/stagecraft_theatrical.net
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://theatrical.net/pipermail/stagecraft_theatrical.net/attachments/20160502/4416ed7a/attachment.html>