On Sun, 19 Aug 2018 19:12:44 -0500, VanguardLH wrote:

John B. Smith wrote:

Last night, Saturday, I went to shut off my head phones and heard a
voice coming thru: "We're microsoft your computer is ****ed. If you
attempt to turn it off without calling us we'll **** it up worse". I'd
already shut my browser down but I found a 'firefox' still in the
Processes of TaskManager. EndProcess and voice stopped. Tried runing a
few things and stuff seemed ok, went to bed. This AM boot was sludgier
than usual and when came up my sound was screwed. Shut down and went
to breakfast and to scheme. Didn't know when my last backup was, yeah
yeah I don't schedule. When i got back I put a 2 week old Kaspersky's
2018 flash drive in and booted it. It found only 2 objects, one being
a Trojan. I quaranteed them and booted without too much hope. But
everything was working again! Turns out Macrium backup was only 6 days
old after all, but I'd rather do it this way when I can.

So you rely on a static old version of something you need to boot from
instead of using a full-time real-time anti-virus.

A real-time antivirus can easily be replaced using a zero-day
attack. And then it's malware. I once saw a worm that replaced the
AVG, Avast and one other (can't remember) real-tem scanners. I think
it was called opaserv. Even reproduced their tray icons.
A static old version of AV booting Linux would be immune, so
it would be the safest choice.
PS Kaspersky CD-USB does updates. But of course, that would be
risky.
[]'s
--
Don't be evil - Google 2004
We have a new policy - Google 2012