Slashdot Mirror


Ask Slashdot: Light-Footprint Antivirus For Windows XP?

New submitter Bauermlb writes "I service computers for retired folks in my community, often older machines with modest speed (2 GHz Centron) and modest memory (512 MB). Adding AVAST to one of these machines slows it to a crawl. Any recommendations for a light-duty antivirus program with a low overhead? (These people do not tend to surf 'dirty' sites.)"

185 of 294 comments (clear)

  1. Clamwin by Anonymous Coward · · Score: 1

    http://www.clamwin.com/content/view/18/46/

    1. Re:Clamwin by Bacon+Bits · · Score: 4, Insightful

      ClamWin is "light footprint" because it's no footprint. It has no on-access scanning, which for most people is indistinguishable from not having antivirus installed.

      --
      The road to tyranny has always been paved with claims of necessity.
    2. Re:Clamwin by Applekid · · Score: 3, Informative

      Not true. Firefox + fireclam addon. Thunderbird + clamdrib (tho you have to work to find it)

      That's not on-access, that's on-access-through-a-specific-application.

      --
      More Twoson than Cupertino
    3. Re:Clamwin by xQuarkDS9x · · Score: 1

      http://www.clamwin.com/content/view/18/46/

      Agreed. It's not an active memory scanner but it's good for when you need it to do the occasional scans of programs or program updates you download. Along with Malwarebytes Anti-Malware scanner, and finally a lightweight firewall such as Privatefirewall it does help a lot. Also, using Firefox along with Adblock Plus, Noscript, Ghostery, Cookie Controller, and Social Fixer (Facebook) you basically eliminate a good 99% of all that wonderful infested malicious code in ads on various websites since one can only assume most servers that serve up ads are already compromised and serving up all that garbage.

      I run two older Intel dual core machines here (1.86ghz 6300) with 1gb of ram using Windows XP SP3 (one for myself and one for my fiance) and even though they both have Intel Q965 integrated chipsets using 256mb of that ram I wouldn't dare bother with on demand scanners from any company, period. I did leave MSE scanner on my fiance's machine though as she's somewhat of a computer ludite and all she does is go on firefox to watch Netflix and go on facebook, and if she accidentally clicked on something she shouldn't have, at least I have several Linux live CD distro's available to boot from just in case along with a dual boot of Ubuntu on that machine in case she somehow manages to hose her Windows install bad enough but miracousely doesn't damage grub!

      Come 2014 I may just end up switching my machine at least to Linux Mint XFCE or Xubuntu because of microsoft not patching Windows XP anymore.

      Only thing that pisses me off with Linux though is that Adobe can't be bothered to have flash properly use graphics acceleration you literally need to install Google Chrome in your favorite distro unless it comes with it already, and use the built in flash in that browser to actually GET the same flash performance you do on a Windows machine. But then you come across a catch 22 in that yea google chromes built in flash runs faster on linux then adobe flash in Firefox but then you're missing out on the most needed extensions such as Adblock plus (Crippled in chrome compared to firefox), and Noscript.

      And speaking of anti virus scanners I'm suprised no one has mentioned that there actually is anti virus scanners too for Linux such as avast, bitdefender etcetera. But again probably active scanners slowing down your linux machine.

      --
      You must master your joystick like a fisherman masters bait! - Gimpy
    4. Re:Clamwin by dildos_akimbo · · Score: 4, Funny

      I hear MyCleanPC will speed up your PC and protect you from your own hosts file. (ducks) (runs) (ducks some more)

    5. Re:Clamwin by ltwally · · Score: 1

      ...but it's good for when you need it to do the occasional scans of programs or program updates you download...

      Once upon a time we used Clam for an email scanner on our inbound mailserver. It was totally insufficient -- it does not catch the majority of what's actually "in-the-wild", which is what you most need antivirus for. Nothing is bullet-proof, but Clam doesn't cut it. Not even for free.

      Now, that was scanning our email. How does that differ from being used on a PC? Well, for one thing, Clam/ClamWin does not have a resident-memory / on-access scanning ability, so unlike our email scanner, there is no way to guarantee it would scan everything. Secondly, if it wasn't good enough to protect our email, you can be darn sure it won't be good enough to protect your email + everything else.

      I'd truly like it if Clam / ClamWin was great. It just isn't. Sometimes you get what you pay for.

      --



      /dev/random
    6. Re:Clamwin by unixisc · · Score: 1

      I thought that MyCleanPC uses /etc/hosts file to protect my PC and keep all the bad guys out

    7. Re:Clamwin by manu0601 · · Score: 1

      It fits nicely as a "theater or security" tool. We know antivirus are loosers, users will not feel comfortable if there is no antivirus. Therefore give them an antivirus that does not make the machine crawl, make sure software are up to date (which seems more efficient than antiviruses to keep viruses out of the system), and everyone will be happy.

  2. Hah by J'raxis · · Score: 4, Funny

    (These people do not tend to surf 'dirty' sites.)

    That's what they tell you, eh?

    1. Re:Hah by bill_mcgonigle · · Score: 2, Informative
      --
      My God, it's Full of Source!
      OUTSIDE_IP=$(dig +short my.ip @outsideip.net)
    2. Re:Hah by simplypeachy · · Score: 2

      Whilst this might have been meant as a joke, I think the OP should take it into serious consideration!

    3. Re:Hah by evilRhino · · Score: 1

      There is a difference between IRL and surfing activity.

    4. Re:Hah by bill_mcgonigle · · Score: 2


      There is a difference between IRL and surfing activity.

      Perhaps. But the null hypothesis should be that older people are not different than younger people. Evidence could be presented that older people don't enjoy online porn.

      Ask somebody who does tech support and system recovery how 'clean' the retirees' hard drives are.

      --
      My God, it's Full of Source!
      OUTSIDE_IP=$(dig +short my.ip @outsideip.net)
    5. Re:Hah by the_B0fh · · Score: 1

      Not for *THIS* community. This is slashdot here we are talking about after all... :P

    6. Re:Hah by technomom · · Score: 2

      Every generation thinks they invented sex.

    7. Re:Hah by Yoda222 · · Score: 1

      We cannot (yet) get a STD on porn site.

    8. Re:Hah by unitron · · Score: 1

      We cannot (yet) get a STD on porn site.

      But I thought a computer virus was a Serially Transmitted Disease?

      --

      I see even classic Slashdot is now pretty much unusable on dial up anymore.

  3. all sites are dirty sites by Rosyna · · Score: 4, Insightful

    Ad networks/common popular websites have been compromised repeatedly in the past and will be compromised repeatedly in the future. All sites could be considered "dirty sites".

    1. Re:all sites are dirty sites by Shoten · · Score: 3, Informative

      Ad networks/common popular websites have been compromised repeatedly in the past and will be compromised repeatedly in the future. All sites could be considered "dirty sites".

      This is totally true, but not even the whole story; a site need not be compromised to serve up malware. For a while, Foreign Policy's website was serving up malware once in a while through one of the advertising networks. Google released a comprehensive study of drive-by malware attacks that explicitly stated that the nature of content a person looked at was no longer germane to their safety from such attacks.

      --

      For your security, this post has been encrypted with ROT-13, twice.
    2. Re:all sites are dirty sites by labawi · · Score: 1

      Not all sites serve ads.

    3. Re:all sites are dirty sites by tverbeek · · Score: 1

      All sites that you can expect random casual users to visit do serve ads.

      --
      http://alternatives.rzero.com/
    4. Re:all sites are dirty sites by sexconker · · Score: 1

      All sites that you can expect random casual users to visit do serve ads.

      No random casual user using a PC I've configured will see even 0.1% of all ads on the internet.
      Fuck ads. In all forms.

    5. Re:all sites are dirty sites by RockDoctor · · Score: 1

      For a while, Foreign Policy's website was serving up malware once in a while through one of the advertising networks.

      Sorry, but you mean your government's Department of Foreign Policy?

      What the fuck was a government website doing serving adverts, before you hung the politicians upside-down from lamp posts and set fire to them?

      --
      Birds are not dinosaur descendants;birds are dinosaurs, for all useful meanings of "birds", "are" and "dinosaurs"
  4. No such animal by dreamchaser · · Score: 4, Informative

    There is no such thing as a safe website. These days any site can wind up hosting malware via banner ads that inject code.

    AVG is relatively lightweight but I would suggest you test it and others on some of your target hardware.

  5. Microsoft Security Essentials by Anonymous Coward · · Score: 5, Informative

    I've seen way better performance with it than with McAfee, Avast, etc.

    Detection benchmarks typically put it on par with the other free solutions, though it changes from month to month.

    1. Re:Microsoft Security Essentials by MrKevvy · · Score: 1

      I can't believe I posted "You didn't state the OS you were asking about" when it was in the title. This is what I get for posting before I've had my caffeine. :^p

      --
      -- Insert witty one-liner here. --
    2. Re:Microsoft Security Essentials by jfdavis668 · · Score: 2

      I agree. Not real confident of its ability, but it does seem to be light weight. Run it on XP with Athlon 64 machines with 512MB, and some Atom based machines. Haven't had any issues on them.

    3. Re:Microsoft Security Essentials by Dins · · Score: 2

      I'll second this. The thing I like about it is it doesn't bug you to renew/update/subscribe, etc. As long as you have a "genuine" copy of Windows, it just works. Odd, coming from MS and all, but I do like it.

    4. Re:Microsoft Security Essentials by cyber-vandal · · Score: 3, Interesting

      Will it still be available for XP after 8th April 2014?

    5. Re:Microsoft Security Essentials by sasparillascott · · Score: 1

      I agree on this, it seems lightweight on the resources, unobtrusive and free. As others have pointed out, Microsoft stops Windows XP security updates in less than a year. You want to have them transitioned to something else before that happens (Vista will take security updates into 2017 and Windows 7 will take security updates through 2020). Same story with Office as well (if they have that on their machines), Office 2003 stops security updates next year when XP does. Linux would be the lowest cost choice, but you probably don't want to be the training resource - they'll want something that works like the old computer.

    6. Re:Microsoft Security Essentials by asm2750 · · Score: 1

      There is a mac version of Avast now. It works just uses alot of resources.

    7. Re:Microsoft Security Essentials by jratcliffe · · Score: 1

      Agreed. I used to use AVG, but switched all our machines over to MSE over the past year or so. Performance at least seems better (don't claim to have a robust benchmark for this), and haven't seen any problems.

    8. Re:Microsoft Security Essentials by ildon · · Score: 1

      This was my first thought, as well.

    9. Re:Microsoft Security Essentials by slomike1 · · Score: 1

      MS Security Essentials works well for me. No spam.

    10. Re:Microsoft Security Essentials by gigaherz · · Score: 2

      MSE is the only AV I have used that doesn't noticeably lower the system responsiveness the moment you turn it on. For me, it's either MSE, or no AV at all.

    11. Re:Microsoft Security Essentials by SpaceManFlip · · Score: 1
      MSE does have a lightweight footprint, but it's almost the worst AV you can choose for real virus protection.

      http://www.virusbtn.com/vb100/RAP/RAP-quadrant-Oct12-Apr13-12.jpg

      There is a chart of recent AV comparative effectiveness tests done by independent labs. Microsoft scored somewhere around 75% effectiveness for "Proactive" (real-time) protection. The best one on that chart for free appears to be Avira.

    12. Re:Microsoft Security Essentials by gigaherz · · Score: 1

      Maybe so, but to me, lightweight is more important than virus protection. The only reason I have an AV at all is because every 5-10 years, I happen to click on the wrong file, sometimes knowing it was going to be a virus.

    13. Re:Microsoft Security Essentials by ThomasMcA · · Score: 1

      I agree. I have had ISPs that provided both McAfee's suite and Norton's suite at no additional charge. Both suites were resource hogs. After trying them for a short time, I uninstalled them and replaced them with MSE. Even on a netbook with a performance-deprived Atom processor, MSE ran smoothly and was barely noticeable by the user.

      MSE protects my wife's computer, who is a similar user to what the OP describes. She doesn't visit "dirty sites" either, but she will click on ANY link. She also loves contests and sweepstakes, which generates a lot of spam. In the 2-3 years that her laptop has had MSE installed, she has never had a malware incident.

    14. Re:Microsoft Security Essentials by Cyfun · · Score: 1

      I second MS Security Essentials. Back when netbooks fist hit the scene, I grabbed an Asus EeePC and installed the Alpha of Windows 7 on it. It ran alright on the puny PC and miniscule amount of RAM, but would turn into a dog when I'd install antivirus on it. I tried AVG, Avast, Nod32, and a handful of others. Hadn't even heard of MSSE at the time, but gave it a whirl. And I'll be damned if it didn't bog down the machine at all. I've used it to this day on all my devices, and it has caught viruses where programs like Avast and Symantec have failed. Not too bad for free software, especially from Microsuck of all places.

      --
      In Soviet Russia, dot slashes YOU!
  6. Obligatory Linux evangelism by Curupira · · Score: 4, Insightful

    Do they *really* need Windows? Or would a lightweight distro with a windows-like interface do the job? Just asking :)

    1. Re:Obligatory Linux evangelism by Anonymous Coward · · Score: 2, Informative

      A very real and practical solution to be considered.

      I find the biggest challenge is user expectation. When you say the word "Linux", many assume it's hard, weird or too different. If you can get past that and folks actually try it, they discover - to their delight - it's easy to use, intuitive and more importantly robust. At that point, the challenge is getting them to let go so someone else can have a run at it.

    2. Re:Obligatory Linux evangelism by SirTicksAlot · · Score: 5, Funny

      When you say the word "Linux", many assume it's hard, weird or too different.

      It's a retirement community; when you say the word "Computer", many assume it's hard, weird or too different.

    3. Re:Obligatory Linux evangelism by Anonymous Coward · · Score: 4, Insightful

      This.

      A simple sylogism:

      Any antivirus solution worth its salt will put a hook in the file open system call to scan each file as it is accessed.

      Regardless of the footprint and efficiency of the program, anything that runs each accessed file through an additional filter will incur a significant performance hit.

      Therefore, any antivirus solution worth its salt will incur a significant performance hit.

      The solution is not to install an antivirus program. Ways to deal with potential virus infestations: (1) run with adblockers, noscript, and perfectly strict browsing discipline, or (2) don't use a virus-prone system, or (3) something else?

      I do (1) and (2). What will do you?

    4. Re:Obligatory Linux evangelism by lesincompetent · · Score: 3, Insightful

      Why are they teaching "computers" with windows? Given those elders are not accustomed to computers at all they might as well start with something better, and better suited for those old machines.

    5. Re:Obligatory Linux evangelism by SirTicksAlot · · Score: 1

      But everytime I'm having problems with drivers or software and I end up in the commandline entering strange complex commands which I do not want to learn nor should have to learn.

      Which is a pointless argument here. This is a retirement community. These people have not used computers their whole life. Given that the OP is asking advice on administering the machines, I'm guessing the end user will not have to worry about drivers or software.

    6. Re:Obligatory Linux evangelism by L4t3r4lu5 · · Score: 1

      This sounds like the ideal place for a LiveCD that boots straight to, and only to, a browser window.

      No risk of viruses, breaking something, no running gedit by mistake. Just turn it on, and the internet is there.

      --
      Finally had enough. Come see us over at https://soylentnews.org/
    7. Re:Obligatory Linux evangelism by Beorytis · · Score: 1

      How long until there is a "Jitterbug OS" for laptops & desktops? It looks like Jitterbug already has an Android smart phone, the Jitterbug Touch.

    8. Re:Obligatory Linux evangelism by Anonymous Coward · · Score: 1

      I live in two large retirement communities (north in winter, south in summer). I'm a retired "computer guy", so get to fix a LOT of issues (I only charge $20/hr, so get LOTS of work!). The majority of people with computers have Windows, but most are lost if anything goes wrong, which is why they call me, or wish they had if they go to a local computer repair shop. There are a handful of computer literate old folks, under 5%. And a larger percentage (20-30%) who will never use a computer. But they are a dying breed :). Also, under 5% have Apple products, and no one has (or probably has ever heard of) Linux. Just saying. I suspect installing Linux would doom the installer to endless questions, and no one else could help (You don't have WINDOWS?, then I can't help!). Whoever installed Linux would be on the permanent hook for every iota of support. Not going there.

    9. Re:Obligatory Linux evangelism by war4peace · · Score: 1

      Gee, I don't know, does it work on a "Centron"? :)

      --
      ...gis sdrawkcab (usually not responding to ACs; don't bother posting as AC)
    10. Re:Obligatory Linux evangelism by FatdogHaiku · · Score: 1

      Call it LinXP?

      --
      You have the right to remain sentient. If you give up the right to remain sentient, you will be elected to public office
    11. Re:Obligatory Linux evangelism by BobSwi · · Score: 1

      Or a Chromebook?

    12. Re:Obligatory Linux evangelism by evilviper · · Score: 1

      would a lightweight distro with a windows-like interface do the job?

      Elderly folks are going to be more likely to need to use the Windows-only coupon printing software some coupon sites require, and boy will they be confused when they click the link, and their downloaded exe doesn't print out their coupons for them.

      --
      Slashdot gets worse every day... Pipedot: News for nerds, without the corporate slant
    13. Re:Obligatory Linux evangelism by melikamp · · Score: 1

      Actually, to answer their question, there is an excellent and an extremely light-weight anti-virus called fdisk, which will completely disable Windows and other malware that comes with it in a matter of seconds, while at the same time preparing the disk for a GNU/Linux OS.

    14. Re:Obligatory Linux evangelism by Dr_Barnowl · · Score: 2

      That downloaded .exe is probably one of the sources of their malware woes - anything which requires you to download and run native code is dodgy as hell.

    15. Re:Obligatory Linux evangelism by Capt.DrumkenBum · · Score: 1

      I prefer DBAN personally. I have never seen a virus or malware that could survive a good hard cleaning with DBAN.

      --
      If I were God, wouldn't I protect my churches from acts of me?
    16. Re:Obligatory Linux evangelism by evilviper · · Score: 1

      No, they're actually legit. They want to ensure you only print one copy of each, and local, invasive software is the only way to do it.

      I don't like it, but it's reality.

      --
      Slashdot gets worse every day... Pipedot: News for nerds, without the corporate slant
    17. Re:Obligatory Linux evangelism by bonehead · · Score: 1

      I do not want to learn nor should have to learn.

      People actually feel comfortable saying shit like this openly, and yet we wonder why the world is turning to crap......

    18. Re:Obligatory Linux evangelism by thsths · · Score: 1

      And do they really need XP? After all, XP is expiring in under 9 months, so the clock is seriously ticking. Spending any time on the administration of an XP network is lost love.

      If you want to "work" with 512 MB of RAM, you have to move to Linux, and a very light version of Linux, too.

      On the other hand you could get rid of that junk and get a bunch of second hand PCs with Core 2 Duo CPUs and 2 GB of RAM for next to no money. They will happily run Windows 7 or Windows 8 with light applications. With 4 GB of RAM they will fly.

    19. Re:Obligatory Linux evangelism by thsths · · Score: 1

      Legit up to a point. It is nasty software at best, and probably full of security holes - well hidden if you are lucky, gaping open if not. You can do that if you administer your own PC, but on a shared one or with an administrator they should be a no go.

    20. Re:Obligatory Linux evangelism by SeaFox · · Score: 1

      This would be a great solution, if the OP is going to be taking on all support duties for them from now on. Otherwise the trouble will start as soon as they have an issue with a peripheral and need to contact the manufacturer.

    21. Re:Obligatory Linux evangelism by sexconker · · Score: 1

      I prefer DBAN personally. I have never seen a virus or malware that could survive a good hard cleaning with DBAN.

      You've never seen a virus that lives in firmware or BIOS?

    22. Re:Obligatory Linux evangelism by unixisc · · Score: 1

      Not a bad idea, given how much has changed between Aero and Metro. In fact, since they are in lightweight, maybe install LXDE or Razor-qt (XFCE is more like the OS-X interface) and invite them to drive.

    23. Re:Obligatory Linux evangelism by Capt.DrumkenBum · · Score: 1

      Heard of them. Never see one.
      I don't think they have got out of the POC stage, yet.

      --
      If I were God, wouldn't I protect my churches from acts of me?
    24. Re:Obligatory Linux evangelism by unixisc · · Score: 1

      And you had no trouble making sure that the printer works with all of these, or that each of them can smoothly access wi-fi, or that there are no peripherals that have issues w/ these Ubuntu distros?

    25. Re:Obligatory Linux evangelism by unixisc · · Score: 1

      I'm guessing you know ash, bash, csh, dsh... zsh, php, python, C, C++, Objective C, Objective C++, Java, Javascript, guile, bison, rpm, apt-get, ports, and everything else under the sun? B'cos that's what it would take to know every variant of Linux/Unix that might be out there. Even if one knows the basic things about a Linux command line, it becomes complicated very quickly. And you're talking here about people who are generally uncomfortable w/ computers, and asking them to learn really complicated stuff to ensure that they run smoothly.

    26. Re:Obligatory Linux evangelism by bonehead · · Score: 1

      Of course I don't know everything under the sun.

      But I also don't have a mortal fear of learning when something comes along that I don't know, yet have a use for.

    27. Re:Obligatory Linux evangelism by jgrahn · · Score: 1

      Any antivirus solution worth its salt will put a hook in the file open system call to scan each file as it is accessed. Regardless of the footprint and efficiency of the program, anything that runs each accessed file through an additional filter will incur a significant performance hit. Therefore, any antivirus solution worth its salt will incur a significant performance hit.

      Hm, my experience is the same, but my theory of what's going on is different.

      I use Linux at home (no anti-virus) but Windows with encrypted file system and anti-virus (forget which) at work. Seems to me the problem is I/O load when the anti-virus software decides to rescan everything. There's little CPU load, but everything else slows to a crawl anyway because disk access becomes almost ... inaccessible.

      A fast CPU or gigabytes of RAM won't help that scenario. Perhaps it's possible to write or tune the anti-virus software to use a lower I/O priority -- but if so I don't understand why they don't do that!

    28. Re:Obligatory Linux evangelism by unixisc · · Score: 1

      It's great if someone has endless time to learn everything that's needed. Only problem is that in case of Linux, it is beautiful when it works, but when it doesn't, then making it can result in opening up an endless can of worms. For instance, I once had a laptop that I got running w/ RHEL5, and after a while, when the file system failed on me and I found another RHEL based distro, I installed it, and found that certain things didn't work. In particular, the new distro's kernel didn't work w/ the same ALSA version, so I had to download a bunch of ALSA drivers and find out exactly the one that worked.

      Similarly for software. Sometimes, if one is lucky, it may be available under all distribution formats, such as .rpm, .deb, .pac and so on, but more often than not, it's available either as tarballs or in only one format - usually the one not being used. Sometimes, even that is not enough - a package, despite being available, still won't install under Synaptic. So to make it install, one has to know exactly all the idiosyncrasies of how to build something in a given environment - simply following the instructions in the README file doesn't always work.

      I'm all for people learning, or even having to learn new stuff. But when the amount that one has to learn becomes so much that one has to divert one's attention from using the software one needs to tweaking it, that is too much breakage. I've always wished the alternatives - Linux, PC-BSD and OS-X well, but the issues that they have won't go away even if people were to try learning things a bit. Just like most Linux fans are justified in bitching about GNOME3 or Unity, similarly, newcomers to Linux are quite justified in bitching about why a lot of Linux doesn't work straight OOTB.

    29. Re:Obligatory Linux evangelism by kermidge · · Score: 1

      See Zorin OS, on the fly switch between look-alike XP and 7. Don't know if there's still a light-weight version, tho.

    30. Re:Obligatory Linux evangelism by hobarrera · · Score: 1

      I found that suggesting "Mint" prevents this. People think about black screens and green text when you say Linux. They have no concept of Mint (or Ubuntu), so naming that doesn't fire a fear of terminals.

    31. Re:Obligatory Linux evangelism by hobarrera · · Score: 1

      Anyone wanting to print more than one would just use a VM, or "print-to-pdf". Where the hell did you find such "cupon-printing" software? I've never even heard of such a thing!

    32. Re:Obligatory Linux evangelism by evilviper · · Score: 1

      Your ignorance does NOT make you correct. Quite the opposite, really.

      --
      Slashdot gets worse every day... Pipedot: News for nerds, without the corporate slant
    33. Re:Obligatory Linux evangelism by hobarrera · · Score: 1

      Ignorance? I've just given your proof of how their "proteciton" can easily be broken.

    34. Re:Obligatory Linux evangelism by evilviper · · Score: 1

      Except you're massively wrong, and showing your ignorance.

      --
      Slashdot gets worse every day... Pipedot: News for nerds, without the corporate slant
    35. Re:Obligatory Linux evangelism by hobarrera · · Score: 1

      I hate to feed a troll, but if I'm really wrong, what kept you from actually pointing out what was unfeasable about my proposal.

    36. Re:Obligatory Linux evangelism by evilviper · · Score: 1

      It's very easy to spout stupid crap, and only aggravated by announcing that you're completely ignorant of the topic and hand, having no experience, and yet believe yourself to be an expert.

      It's terribly time consuming to do point-by-point rebuttals. Nobody is paying me to do so, and I can't see any reason why your run of the mill stupid comment is important or noteworthy, and therefore somehow worth the effort.

      --
      Slashdot gets worse every day... Pipedot: News for nerds, without the corporate slant
    37. Re:Obligatory Linux evangelism by vandamme · · Score: 1

      I get the AARP magazine because I'm an old fart, and there are at least 2 "No Fuss" computers advertised in it. They probably make a lot of money selling the machines and monthly subscriptions, but it's worth it to some old folks who won't have to worry about windows problems. The UIs have big buttons that say "surf the web" and "email to grandkids" and such. Go thou and do likewise.

    38. Re:Obligatory Linux evangelism by vandamme · · Score: 1

      Not if it uses 3.11, "Linux for Workgroups"; need a later kernel.

  7. Avira? by kinarduk · · Score: 4, Informative
    1. Re:Avira? by armanox · · Score: 1

      Add me to the list for advocating Avira. Been using them since 2007.

      --
      I'm starting to think GNU is the problem with "GNU/Linux" these days.
    2. Re:Avira? by van+da+man · · Score: 2

      Seems a reasonable bet... http://www.pcpro.co.uk/reviews/software/379933/avira-free-antivirus-13

      I agree Avira is good, I've used it even way back on windows 95/98/98SE. The current versions do tend to spam you with pop-ups trying to get you to buy the full product, but even so only a couple of times a day. Not quite to the annoying enough to switch to something else stage, but still it is annoying. I totally recommend buying it just to support them, and help get rid of the pop ups. I used to recommend bitdefender when they allowed you to buy multiple year subscriptions, but not so much anymore.

    3. Re:Avira? by war4peace · · Score: 1

      I used it for years until it started pestering me with nag screens all over the place, filling my screen with maximized pop-ups up to 6 times a day, let alone smaller notifications even more often. At least with Avast I can set the antivirus to Silent/Gaming mode and it's hush-hush.

      --
      ...gis sdrawkcab (usually not responding to ACs; don't bother posting as AC)
    4. Re:Avira? by armanox · · Score: 1

      When I was using the free edition, I blocked the nag screen using local policy...

      --
      I'm starting to think GNU is the problem with "GNU/Linux" these days.
    5. Re:Avira? by Control-Z · · Score: 1

      Avira is good, I use it on many machines and I've never known it to be a resource hog. It does only 2 annoying things:

      1. Pops up a big message every day asking you to upgrade
      2. Blocks access to autorun.inf which is a good or bad thing depending on what you're trying to do.

      IIRC on XP it requires you to upgrade to XP Service Pack 3, which you should be anyway but may be a factor in your decision.

  8. MSE by The+MAZZTer · · Score: 2

    MSE was OK when I last tried it, but it made a footprint on a 1.8ghz single core proc machine. Of course anything will make a footprint on a low-enough-end machine. Previously I had used AVG which was also OK but the networking features tended to break Source engine games even if they were off (you had to deselect them entirely at AVG install time). Anyways not sure if the LATEST version of MSE supports XP still or not. You might be able to grab an older version that still does though.

    1. Re:MSE by Anonymous Coward · · Score: 2, Informative

      maybe have a look at this:

      http://www.av-test.org/en/tests/home-user/windows-xp/marapr-2013/

    2. Re:MSE by UnknownSoldier · · Score: 1

      > but MSE has a light effect on my Windows partition

      Another vote that MSE is good enough - not bloated, doesn't bog the machine down like Norton / McAffe. However you really need a multi-pronged solution for security:

      * Firewall - both Hardware & Software
      * Hosts Blocking - http://winhelp2002.mvps.org/hosts.txt
      * Anti-Virus (real-time) - MSE
      * Anti-Cookies: Spybot Search N Destroy, Adaware

      > use XP with NO virus protection for a month, visit the same websites these people visit, use a modern web browser (not IE 8), and see at the end of that period if you are actually infected.

      A good hosts file (such as the one above) will block 99% of that crap.

  9. MSE by jdharm · · Score: 1

    Microsoft Security Essentials It's pretty heavy to install on a limited machine, but once you get it going you don't notice the performance hit and it's as good as any out there. Before MSE came along I recommended F-Prot. It is a subscription, but nothing I found could touch it on an old slow machine for low overhead AND effectiveness.

  10. Microsoft Security Essentials by Toshito · · Score: 5, Insightful

    I've been using it for the last 3 years on XP and now 7, very lightweight. No virus or adware problem (for now). From time to time I also scan my computer with adaware and spybot.

    --
    Try it! Library of Babel
  11. MSE by puddingebola · · Score: 3, Insightful

    Not that I'm promoting it as effective virus protection, but MSE has a light effect on my Windows partition. Seldom using Windows, but I surf on it ocassionally. Don't know if MS will continue to support it after XP dies, but looking at my parents computer and the 4 websites they visit, I really wonder how robust an anti-virus program someone who is elderly actually needs. Good experiment for somebody: use XP with NO virus protection for a month, visit the same websites these people visit, use a modern web browser (not IE 8), and see at the end of that period if you are actually infected.

  12. Microsoft by ostrand · · Score: 1

    Microsoft Security Essentials - http://windows.microsoft.com/en-us/windows/security-essentials-download - is free, quite light and actually good enough.

    1. Re:Microsoft by bandy · · Score: 1
      http://windows.microsoft.com/mse

      Why yes, I do have that URL memorized. Sigh.

      --
      "You might as well get your son a ticket to hell as give him a five string banjo." -unknown minister
  13. They all seem to kill performance by PoconoPCDoctor · · Score: 3, Insightful

    It's not so much a memory issue as it is the nature of the beast. Active scanning hogs hard disk performance. I would ask these people if they might want to get a Chromebook or similar. The aging hardware might soon go to PC heaven so they will need to replace the system anyway.

    --
    "Let us raise a standard to which the wise and honest can repair" - George Washington
  14. End Of Life by kelarius · · Score: 5, Informative

    Microsoft is killing updates for XP in a little under 9 months. Get them onto linux or a new PC or it may not matter how good of an antivirus you put on there after that.

    --
    Personally I'd rather have my idiots at home glued to the TV than out doing idiotic things
    1. Re:End Of Life by bill_mcgonigle · · Score: 1

      Right. Giving an oldster an XP machine today is equivalent to giving them a car with some bearings that are starting to go.

      Mint requires a 600MHz CPU and half a gig of RAM. That would be more kind. If they can afford to buy software they can afford a new cheap laptop, so that's not the issue here.

      --
      My God, it's Full of Source!
      OUTSIDE_IP=$(dig +short my.ip @outsideip.net)
    2. Re:End Of Life by russbutton · · Score: 1

      I agree. Put 'em on Mint and give 'em Chrome to use. Especially for folks like that, a web browser is the only app they need to run.

      My wife is a complete Luddite. Hates computers. She's a professional violinist and is most comfortable with 19th century technology. Ever look at a violin up close? It's a flimsy box of wood. You tune it by twisting a wooden peg. The thing hasn't even got frets!

      I have her on an Ubuntu box. She runs Chrome and Thunderbird to read e-mail. She sometimes will look at a pdf file in evince. That's it.

      Take one of your machines, put Linux Mint on it. Show an oldster how to run Chrome. The performance will be much, much, MUCH better than XP. Not even close.

    3. Re:End Of Life by SeanBlader · · Score: 1

      Microsoft is killing updates for XP in a little under 9 months. Get them onto linux or a new PC or it may not matter how good of an antivirus you put on there after that.

      This, more than anything else. Really you shouldn't be investing more time into XP than it takes for you to drive to your nearest computer store and buy Windows 7, or download and run on live USB a linux distro to test. So if you're re-installing XP, you're wasting time. By posting this question, you've already gone too far in continuing to use XP.

    4. Re:End Of Life by baka_toroi · · Score: 1

      And the lack of Adobe Flash will surely go down very well with them!

    5. Re:End Of Life by bill_mcgonigle · · Score: 1


      And the lack of Adobe Flash will surely go down very well with them!

      Don't be silly, Flash has been available for linux for years.

      --
      My God, it's Full of Source!
      OUTSIDE_IP=$(dig +short my.ip @outsideip.net)
    6. Re:End Of Life by baka_toroi · · Score: 1

      Yes, implemented in such a half-assed way that it's almost unusable.

      I had to downgrade to 10.2 because the latest version doesn't work on XFCE, or at least, it didn't work on a fresh install of Xubuntu/Mint on my PC. On top of that, there won't be any new releases for Linux, 11.3 is not available and apparently it won't ever be. Gnash is junk.
      Don't get me wrong: I despise Flash, I want it to die already. But it's still a necessary part of the Internet.

    7. Re:End Of Life by bill_mcgonigle · · Score: 1

      Yes, implemented in such a half-assed way that it's almost unusable.

      eh? I've been using it for years without issue. I wish it would die too, but in the meantime, I run the Adobe repo.

      --
      My God, it's Full of Source!
      OUTSIDE_IP=$(dig +short my.ip @outsideip.net)
    8. Re:End Of Life by Blaskowicz · · Score: 1

      I use flash 12.2 under firefox with flashblock, no problem. 12.2 is the version that stays at 12.2 and gets updated with security updates till 2017 (though it seems I have to install them manually on my system, which I don't, cause I did a manual install in the first place)

      You probably have a buggy graphics driver, maybe try 12.2 again and make sure to disable useless "graphics acceleration" in the web browser, and in flash if there's a checkbox option somewhere.

  15. Microsoft Security Essentials by MrKevvy · · Score: 3, Insightful

    Yes, I know... it failed certification. But often what is used in certification is proof-of-concept or old and very rare samples that may not be "in the wild". It deliberately doesn't detect them to have a lighter footprint and be easier on resources. I use it on 1 GHz machines with 512MB of RAM with no noticeable slowdown. It doesn't miss the stuff that you're actually going to be at risk of getting infected with, in my experience.

    You didn't state the OS you were asking about, but IIRC Avast is Windows-only. MSE may fit your requirements.

    --
    -- Insert witty one-liner here. --
  16. Centron? by operagost · · Score: 3, Interesting

    Sempron, Celeron?

    And if you have only 512 MB of RAM, you don't have an older machine-- you have an OLD machine!

    --

    Gamingmuseum.com: Give your 3D accelerator a rest.
    1. Re:Centron? by Bauermlb · · Score: 1

      Yeah, I meant to say Celeron, but had a senior moment. I think yesterday's machine was actually a P-4, but I deal with plenty of other 2 GHz Celeron machines as well.

    2. Re:Centron? by trench · · Score: 1

      'Celeron', surely?

      No reason to go for anything other than MSE, IMO.

      Can't people have ONE wrong tyop here? MSSE is just another bought up company from M$ http://en.wikipedia.org/wiki/GIANT_AntiSpyware. It was way better before M$ got their hands on it. Now days for computers like that the only option I have found so far is ESET Smart Security or Eset nod32 like more people have pointed out here. But I would look at a list like this: http://en.wikipedia.org/wiki/Comparison_of_antivirus_software (I'm sure there are as many lists like this, that there security firms) and test something that suits your own need. But if you are adding it to computers that your grandmother is using then you want it to catch all things.
      I would also add something like this: http://secunia.com/vulnerability_scanning/personal/ or use http://www.filehippo.com/updatechecker/ to check the software on the computer too.

      If you find a typo in this post, good for you.

      In reality, being perfect is so damn boring.

      --
      In reality, being perfect is so damn boring.
  17. Here's an idea by GeekWithAKnife · · Score: 1


    Considering how old WinXP is and considering how well researched its many holes are, you would be better off with almost any other modern alternative.

    Securing/protecting WinXP will give you nothing but grief, pain, frustration and a bill.

    You will do more for retired folk if you get them on a modern OS than if you try to run some free AV solution on a half baked OS.

    If these are many elderly/retired people they can pool together you might want to contact you local software provider for a bulk license. Or better yet, just install Ubuntu.

    If it has to be Windows - Win 7 works well on older hardware. Change is also healthy for the mind and will help them when they have to use other hardware that is becoming increasingly computerized.

    --
    A 'singular oddity' is an event that cannot be explained and only happens when you are alone.
  18. who wrote this? A Centron? by slashmydots · · Score: 1, Insightful

    A "2 GHz Centron" huh? They glued a sempron to a celeron? Someone dumb enough to write that certainly is dumb enough to overestimate the impact Avast has on a system. And 512 MB of memory? That's not enough to run anything.
    How about naming your celeron correctly, adding 512MB of DDR1 for about $4, and dropping in a socket 478 Pentium 2.8Ghz for about $9. That costs less than an antivirus license. Then keep Avast, since it's the best speed vs detection.

    1. Re:who wrote this? A Centron? by slashmydots · · Score: 2

      DDR2 laptop memory is mental everywhere. Everything else is somewhat reasonable on ebay. Brand new is still in crazy-ville but what kind of idiot would buy DDR1 from systemax or crucial at this point? Hey look, 20 sticks of 512MB DDR2 for $40
      http://www.ebay.com/itm/LOT-OF-20-Tested-Samsung-DDR2-512MB-PC2-5300-667MHz-Desktop-Memory-/330957821186?pt=US_Memory_RAM_&hash=item4d0e9f9502
      and 100 sticks of 512MB DDR1 for $150
      http://www.ebay.com/itm/LOT-OF-100-512MB-DDR-NON-ECC-MAJOR-OEM-2100-2700-3200-/360697684461?pt=US_Memory_RAM_&hash=item53fb41e1ed
      I pay $0 because I recycle computers at my shop and pull decent sized ram sticks. I also just picked up 24x 1GB DDR2 for a by-the-pound price at my scrap dealer. It's all aluminum cooled, good brand stuff.

    2. Re:who wrote this? A Centron? by danomac · · Score: 1

      Motherboards that old may only support 512M or 1G of RAM though. Ran into that problem trying to repurpose some old hardware...

  19. Sidestep the problem by flyingfsck · · Score: 3, Informative

    In my experience it is so much easier to avoid the whole problem of Windows malware, simply by installing Linux. I tell my friends that I don't do Windows. They then assume I use a Mac - I use a Mac too, so that isn't wrong. When I tell them that I can install something on their computer that will make it work almost exactly the same as a Mac, then they actually get interested and once they have Linux with XFCE running, they never look back.

    --
    Excuse me, but please get off my Pennisetum Clandestinum, eh!
    1. Re:Sidestep the problem by toygeek · · Score: 1

      That's a very interesting perspective on it. I like that.

    2. Re:Sidestep the problem by hobarrera · · Score: 1

      Out of curiosity, what distro do you usually install?

  20. McAfee by edxwelch · · Score: 2

    John McAfee himself strongly recomends it, says it's like having a Bangkok prostitute do your taxes while you fuck your accountant:
    http://www.theregister.co.uk/2013/06/21/quotw_ending_june_21/

    1. Re:McAfee by Capt.DrumkenBum · · Score: 1

      You make this sound like a bad idea, but you have never met my accountant. ;) Probably a lot safer than fucking a Bangkok prostitute too.

      --
      If I were God, wouldn't I protect my churches from acts of me?
  21. "I want an elephant the size of a mouse, please" by tlambert · · Score: 4, Insightful

    "I want an elephant the size of a mouse, please"

    Antivirus software sniffs the butt of ever filesystem write operation, as well as sniffing the but of every executable image load, as well as every browser plugin load; it also scans the contents of inbound network data, since it could have a known payload using an unknown zero day in the program requesting the data from the Internet.

    Most of the code could be made significantly less overhead, but we are talking reducing it from elephant sized to water buffalo sized, rather than reducing it to mouse size. For example, if instead of checking the whole file when every write occurs, it could prevent the file being opened again until a scan-on-close occurred. Both Outlook and IE would hate that, and any browser that didn't operate "stage then interpret" would still have to be byte-stream interposed. As another example, it could decide to not react to every FS event; MacOS has this capability, since it integrates a mandator access controls (MAC) capability, but many OSs do not. And even on MacOS, most AV vendors don't take advantage of this, since it messes with their ability to use the same event streaming model as on their other platforms.

    So: no such animal exists, if you want it to also be effective.

  22. Bitdefender by Tavor · · Score: 2

    Seriously. It's amazing. I'm using it on a PIII 1.0 ghz 512 PC133 box that I use as a server. It impressed me so much that I switched from AVG (which was slowing down my Core i5 box) and now don't even notice a scan.
    I cannot recommend Bitdefender enough.

    --
    Windows has detected an undetectable error.
  23. Re:How does this stuff get on Slashdot? by ZeroNullVoid · · Score: 4, Informative

    I think he is getting confused and meant to type Centrino which was, at sometime a marketing/branding term for an Intel Reference Design consisting of Chipset, CPU and Wifi. Either way, they wrote it wrong, but lurkers from the past would have recognized it. It was posted on a lot of laptop stickers in the same way Pentium 4, Core X, etc are.

    https://en.wikipedia.org/wiki/Centrino

    As for /. letting this through... things have changed, have you been gone for the past 3 years?

  24. You might just want to suggest a memory upgrade by voss · · Score: 1

    1gb memory stick for that computer is $12 on amazon. XP on 1.5 gb will run avast or mse just fine.

    1. Re:You might just want to suggest a memory upgrade by hobarrera · · Score: 1

      Maybe he lives somewhere where amazon does not ship? Maybe it's 10x computers (120USD sure is a lot more!).

  25. AVG by ulatekh · · Score: 1

    I would also like to vouch for AVG being lightweight. I run it on all my machines, including a 7-year-old XP box.

    --
    "Once we've identified and embraced our sickness, we'll have strength...and that's when we get dangerous." - John Waters
  26. Old dogs can learn new tricks. by goruka · · Score: 1

    Maybe and just for some people, a lightweight Linux distribution might work.

    I moved grandmother from Outlook/Word on a 486 to Gmail and Docs on a 2ghz athlon and she adapted fine. She is 92.

  27. An ounce of prevention... by icemaze · · Score: 1

    ...is worth a pound of cure. Install Firefox, AdblockPlus, maybe even NoScript if you wanna be hardcore, and 99% of malware is blocked in its tracks. Block the ability to download executable files and you'll be very close to 100%. No grandpa, you don't really need to install videoplayer.exe to see that porn clip.

  28. Microsoft Security Essentials by milage · · Score: 1

    I've not had any performance problems with MSE. Seems to do the job, is quiet about it and is free. I've moved the various family members I provide tech support for to it. http://windows.microsoft.com/en-us/windows/security-essentials-download

  29. "Dirty Sites" not the problem by erroneus · · Score: 1

    At one time, long ago, it was most often the sites themselves which were hacked, hijacked and made to serve up malware. But lately, the methods have become more sophisicated. Ad servers are more often targeted and those servers are accessed by requests delivered by a wide range of sites out there. The thing about his is that the original site which might be blamed for the malware, would be uncompromised. The ad servers seem to take a lot longer to detect such compromise.

    If someone is interested in setting up a secure station for email and web, I would recommend a nice Linux distro. This is not for the reasons believed -- that Linux is invulnerable. It's not. But when a site sends a "setup.exe" the user is less likely to unwittingly run the code successfully.

    1. Re:"Dirty Sites" not the problem by fast+turtle · · Score: 1

      My solution is to use a custom host file that blocks most of the advertisers to begin with. Much easier and it saves on bandwidth to boot. Of course, with the changes to Win8, it no longer supports such a solution but as I'm either installing Win7 or Linux, it's a great option for many of the people out there. Hell you don't even need to change them to Firefox to protect them due to this method. Saves headaches on my part as they've already figured out how to solve most of the problems with IE that they encounter.

      It's by no means a perfect solution but with a little effort, I'm able to pretty much protect their systems w/o getting crazy and locking things down so tightly they can't do anything they want. Sure you'll have idiots that absolutely insist they need Bonzai Buddy and what not but after I've cleaned their system the 3rd time, it starts getting expensive for them and I let them know why. I'll support them but it'll start costing them serious money due to the number of times I have to invest fixing the problem. Pretty soon, they no longer ask me for support and I've lost a friend over it but like I tell em, if they want my help, that's one thing but if they don't want to learn what it takes to avoid the problem, I'm going to treat them like any other business will and start charging appropriately.

      --
      Mod me up/Mod me down: I wont frown as I've no crown
    2. Re:"Dirty Sites" not the problem by hobarrera · · Score: 1

      adsuck is a nice DNS server that does that for you, and you can run it at a network level. :)

  30. Panda Cloud by Lawrence_Bird · · Score: 1, Informative

    I think it will still work under XP. After the initial scan it should be pretty light on local resources.

  31. Re:you're an idiot by RPGonAS400 · · Score: 2

    I completely disagree with you. I have used MSE on ALL my familys machines since it came out and I have yet to have it fail and yet to notice ANY slowing of my system other anti-virus programs caused. Any it is approved by my work VPN AV check. I am completely satisfied with it.

  32. None by tsa · · Score: 1

    None. Just don't use Outlook and IE. And teach the users not to click on anything they don't know. Works much better than antivirus programs which are viruses in themselves. They make your computer feverish and sluggish...

    --

    -- Cheers!

  33. Panda Cloud by dafradu · · Score: 1

    www.cloudantivirus.com

    Light, no annoying popups, messages or sounds, i only remember he is there when i manually scan a file.

    MSE is similar.

  34. Not a joke by aglider · · Score: 2

    Install Linux

    --
    Sent as ripples into the electromagnetic field. No single photon has been harmed in the process.
  35. WinXP is essentially EOL... by InfiniteBlaze · · Score: 1

    ditch it for Linux. So much of what we do on PCs now is through a browser, they won't really be able to tell a difference. Ubuntu is extremely easy to learn and does not need a powerhouse to run. Installation is a breeze and updates are as easy as on Windows.

  36. Wisdom follows, pay attention! by Anonymous Coward · · Score: 1

    The thing is, modern antivirus will not be satisfactory on single-core (single-thread) CPU, especially not Celerons, which are so low on on-die cache. First-generation Turion 2.0GHz is somehow still tolerable (if you are a buddhist), but early gen. (NW) Pentium-4 2.8GHz just sucks. Dual cores work wonders, except in case of Atom CPUs, where apparently nothing helps.

    One must also forget about 512MB of RAM, which is often only 448MB, due to the effect of integrated VGA chips. Don't install Windows antivirus with on-access scan functionality under 768MB RAM and even then you will need patient. Practical minimum should be 1GB for WinXP or 1,5, rather 2GB for Win7 32-bit.

    A big problem can be the regular (up to 4x workdaily) automatic updating of malware finger databases. Many AV vendors push these as delta-differentials, that kind of have to be recompiled with the already delivered database. When the database is 180-195 MB large, this can take almost all CPU for 3-4 minutes. Some AV vendors now have such memory problems that virus fingerprint databases loaded into do not even contain malware names. When a nasty object is found, the corresponding label (e.g. Trojan-Spy/YourMoneyGone.xyz) has to be read from disk, which can take suprisingly long.

    All in all, a PC with a 2Gz Celeron CPU and 512MB RAM is no longer up to scrath to run Windows XP in a network-connected scenario. Please do not endanger other netizens by publishing such obsolete computers on the public net! I think they should be recycled the hard(ware) way.

  37. Re:Haven't found one yet. by bandy · · Score: 1

    Another vote for MSE. It Works.

    --
    "You might as well get your son a ticket to hell as give him a five string banjo." -unknown minister
  38. Webroot by blueapples · · Score: 2

    Very fast, very high testing marks. Not free but you get what you pay for - it is worth it.

    --
    www.blueapples.org
    1. Re:Webroot by KitFox · · Score: 1

      Gonna chime in here as well.

      Webroot SecureAnywhere. The old stuff was junk, but SecureAnywhere is pretty much Prevx 4. The total install file for the AV-Only version is under a mebibyte, the working memory stays under 5 meg while idle (usually under three), under 30 meg generally while scanning, and scans take a few minutes at most on most machines, even old old ones. I do enough computer work that I take people who were told that something else is fast/light (usually ESET or Vipre), remove malware for them a few times in a few months, then swap them to Webroot SecureAnywhere. Then I never have to remove malware from their systems again (year and a half and going strong on a few hundred systems) and several asked if I upgraded their hardware for them all sneakily.

      So no, it's not free, but you can get the enterprise version if you really want to manage things and have completely internet-based management, and honestly the darn thing has saved me thousands of dollars in work and given me hundreds of happy customers. So I'll advocate it anytime.

      --

      @Whee

  39. eset nod32 by JonathanP.Bennett · · Score: 1

    I recommend Eset nod 32 for exactly this reason. They wrote portions of the program in assembler in order to be lighter.

  40. Re:Don't bother by MrNiceguy_KS · · Score: 1

    Keep backup images handy and re-blast them if something is fubar.

    Almost the right answer.

    I'm the one-man IT department at a nursing home. I generally don't provide tech support to our residents, though there are are a few PCs in our library that I'm expected to keep up and running. In addition to the risk of malware, there's always the chance that some "knows enough to be dangerous" user will seriously screw something up.

    The answer is here: http://www.faronics.com/products/deep-freeze/ (No, I don't work for them, this isn't a paid endorsement, that's not even a referral link.) Set the PC up once the way it's supposed to be, then install Deep Freeze. Any time you boot the PC, it's back the way I set it up. Aside from hardware failure, any problem that comes up is as simple as, "Have you tried turning it off and then on again?" Staff shuts down the library PCs every night, and I told them to just hit the switch on the power strip. Why bother with a proper shutdown when there's nothing to be written to the hard drive anyway. Next time it boots up, Windows doesn't know it wasn't shut down properly. I don't bother running AV software on those machines. Once a month, I un-freeze them, run Window Update, then re-freeze.

    The basic version of Deep Freeze is $45/seat. At a typical IT salary, it pays for itself pretty quickly in avoiding re-installs. The only thing to watch out for is not to use the "boot thawed on next boot only" option when running Windows update. Sometimes you'll get updates that need to run stuff after reboot, then reboot again, and you can get stuck in a boot loop. (There is a fix available.)

    If you really need a free-as-in-beer solution, I remember years ago stumbling on instructions for doing something similar with XP by using the Enhanced Write Filter software from XP Embedded. If interested, you can do your own Googling, and I have no idea whether this involves violating licensing agreements or copyrights.

    --
    Redundancy is good And also good.
  41. Re:you're an idiot by Anonymous Coward · · Score: 1

    Yeah, dead last according to a shill group made up of commercial AV vendors. Way to drink the coolaid. If you're going to tell me that MSE is less resource heavy than anything symantec puts out.. Well, you deserve your own fate.

    The real truth is that all AV is equally bad. None of them will protect you from the real threat, which is malware that's too new to have signatures. "Heuristic" scanning that claims to detect previously unidentified malware is pure snake oil.

    You use AV for two reasons:
    1. To push old malware out. It's there, it's a vector that needs to be reduced.
    2. As a CYA for compliance and auditing. Nothing more than a checkbox to prove that you're "doing something" if shit ever hits the fan.

    In practice, MSE is the least obtrusive and least resource intensive AV scanner I've ever used. You install it, and forget about it. And that makes it the best. Every other AV package I've used has caused problems, crashes, or has broke other programs. MSE has never done any of these things, so it's the best.

    MSE, however, is not licensed for anything larger than very small businesses so you'll have to deal with that as you see fit..

  42. Increase the ram by ilsaloving · · Score: 1

    You are infinitely better off just trying to source some old memory chips from someone and upgrading the boxes. My parents had a perfectly good P4, but it ran like molasses, even after I disabled everything I could disable.

    The problem is that modern problems are flat out memory hogs. Just running MS-Word and a web browser at the same time will suck up all the ram on the machine. You reach a point where you just have to say, "It's not worth my time struggling to make this work."

    My company was sitting on a small stack of old DDR chips that were basically worthless, so they let me have a few, I upgraded my parents PC, and it started humming nicely again. I can handle multiple apps and antivirus without a problem now.

    1. Re:Increase the ram by Blaskowicz · · Score: 1

      You might stumble on machines with only two ram slots though. If it's two SDRAM slots, the situation sucks (even with four SDRAM slots on a really old machine with shenanigans about density/sides). Two ddr1 slots, it might suck as well, 1 GB sticks cost money, 512MB sticks are plentiful and free.. if you have them. And tested them all with memtest86

      If upgrading memory gets not very practical, maybe you should get new hardware altogether.
      An option would be a motherboard like Gigabyte GA-C847N : no need to junk the entire PC, you put this mobo with soldered low power Celeron 1.1GHz (recent gen, dual core, it's much better than a Celeron 2.4GHz actually), a stick of ddr3 (2GB or 4GB), and that's all I guess. It has both SATA and IDE (one port), two PS/2 ports, VGA, HDMI, ethernet, sound. So you could reuse case, PSU, hard disk, optical drive, keyb/mouse, display, peripherals. even a parallel printer if you use the header on motherboard.

    2. Re:Increase the ram by ilsaloving · · Score: 1

      That is true. My comment is predicated on the fact that you can get a source of cheap/free 1+GB sticks. My work had a bunch, and they let me take 4 of them to upgrade my parents machine. For what they do, 4GB is really overkill. But since the alternative was for the sticks to sit in a box gathering dust, at least now they're not wasted outright.

      Even if it's only 2 slots, 2GB is still a darn sight better than 512MB.

  43. Microsoft Security Essentials by david.given · · Score: 1, Insightful

    Yes, seriously. It's lightweight, it's free, it's integrated into Windows Update so it's really easy to get updates, and best of all it doesn't continually hassle you and go LOOK AT ME! LOOK AT ME! the way most of the other antivirus apps do. It just sits in your icon bar and does its job.

    It's not brilliant, security-wise --- it's merely adequate --- but if you want something that hides itself away and gets on with things with a minimum of user panic, it's definitely the way to go.

  44. Everything has an end of life by msobkow · · Score: 1

    Everything has an end of life, including computer hardware. It's time to put those creaky ancient machines out to pasture.

    --
    I do not fail; I succeed at finding out what does not work.
    1. Re:Everything has an end of life by r33per · · Score: 1

      It's time to put those creaky ancient machines out to pasture.

      That's why they're in a retirement home.

  45. Re:"I want an elephant the size of a mouse, please by OglinTatas · · Score: 1

    If we're talking sniffing butts, I would be happy if it were dog sized instead of elephant sized.

  46. What I do now by fast+turtle · · Score: 1

    I tell em that MS is dropping support after tax day next year for their beloved XP and the following tax-day, they'll be killing Windows Activation for all XP systems. In other words, you're now in the enviable position that your computer will not run after tax-day 2015.

    What options do you have?

    1) I can build you a new system for $(x) with Win7 on it
    2) I can convert your current system to Linux

    a) Keep in mind that your system is obsolete by most standards (You've got a 3 on the tree stick) and few people even know how to fix it anymore.
    b) any new hardware you buy from Walmart & etc. will not work with XP (no drivers as support was dropped when Win7 was released) so you are going to have to upgrade at some point.

    By explaining it to them, I'm finding that by sticking with a $300 budget, most of them can find the money for the new build (it may take a while). The first thing is to lock in the Motherboard and CPU to avoid issues and with the cost of ram being down yet, I generally get a 4GB stick of memory for it. The only area that gives me fits is moving their data from the old drive to the new one. Thankfully, I finally bought an IDE to USB bay for that reason.

    One thing that tends to make folks happy is that I throw in a cheap flash drive (I buy in quantity anyhow) that's used by Windows for backup. Saves my ass when I need to wipe and reinstall due to virus/malware as all of their settings and such are stored on it. Boot from my install flash drive and reinstall takes me less then 20 minutes and then use the flash drive and restore from backup for all their settings and such - usually takes longer to reinstall all their software and Win Updates though I tend to keep the flash drive up to date with latest image from MS.

    --
    Mod me up/Mod me down: I wont frown as I've no crown
    1. Re:What I do now by van+da+man · · Score: 1

      I tell em that MS is dropping support after tax day next year for their beloved XP and the following tax-day, they'll be killing Windows Activation for all XP systems. In other words, you're now in the enviable position that your computer will not run after tax-day 2015.

      Technically, that isn't accurate. you won't be able to activate XP, but Microsoft is supposed to be releasing a patch that will turn off activation. Even if they don't AntiWPA will take care of that problem. try googling for it. Granted almost every single antivirus program on the market tries to flag it, so you'd have to add it to the exceptions list.

  47. Re:you're an idiot by Applekid · · Score: 2

    Avast isn't heavy on CPU usage. It relies on fast HDD access. All antiviruses do and if it seems like they don't, they're simply not scanning as much as they should. Avast is the king resource usage vs detection rate so you should still use it.

    Oh and to the couple morons above me recommending MSSE, you're completely out of touch with reality. It is the dead last worst rated antivirus in the entire world and a resource disaster. It's the last efficient scanner I've ever seen in my entire life and the disk IO is absurd.

    Avast used to be good.

    Then came the bloat and adverts. While the virus threat is always evolving and changing, some performance un-hancements are clearly development choices. Is there any reason, for example, to override the standard window controls with a super fancy custom rendered GUI that runs in 50x of the time of native controls? Particularly when this is a Windows application with no cross-platform needs at all? It's almost as bad as every ASUS utility GUI.

    --
    More Twoson than Cupertino
  48. Re:you're an idiot by V+for+Vendetta · · Score: 1

    I'm also using ESET Nod32 and find it to be lightweight compared to other scanners I use/used. It also integrates nicely into Thunderbird and hasn't missed a malicious attachment there. Only annoyance with that is that there's no option to 'repeat this action for next findings'. This sometimes results in a clickfest when one of those malware waves is in full swing. Other than that there's not much to complain.

  49. Re:Upgrade by jawtheshark · · Score: 1

    You'll pay the bill, I assume? If it works, there is no need to upgrade. XP is just fine, and any competent admin can secure it so that it remains usable but is less risky. Installing an anti-virus is part of it. I usually recommend MSE because it's low-footprint and free. However, I expect MS to drop MSE support for XP in 2014.

    --
    Ahhh...the great dumpster continuum. Many a free computer will be found there. -- sowth (748135)
  50. LINUX by hduff · · Score: 1

    I'm not trolling. Perhaps the best A/V for the clueless grandparent user is Linux.

    A modern Linux with the LXDE window manager configured to look like/work like a Windows desktop using Firefox to web surf and access Gmail plus whatever the latest iteration of LibreOffice is for word processing has been a winner for me in similar circumstances. The biggest problem is when they have some obscure win32 app they are tethered to. In those cases, spend the only $$ you need to spend and use Crossover.

    I usually try them out with a custom run-from-CD distro with the appropriate configurations and apps and do a regular install if they like it.

    Most of them don't even know they aren't using Windows and receive in return fast, reliable performance free from most of the problems they have had before. The one or two that this is not a good solution for can be reverted to Windows. BONUS: your tech help burden is lessened and simplified.

    --
    "I believe in Karma. That means I can do bad things to people all day long and I assume they deserve it." : Dogbert
  51. av performance measured. by core_tripper · · Score: 1

    These tests evaluate the impact of anti-virus software on system performance, as programs running in background – such as real time protection antivirus software -
      AV-comparatives performance chart
    For more in depth see:
      Performance-Test (AV) May 2013 PDF

    NOD32 is very fast, its core is written in assembly. source from NOD32, see performance

  52. Re:Running barefoot by Bauermlb · · Score: 2

    The computer that made me spawn this post has not been running any virus checker for a number of years. No evidence of viruses when I checked it out. I left it running without one because AVAST brought it to its knees. The gentleman using this machine is tech savy (retired engineer, not EE), mid-to-late 70's, but not a computer power user. Mostly he uses it to check email (browser only), and write letters. My experience with users of that generation is that they get comfortable with what they have been using, but changing to MAC or LINUX would make them very uncomfortable, in spite of the fact that they use only a browser (usually IE) and a word processor.

  53. scissors and glue by davidwr · · Score: 1

    Scissors to cut the cord, and glue to glue the USB ports and glue the CD-drives shut.

    Oh wait, you wanted the computer to be more than a paperweight? Better hurry up, April 2014 is coming.

    Seriously, some of the other answers are realistic, but only until Microsoft ends support.

    --
    Knowledge is how to play a game, intelligence is how to win, wisdom is knowing what game to play.
  54. Re:"I want an elephant the size of a mouse, please by Dr_Barnowl · · Score: 1

    I dunno, dogs are carnivores and their shit really stinks. Elephants are herbivores, I'd imagine their dung smells no worse than horseshit looking at it's composition.

  55. Why not replace systems with some cheap ChromeOS? by technomom · · Score: 1

    How many systems are you talking about? If it's not a lot, I would recommend to the proprietors that they just replace the whole lot of them with cheap ChromeOS systems ($250 each if you go for the current Samsungs). That way, you won't be worrying too much about virii, the old folks can still surf matlock.com and you come out looking like a genius.

  56. Re:Get Terminal Server, degrade XPs to dumb client by Blaskowicz · · Score: 1

    I agree, it's a great solution though you have to find an OS (linux based?) to act as the RDP thin client - with those USB, storage, printer features which aren't that trivial. You also need to pay some big $$ for the Server 2012 license, plus CAL, plus special remote use licenses which usually aren't even listed - but we can expect about $100 per thin client.
    So it ain't cheap. And it's useful for a retirement establishment, not for retired people living in their own homes.

  57. Abandon real-time protection? by qwerdf · · Score: 1

    I have a couple of old netbooks which have slightly better specs than the ones you mentioned. Panda was the smallest CPU footprint AV I tried. It was still too big. Now, I run Malware-Bytes every couple of days, and rely on Chrome to catch the most obvious malware attempts in the websites I visit.

  58. Antivirus is entirely irrelevant with XP's EOL by Blaskowicz · · Score: 1

    Really you have to let it go. You can spend days and weeks setting up antiviruses, wasting your time scanning disks, reinstalling Windows XP from scratch to get rid of infections etc. and by April all your work will have gone to waste.
    It's hopeless. You may consider an upgrade to Windows 7 32bit for computer that have 1GB memory or more (that people will have to pay of their own pockets), maybe upgrading the memory is an option in some case, as well as a new HDD or even (better) an SSD. I'd say a old P4 based computer with 1.5GB ram and SSD makes a capable Windows 7 machine. But you might miss a SATA connector..

    Instead, I think you should standardize on e.g. Linux Mint 13 Xfce. It's a LTS version, so supported till 2017 (based on Ubuntu 12.04). It's the lighter and easier to use, Windows 98/XP like variant though the discontinued LXDE edition was lighter.
    There are slightly boring aspects, Duck Duck Go search by default in the browser rather than Google, and an outdated flash version. If you feel it's important, learn to change it and reproduce the changes in a few minutes after a new installation. Mint 15 Xfce is an option too but support will run out soon (stupid 9 month Ubuntu). Use it for brand new hardware, like a new rig with Ivy Bridge Celeron maybe?, or new printers/scanners.

    Mint 13 is pretty nice and has about everything needed out of the box, you can add Google Earth to have something fun, impressive and useful.

  59. Avast! by zixxt · · Score: 2

    Avast is lightweight... I am ruining it right now on 450mhz pentium 2 with 384mb of ram. Avast is the only free av that didn't slow this machine down.

    --
    ---- GENERATION 26: The first time you see this, copy it into your sig on any forum and add 1 to the generation.
    1. Re:Avast! by Darinbob · · Score: 1

      I agree. I have Avast on my mother's XP and it doesn't seem to slow things down. Granted it's a slow computer to start with, but most application use is only with Firefox and Thunderbird, and internet is slow enough that scanning web pages won't be noticeable.

  60. Re:XP = soon unsupported by Blaskowicz · · Score: 1

    Come to think of it, even antivirus will be unsupported. They will refuse to install, update, or enable the resident protection and at the very least prompt for an upgrade to a newer Windows version.

  61. additional junk by hurfy · · Score: 2

    Just remember if you install some of those AV programs they will try and install a toolbar and crap when they ask to update themselves in the future. Do you want them to install new version of program or ask for help when it asks?

    I think it was AVG that got dumped when i eventually missed unchecking the box once on a machine and got a new search provider and other stupid shit :/

    MSE is not so hot but it doesn't play silly games either

    1. Re:additional junk by Darinbob · · Score: 1

      This is a problem, I agree. I'm always uninstalling things when I visit my mother. Too many of these installers add extra junk in the mix, and most users who aren't paranoid just click "next" whenever it pops up instead of reading all of the stuff that gets installed (is there anyone on the planet who thinks a google or yahoo helper bar is actually helpful?). I'm also seeing updated versions of firefox messing things up, it's just too hard to train her to not click "ok" everytime the computer asks for something.

  62. Re: fix your own stuff by SpaceManFlip · · Score: 1
    There is no reason you should not learn to work on the engine in your own car. In this age, all the information you need is available online, for free. If more average day-to-day users of any kind of machine would take a more responsible attitude we'd have much less waste as a global society.

    Learn to do everything for yourself and you free yourself from dependency on people you may or may not be able to trust.

    BTW, changing your engine timing is really easy.

  63. ESET by BenZoate · · Score: 1

    ESET NOD32 is the way to go. Very lightweight (the scanning engine is written in assembly...) and frequently updated. Well worth the price of admission.

  64. MSE by corando · · Score: 1

    I run MS Security Essentials on an old 1.2Ghz Celeron with 512mb RAM used as a standard-def media pc. Granted it doesn't see internet usage but I've never really noticed the anti-virus making trouble.

  65. Install a software firewall by eulernet · · Score: 1

    The virus-makers realized that your computer has a value for them.
    For example:
      - stealing your credit cards
      - spam forwarding
      - DDOS attack
      - filesharing
      - bit-coin mining or passwords cracking
    etc...

    So the virus now don't try to destroy your computer, but they try to find the best value of it.

    So I would recommend that you install a program to alert you when an unknown program is trying to send some data on the Internet.
    Wikipedia lists a few options:
    http://en.wikipedia.org/wiki/Category:Firewall_software

    Personally, I use Comodo Personal Firewall version 5, since I don't like version 6.
    If you really want an antivirus, you can disable the continuous scan, and only manually scan files that seem to connect somewhere.

  66. Reanimate... by jasax · · Score: 1

    I still run 3 Win2K machines, with 8 to 10 yrs old approximately, and for a few years I had a (free) Avira installed, until it stopped supporting Win2K and, more importantly, until the machines knelt down because of it. As time goes by, antivirus become fantastic CPU hogs.

    Don't blame me for still using an unsupported OS. I'm not an IT pro but I'm proud of never having had to reinstall any OS (the only scar I have from virus attacks is a crippled Excel which was "quarantined" many years ago -- but I can live without Excel :-).

    So a few years ago after trying a couple of free AVs, I found this reanimator thing -- http://greatis.com/security/reanimator.html -- and now it is what I use in all my PCs (even some newer ones with Win 7), helped by MS firewall and built-in security tools, and recommend it to family and friends. And it never let me down. But its not a real-time scanner/monitor: you can scan filesystem and memory for malware as with a regular AV, and I use it a lot to kill nasty startup processes that burn resources (Adobe and Java updaters, etc...). Reanimator's database and executable are updated very often. I don't even remember that it is there...

    But, anyway, the most dangerous site I surf is Slashdot :-), so I don't need AV heavy stuff ...

    Reanimator is not heavy and works either a "fire extinguisher" if you suspect you are infected or as a scan tool. In a couple of minutes I teach people how to use it (anyone without severe age damage can learn) and it is effective. However, I do not have experience in dealing with elder retired people.

    Regarding switching to Linux, it's a bad day to talk to me about it: my usual server (not maintained by me), an old PC built with "pro" material, which since a f

  67. Yeah, it's called Linux by FuzzNugget · · Score: 1

    Install $LightWeightDistro, configure Firefox, Thunderbird and Skype, enable auto login and that's all they'll ever need.

    Don't give me some bullshit that it's too confusing for them. Clicking this obvious, labeled button does this obvious thing, there's nothing you can do to screw it up.

  68. Re:you're an idiot by InfoJunkie777 · · Score: 1

    According to most AV reviews I have read (including CNET), MSE is dead last in effectiveness. As for Avast, I installed it when AVG 2013 refused to install. Haven't looked back since. I am not understanding "bloats and adverts". There are one or two signature updates a day. I see no "adverts". As for "bloat", I see by Task Manager Avast is using only 7 MB of memory. It has caught several viruses, including some real nasty ones. I really like the "boot scan" part. I had not had an AV program with that. The first time I ran it it found 3 Trojans. I think Avast is a good choice. Above AVG in reliability. I use it in conjunction with Threatfire. Seems to be a good harmony. Just my opinion.

    --
    Don't explain computers to laymen. Simpler to explain sex to a virgin. -- Robert A. Heinlein
  69. Re:Buy new hardware by Blaskowicz · · Score: 1

    This thing specs's says 768MB ram max. You may try running Windows 7, whose 32bit incarnation supports XP driver, on a more recent and faster laptop IDE HDD (if you haven't changed it already)

  70. SSD by bingoUV · · Score: 1

    It's that simple. Most anti-virus load is I/O load. CPU should be fine. There is no such thing as centron, but most AMD semprons and Intel celerons should do fine with virus scanning load. Spinning hard drive is the bottleneck, easily fixed by SSD.

    Makes sense only if it has SATA 2 or SATA 3, though. That will be true for most laptops from last 10 years.

    Get a $60 SSD (60 or 90GB), replace hard drive with it. Replace the optical drive with the freed up hard drive. Put the optical drive in a USB enclosure, in case it is needed, though unlikely.

    --
    Bingo Dictionary - Pragmatist, n. A myopic idealist.
    1. Re:SSD by Blaskowicz · · Score: 1

      I agree a SSD (and RAM) is all what's needed but "recent" laptop computers sporting a Pentium M or socket 754 Sempron (perfectly usable and with say a 1280x800 display) still are on IDE.

    2. Re:SSD by bingoUV · · Score: 1

      Thanks for the shocking information! Links?

      --
      Bingo Dictionary - Pragmatist, n. A myopic idealist.
  71. Simplicity! by AYeomans · · Score: 1

    Check out http://www.simplicitycomputers.co.uk/.

    They make computers specifically designed for novice and more elderly users. You can either get full computer systems, or a USB "homekey" to boot other computers. It's based on Linux Mint, by the way.

    (You don't mention whether you volunteer or get paid to service computers. If you get paid, avoid this approach as you might be out of a job! But if you volunteer, it should cut your maintenance workload.)

    --
    Andrew Yeomans
  72. Comodo Internet Security on a Sempron chip PC by donak · · Score: 1

    I'm running Comodo Internet Security on a AMD Sempron 1.75ghz chipped PC, admittedly with 2GB of DDR2 RAM.
    In fact I'm running it on every Windows PC in the house, including Windows 8 laptops!
    It runs fine, I've never noticed any slowing ... and it's free for personal use.

    --
    Don't blame me, it's usually 2 in the morning when I post ...
  73. Win XP by agrisea · · Score: 1

    As far as light-weight AV, I am running with MSE only because the others bog computers down too badly to be of any use. As another poster said, why haven't you switched them to some kind of Linux that looks like Win XP but isn't? That deadline of 8 April 2014 will be here soon and having a computer running XP on the internet on 9 April 2014 is a horrible idea.

    --
    Agrisea Tsunami - Epyc Servers... https://agrisea.net/products
  74. AV for older XP System by Chief+Bill · · Score: 1

    Possible Recommendation: F-Secure, Kaspersky, or Sophos. According to AV Comparatives' testing, reported 6 May 2013 ("Impact of Anti-Virus Software on System Performance", info cut-off date April 2013), these three AV solutions (running with their default settings) showed the least performance impact out of 23 AV solutions tested. Performance areas tested: file copying, archiving/unarchiving, encoding/transcoding, installing/uninstalling apps, launching apps, downloading files. AVC 3-star AV: 0.4% impact: F-Secure, Kaspersky, Sophos. 0.6% impact: ESET. 1.3% impact: Symantec, Avast. 2.4% impact: BitDefender. AVC 2-star AV: 6.1% impact: AVIRA. 6.3%: Panda. 7.1%: AVG. 7.4%: Emsisoft. 8.2%: Trend Micro. 8.7%: BullGuard. 9.7%: Vipre. AVC 1-star AV: 13.2%: G DATA. 14.4%: Fortinet, McAfee. 17.4%: Qihoo. 17.5%: eScan. AVC 0-star AV (marked as "Tested"): 25.6% impact on performance - Kingsoft. Specific Notes/Issues: your issues concern older 2 GHZ CPUs and 512 MB RAM running XP, while the AVC test platform has a Intel Core i5 with 4 GB RAM running Win 7. Recommend you max-out the RAM on those machines, if possible. With an older system, there's also the possibility (or probability) that AV vendors may no longer cover it.

  75. Steadystate by avman86 · · Score: 1

    I am in charge of.a lab of 20 older Dells at a senior center with similar specs. I ended up uninstalling the antivirus since they had steadystate on them. This means whatever the virus does gets undone when the machine restarts, and of course they use user accounts . The seniors haven't complained much, only that the machines take awhile to boot up, and to get around that I have many machines start up automatically at 8am. Yes it's not secure, but it works.

  76. Re:/bin/true by hobarrera · · Score: 1

    I find that /bin/true returns too many false positives while detecting viruses. I've moved over to /bin/false which is just as lightweight.

  77. Re:Linux Mint by hobarrera · · Score: 1

    Isn't Mint a bit too much for those PCs? Sure, Mint is lightweight, but I think you're pushing it. Something like xubuntu o lubuntu might fit the bill a bit better.