Avira: scan USB sticks automatically?

Discussion in 'Security and Anti-Virus Software' started by agusman, Mar 6, 2009.

Thread Status:
Not open for further replies.
  1. Baserk

    Baserk Notebook user

    Reputations:
    2,503
    Messages:
    1,794
    Likes Received:
    1
    Trophy Points:
    56
    What statement?
    That every AV/AS will fail one time? Kinda obvious...
    Or that disabling autoplay is a usefull safety precaution regarding USB-sticks.
    You could of course have used Google but here are some links;
    US-CERT
    CERT.org
    F-Secure
    Microsoft
    Just some of the examples Google comes up with.
     
  2. Jakamo5

    Jakamo5 Tetra Vaal

    Reputations:
    630
    Messages:
    1,421
    Likes Received:
    81
    Trophy Points:
    66
    Yes, that one. No, not obvious (and I think you realize that and that's why you didn't even try to back it up, despite providing 4 links about autorun). Yes, I googled. No, I didn't find anything. Link please, or you're making assumptions.

    Also, I agree that disabling autorun/autoplay will improve security, but in my opinion the small increased security it provides does not outweigh the loss of feature/function. A person attempting to run malicious code through a drive insertion will be at your computer, and whether or not you have autorun/autoplay enabled, it makes only the difference of them having to click on the drive or not. Your links weren't very good anyway.

    US-CERT This link simply says "Disabling AutoRun on Microsoft Windows systems can help prevent the spread of malicious code." But doesn't offer any other info, cases, or evidence on the matter (except for its mention of autorun.inf hypothetically being mistakenly run by windows explorer, which would mistake the filetree as a drive??), and instead explains why Microsoft's instructions to disable AutoRun are insufficient, which is the main focus of the article (not the security risks of autorun directly).

    CERT.org This link offers some scenarios where autorun/autoplay could be executed, as unlikely as they are. The only decent link you provided.

    F-Secure This just says that you should disable it, not why you should, nor is it the main focus of the article.

    Microsoft This just explains how to disable it, not why you should.


    Again, I agree with you that disabling it provides increased security, so there's not need to provide more links. My point is only that it looks like you simply googled "disable autorun" and linked to a few articles without reading them. Just a tip for the future to make the links more pertinent to the point you're trying to make.

    Regardless, my question was about your accusing every and all av/as softwares of failing one (and you had it italicized + I assume you mean at least) time. Of the fact that my AV has never failed me (and I know I'm not the only one), does that mean it will fail sometime in the future? How can you predict that? What is the time frame of it's inevitable failing? How are you able to predict that? My point is only that you cannot say "every" in regard to such a broad and variable issue. You can say "some" but you cannot even say "most", because most is relative suggesting majority, and you simply cannot get a good enough representation of everyone's AV experience to suggest that. That's all... sorry that I had to write so much to explain that. But if you have a link showing everyone in the world's experience with failing AV's, please let me see it I'm interested.
     
  3. Baserk

    Baserk Notebook user

    Reputations:
    2,503
    Messages:
    1,794
    Likes Received:
    1
    Trophy Points:
    56
    I provided the links about autorun/autoplay because I genuinly can not believe that you would have a problem believing that every single AV/AS program will fail (indeed at least) once.
    (Actually, they will all fail "now and then").

    A more common example is the situation where a friend/class mate/fellow student/colleague will stick his/her USB stick in your computer to 'show' you something.
    No maliciousness intended, just accidental infections.
    The links I provided were not meant as some kind of proof to support a a personal theory but they merely offered info on the autorun/play issue and provided information on how to avoid/resolve it.
    Regard the info anyway you want.

    You seem a bit lost around NBR. This is the Security and AV sub forum.
    Not the political section.
    I wasnt trying to prove anything, I was merely posting info about a certain issue.
    And yes, the links were found with a simple Google search.
    Again, in order to provide info about autorun/autoplay and how to avoid running into autorun/autoplay issues.

    The fact that your AV of choice hasnt failed on you is only anecdotal evidence, right?
    The simple fact that every forum of every AV/AS product, contains questions of users, asking why their product of choice has failed on them, kinda shows what I was trying to convey.
    Again, I'm not in this subforum to absolutely prove my own theories, I try to provide info.

    Asking for a link to information about everyones experiences with failing AV's in order to prove my point is....well, childish.
    If you have any other questions, please feel free to ask but if you are looking to win any imaginary quasi-academic debates on perceived theories...
    Well jeeez...., you've won. I've lost. You're right. I'm wrong.
    There's your written Happy Meal.
    Happy now?
     
  4. flipfire

    flipfire Moderately Boss

    Reputations:
    6,156
    Messages:
    11,214
    Likes Received:
    68
    Trophy Points:
    466
    Settle down, try not to get personal guys

    AVIRA and F-Prot failed to remove some variants of autorun.inf worms i had at work. AVG on the other hand removed it, but AVG has its flaws too. No AV is full proof.

    I disable my autorun/play, though i let the pop up asking on what you want to do.
     
  5. Jakamo5

    Jakamo5 Tetra Vaal

    Reputations:
    630
    Messages:
    1,421
    Likes Received:
    81
    Trophy Points:
    66
    Like I said below, you have no way of knowing that every AV program will fail. You can assume all you want, that doesn't make it right. You still fail to provide links, because you have no evidence to show this. I wasn't expecting links, because no one has that information. I simply was trying to make a point that you cannot validly say that "every AV/AS program will fail at least once." You don't have the information to actually know this, you're just guessing/estimating that they will.


    And the difference? The code either runs when you friend inserts the USB, or it runs when he clicks on it... It is not an issue of your virus scanner having time to detect the virus, since good AV's force threads through them before execution. Even windows defender does this. Regardless, I asked you for links proving what you said. Interesting that the majority of the information in your links showed how to "resolve" the "issue" as you say, rather than what the issue even is. That's what I was pointing at.


    You're right, I forgot that if you're not talking about politics, you don't have to prove your assumptions to be true, they just are. You weren't trying to prove anything, which is why when I asked you directly to prove it, you provided links, right?

    If you want to chalk up my point as anecdotal so that you conveniently can refuse to believe it, go ahead. However, you seem to not realize that forum posts are much more likely to be in regard to problems. How many people do you know who register on forums simply so they can say "Hey guys, just wanted to let you know, my AV has never failed me."

    Regardless, the fact of the matter is like I said, you cannot prove your statement, so I'm just pointing out that you shouldn't get so specific as to pass it off as anymore than theory. It's not that big a deal, and obviously this is now blown out of proportion. The only reason I said something is because I don't like to see users who are less aware get scared off or paranoid because of such posts, which are, in reality, just assumptions.


    Childish because you cannot provide one? That is simply the only way you can prove such a suggestion. It's a point to the validity of your statement, not an actual request for evidence (since it's so obvious that no one has that information). I'm sorry that you're so offended by my suggesting that you don't pass off an assumption as fact. I'm sorry that this is so blown out of proportion. Again, I just don't like to see unnecessary paranoia in those less savvy users due to an assumption made by another.

    Depends, wheres my toy?
     
  6. thefreeaccount

    thefreeaccount Newbie

    Reputations:
    0
    Messages:
    4
    Likes Received:
    0
    Trophy Points:
    5
  7. Jakamo5

    Jakamo5 Tetra Vaal

    Reputations:
    630
    Messages:
    1,421
    Likes Received:
    81
    Trophy Points:
    66
    Well the link gives a 404 error, but I believe that what you're trying to show me exists. It doesn't, however, disprove what I said.

    There's a big difference between AV's failing a test, and what was said, which was that every av/as program will fail at least one time. 1) Not every AV/AS program was tested. 2) There's a big difference between stress/barrage testing and real-life scenarios. 3) In order for every AV/AS program to fail at least one time, not only would only those AV/AS's have to exist (with respect to the test), but one of the few viruses that did make it through each of those AV/AS's would have to make it to every computer running one of those AV/AS's.

    Basically, you've given us a sample test. The best it can do is estimate...
     
Loading...
Thread Status:
Not open for further replies.

Share This Page