# Are virus attacks on home computers a thing of the past

**URL:** <https://boards.straightdope.com/t/are-virus-attacks-on-home-computers-a-thing-of-the-past/747909>\
**Category:** Factual Questions\
**Created:** [March 4, 2016, 8:57am UTC](https://boards.straightdope.com/t/are-virus-attacks-on-home-computers-a-thing-of-the-past/747909 "2016-03-04T08:57:37Z")\
**Posts on this page:** 16\
**Page:** 3

<div class="post-metadata">

**Author:** ![raventhief](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/raventhief/32/4_2.png) [@raventhief](https://boards.straightdope.com/u/raventhief)\
**Post date:** [March 6, 2016, 3:29am UTC](https://boards.straightdope.com/t/are-virus-attacks-on-home-computers-a-thing-of-the-past/747909/41 "2016-03-06T03:29:28Z")

</div>

I had to deal with a variant of cryptolocker on am android tablet the other day. Luckily the customer carted not at all if he lost everything so we were able tip get past the locks and facility reset. Real malware for android is definitely out there.

---

<div class="post-metadata">

**Author:** ![drachillix](https://avatars.discourse-cdn.com/v4/letter/d/48db29/32.png) [@drachillix](https://boards.straightdope.com/u/drachillix)\
**Post date:** [March 6, 2016, 3:32am UTC](https://boards.straightdope.com/t/are-virus-attacks-on-home-computers-a-thing-of-the-past/747909/42 "2016-03-06T03:32:54Z")

</div>

> [@Atamasama](#):
>
> Antivirus is like a flu shot. You can avoid the shot and not get the flu. You can take the shot and still get the flu. But you’re better off with the shot because it reduces your chances of catching it.
> 
> (Actually, a flu shot is LITERALLY an antivirus but that’s beside the point.)

The anology I use with my customers is, “anti virus programs are like bulletproof vests” they are good to have if you get hit, but not a guarantee you don’t get hurt"

---

<div class="post-metadata">

**Author:** ![Deeg](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/deeg/32/2955_2.png) [@Deeg](https://boards.straightdope.com/u/Deeg)\
**Post date:** [March 6, 2016, 4:27am UTC](https://boards.straightdope.com/t/are-virus-attacks-on-home-computers-a-thing-of-the-past/747909/43 "2016-03-06T04:27:50Z")

</div>

> [@Atamasama](#):
>
> Antivirus is like a flu shot. You can avoid the shot and not get the flu. You can take the shot and still get the flu. But you’re better off with the shot because it reduces your chances of catching it.
> 
> (Actually, a flu shot is LITERALLY an antivirus but that’s beside the point.)

I don’t use an antivirus largely because they degrade my system but also because they aren’t that effective; they are reactive. But my main point was that antivirus is not needed in Windows. It’s much better if users are given a little knowledge on how to avoid malware.

---

<div class="post-metadata">

**Author:** ![LSLGuy](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/lslguy/32/5813_2.png) [@LSLGuy](https://boards.straightdope.com/u/LSLGuy)\
**Post date:** [March 6, 2016, 1:07pm UTC](https://boards.straightdope.com/t/are-virus-attacks-on-home-computers-a-thing-of-the-past/747909/44 "2016-03-06T13:07:14Z")

</div>

Kinda depends on your use case.

If your main use of your PC is to consume porn and Russian mail-order bride catalogs, you have a different need for anti-malware than if your only use of your PC is to visit SDMB with the ads blocked. Or to VPN to your work to use their specialized app for your job.

---

<div class="post-metadata">

**Author:** ![RaftPeople](https://avatars.discourse-cdn.com/v4/letter/r/6f9a4e/32.png) [@RaftPeople](https://boards.straightdope.com/u/RaftPeople)\
**Post date:** [March 6, 2016, 7:23pm UTC](https://boards.straightdope.com/t/are-virus-attacks-on-home-computers-a-thing-of-the-past/747909/45 "2016-03-06T19:23:11Z")

</div>

If you look at malware by OS you will see the following:  
1 - windows, as we all know, had and has a lot of malware  
2 - ios has a very small percentage, despite high volume tablet and phone sales  
3 - android is the new windows, it is dominating malware market share

---

<div class="post-metadata">

**Author:** ![andrewm](https://avatars.discourse-cdn.com/v4/letter/a/c57346/32.png) [@andrewm](https://boards.straightdope.com/u/andrewm)\
**Post date:** [March 6, 2016, 7:54pm UTC](https://boards.straightdope.com/t/are-virus-attacks-on-home-computers-a-thing-of-the-past/747909/46 "2016-03-06T19:54:56Z")

</div>

There is a risk that your antivirus software contains defects that open your computer up to attacks that otherwise wouldn’t be possible:

> **[bh-eu-08-xue-WP.pdf](https://www.blackhat.com/presentations/bh-europe-08/Feng-Xue/Whitepaper/bh-eu-08-xue-WP.pdf)**
>
> 260.40 KB

> **[Antivirus products riddled with security flaws, researcher says](https://www.pcworld.com/article/440582/antivirus-products-riddled-with-security-flaws-researcher-says.html)**
>
> Antivirus products increase a computer's attack surface and may even lower operating system protections, a security researcher claims.

> **[Security wares like Kaspersky AV can make you more vulnerable to attacks](https://arstechnica.com/information-technology/2015/09/security-wares-like-kaspersky-av-can-make-you-more-vulnerable-to-attacks/)**
>
> Products often open computers to hacks they otherwise wouldn't be vulnerable to.

> **[Vulnerability found in McAfee, Kaspersky and AVG anti-virus softwares](https://www.scmagazine.com/news/vulnerability-management/vulnerability-found-in-mcafee-kaspersky-and-avg-anti-virus-softwares)**
>
> Three major anti-virus softwares have been shown to be vulnerable to a large coding vulnerability.

---

<div class="post-metadata">

**Author:** ![andrewm](https://avatars.discourse-cdn.com/v4/letter/a/c57346/32.png) [@andrewm](https://boards.straightdope.com/u/andrewm)\
**Post date:** [March 6, 2016, 8:07pm UTC](https://boards.straightdope.com/t/are-virus-attacks-on-home-computers-a-thing-of-the-past/747909/47 "2016-03-06T20:07:45Z")

</div>

> [@Bayard](#):
>
> It is true that forcing users to run with lower privileges is an important way to reduce the risk of malware. However, a lot of malware works by exploiting buffer overflows. If you can exploit a buffer overflow, you get _system_ level privileges, regardless of the access rights of the user context you start in.

Not true - “buffer overflow” does not imply “system level privileges”. It could be anything from a totally unprivileged dedicated-service user, to a normal user, to an administrator user, to kernel level - depending on context.

---

<div class="post-metadata">

**Author:** ![andrewm](https://avatars.discourse-cdn.com/v4/letter/a/c57346/32.png) [@andrewm](https://boards.straightdope.com/u/andrewm)\
**Post date:** [March 6, 2016, 8:14pm UTC](https://boards.straightdope.com/t/are-virus-attacks-on-home-computers-a-thing-of-the-past/747909/48 "2016-03-06T20:14:18Z")

</div>

> [@Chronos](#):
>
> It was my understanding that OSX only allows each application to access a limited subset of memory, not shared by the OS or by any other application. Thus, even if a bit of sloppy code in the application allows a buffer overflow, it can only overflow into other areas of memory used by that same application, and hence can only do what that application has permission to do. Which could, of course, still cause you problems, but it couldn’t do things like overwrite system files.

This is not unique to OS X. All the major modern operating systems (Windows NT, Linux, OS X, Solaris, BSD, etc - and their mobile derivatives) implement protected memory schemes that prevent applications from messing with each other’s address space or protected kernel space.

---

<div class="post-metadata">

**Author:** ![Chronos](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/chronos/32/134_2.png) [@Chronos](https://boards.straightdope.com/u/Chronos)\
**Post date:** [March 6, 2016, 8:47pm UTC](https://boards.straightdope.com/t/are-virus-attacks-on-home-computers-a-thing-of-the-past/747909/49 "2016-03-06T20:47:18Z")

</div>

OK, I’m not up on modern versions of Windows. All I know is that there was a time when OSX had that feature and Windows didn’t. And such a feature, if implemented properly, would prevent buffer overflows in random applications from granting root access.

---

<div class="post-metadata">

**Author:** ![mhendo](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/mhendo/32/3159_2.png) [@mhendo](https://boards.straightdope.com/u/mhendo)\
**Post date:** [March 6, 2016, 9:02pm UTC](https://boards.straightdope.com/t/are-virus-attacks-on-home-computers-a-thing-of-the-past/747909/50 "2016-03-06T21:02:45Z")

</div>

> [@Chronos](#):
>
> OK, I’m not up on modern versions of Windows. All I know is that there was a time when OSX had that feature and Windows didn’t. And such a feature, if implemented properly, would prevent buffer overflows in random applications from granting root access.

While it’s completely understandable that you might not be familiar with new versions of Windows if you don’t use Windows, this is also a central problem in many of the discussions about operating systems that i see on this message board, and elsewhere online.

A depressingly large percentage of people who rag on Windows seem to be doing so based on information that is years and years out of date. They remember their own experiences running Win95, or WinME, or Win2000, or they remember some problem they read about XP back in 2003, and assume that all of those things are still true in 2008 or 2012 or 2016. I’ve lost track of the number of times i’ve read complaints about various aspects of Windows that were corrected two or three or four versions ago.

---

<div class="post-metadata">

**Author:** ![Chronos](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/chronos/32/134_2.png) [@Chronos](https://boards.straightdope.com/u/Chronos)\
**Post date:** [March 6, 2016, 10:35pm UTC](https://boards.straightdope.com/t/are-virus-attacks-on-home-computers-a-thing-of-the-past/747909/51 "2016-03-06T22:35:24Z")

</div>

Yeah, that’s why I’m careful to phrase my statements in terms of what OSX has, not in terms of what Windows doesn’t have. If my statement that OSX has this was interpreted as implying that Windows does not, that was not my intention, and I apologize.

---

<div class="post-metadata">

**Author:** ![Squink](https://avatars.discourse-cdn.com/v4/letter/s/b5e925/32.png) [@Squink](https://boards.straightdope.com/u/Squink)\
**Post date:** [March 7, 2016, 1:24am UTC](https://boards.straightdope.com/t/are-virus-attacks-on-home-computers-a-thing-of-the-past/747909/52 "2016-03-07T01:24:02Z")

</div>

Just this weekend: [First Mac Ransomware Found in Transmission BitTorrent Client](http://forums.macrumors.com/threads/first-mac-ransomware-found-in-transmission-bittorrent-client.1959908/)

---

<div class="post-metadata">

**Author:** ![SenorBeef](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/senorbeef/32/2220_2.png) [@SenorBeef](https://boards.straightdope.com/u/SenorBeef)\
**Post date:** [March 8, 2016, 1:07am UTC](https://boards.straightdope.com/t/are-virus-attacks-on-home-computers-a-thing-of-the-past/747909/53 "2016-03-08T01:07:47Z")

</div>

> [@leahcim](#):
>
> They are based on systems that were originally multi-user systems, so user account controls are built in at a very deep level. Windows PCs originated as single-user machines where it was assumed that all processes have permissions to all files and systems and security was tacked on later.

I’m almost certain that everyone’s ideas of Windows are locked in the 90s. In the (thankfully rare today) Mac user bashing of PCs, I still hear the same shit they’ve been saying for 20 years. OMG! Enjoy your constant bluescreens!!!

Windows 2000, XP, Vista, 7, 8, and 10 are forms of Windows NT. They have almost nothing in common with Windows 95/98/ME. It’s an entirely different codebase. NT was designed from the ground up to be a multi-user experience with UAC.

Generally, Windows has always been fairly secure against most forms of malware. But non-savvy users flock to Windows, and most of the malware people have is self-inflicted. People will go to the sketchiest websites, download executable files, and windows will warn them that it’s super sketchy and they got it from a super sketchy place and WARNING THIS IS PROBABLY BAD and asks if you really want to run it, and of course that user does. It’s really difficult to protect a user from themselves unless you run a completely walled garden where you have say over everything that’s executed or modified.

---

<div class="post-metadata">

**Author:** ![Defensive\_Indifference](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/defensive_indifference/32/6502_2.png) [@Defensive\_Indifference](https://boards.straightdope.com/u/Defensive_Indifference)\
**Post date:** [March 8, 2016, 5:40am UTC](https://boards.straightdope.com/t/are-virus-attacks-on-home-computers-a-thing-of-the-past/747909/54 "2016-03-08T05:40:49Z")

</div>

> [@andrewm](#):
>
> Not true - “buffer overflow” does not imply “system level privileges”. It could be anything from a totally unprivileged dedicated-service user, to a normal user, to an administrator user, to kernel level - depending on context.

Ah, thanks. Apparently I’ve been hauling around some ignorance for a while. Tip of the hat for setting me straight.

---

<div class="post-metadata">

**Author:** ![Cugel](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/cugel/32/1199_2.png) [@Cugel](https://boards.straightdope.com/u/Cugel)\
**Post date:** [March 8, 2016, 7:52am UTC](https://boards.straightdope.com/t/are-virus-attacks-on-home-computers-a-thing-of-the-past/747909/55 "2016-03-08T07:52:40Z")

</div>

> [@SenorBeef](#):
>
> WARNING THIS IS PROBABLY BAD and asks if you really want to run it, and of course that user does.

Then they stridently claim “I DUN NUFFIN”, which confounds your efforts to prevent further infections.

---

<div class="post-metadata">

**Author:** ![here\_and\_there](https://avatars.discourse-cdn.com/v4/letter/h/f07891/32.png) [@here\_and\_there](https://boards.straightdope.com/u/here_and_there)\
**Post date:** [March 9, 2016, 7:54pm UTC](https://boards.straightdope.com/t/are-virus-attacks-on-home-computers-a-thing-of-the-past/747909/56 "2016-03-09T19:54:27Z")

</div>

It is funny how, in an effort to even the Operating Systems, the conversation shifted from “viruses” (meaning: “viruses”, or “viruses and the likes”)  
to “malware” (aka: everything that can hurt your computer, including… sledgehammers 😉 )

In other words: all computers can be smashed by sledgehammers, therefore all computers are the same.

If you download some software, from some unknown source,that promises to make you king of the world, and then execute or install this software, and then this software starts messing with your other software and your private data, that’s not a virus.

“Virus” implies that you catch it without you doing anything wrong.

It’s true that Microsoft Windows has improved its security regarding viruses, but it is done in a way that represents “bureaucratic madness”.  
Microsoft Windows message: “Do you want to start this application that you just clicked on it in order to start it?” :smack:

All Operating Systems have vulnerabilities. They are discovered and corrected, constantly. Obviously, some organisations do better job than others.

As to whether you need an a antivirus in Microsoft Windows or not, just check the Windows Security Center, where it asks you to enable your antivirus software. :rolleyes:  
([Yandex Images](https://yandex.com/images/search?text=windows+security+center+antivirus))

[Previous page](https://boards.straightdope.com/t/are-virus-attacks-on-home-computers-a-thing-of-the-past/747909.md?page=2)
