About antivirus, I am used to consider 3 main cases:
1) The machine is dedicated to work by itself with (usualy) no human user and minimal config, like a server with no graphic interface and only known software executed.
-> for a such computer, I will not install an antivirus that will eat performances and memory. I will only ensure regular updates and do regular survey that nothing unusual happens (no extra unknown dir, etc).
2) The computer is used regularly by an "advanced" user who is paranoiac (or have knowlegde) enough to not launch any exectable "to see what it does", to not go without prudence on crack or forbiden websites, to not use inconsiderately torrent download, etc.
-> on such computer I will not install antivirus. I will only do time to time survey and eventually do a scan of all files from another computer or better, from bootable usb key or CD.
Note : I place myself in this category. I have no antivirus on my computer for at least 10 year and never got anything wrong. Each time I have something which make me to suspect a virus, I did a scan and never found any. Instead I found obsolete drivers, hardware failure, sometime unwanted software installed with another product, etc., (and even one time a cat which had peed on the back corner -and airing- of my tower. Dirty beast ! :-( )
3) In all other cases (when I cannot trust enough users' knowledge or paranoia), I install an antivirus BUT I enable scan only for incoming files (as much as possible according to possible config, often on write operation), but not on read or execute operation except for amovible mass storage like usb key or disk.
And finally, I am regularly anoyed by users who complains about some complaint of antivirus (most time licence renewal or false positive), but I do not remember to have to clean an infected computer for many years for close family or friends, only for more far-off friends or relations.
1) The machine is dedicated to work by itself with (usualy) no human user and minimal config, like a server with no graphic interface and only known software executed.
-> for a such computer, I will not install an antivirus that will eat performances and memory. I will only ensure regular updates and do regular survey that nothing unusual happens (no extra unknown dir, etc).
2) The computer is used regularly by an "advanced" user who is paranoiac (or have knowlegde) enough to not launch any exectable "to see what it does", to not go without prudence on crack or forbiden websites, to not use inconsiderately torrent download, etc.
-> on such computer I will not install antivirus. I will only do time to time survey and eventually do a scan of all files from another computer or better, from bootable usb key or CD.
Note : I place myself in this category. I have no antivirus on my computer for at least 10 year and never got anything wrong. Each time I have something which make me to suspect a virus, I did a scan and never found any. Instead I found obsolete drivers, hardware failure, sometime unwanted software installed with another product, etc., (and even one time a cat which had peed on the back corner -and airing- of my tower. Dirty beast ! :-( )
3) In all other cases (when I cannot trust enough users' knowledge or paranoia), I install an antivirus BUT I enable scan only for incoming files (as much as possible according to possible config, often on write operation), but not on read or execute operation except for amovible mass storage like usb key or disk.
And finally, I am regularly anoyed by users who complains about some complaint of antivirus (most time licence renewal or false positive), but I do not remember to have to clean an infected computer for many years for close family or friends, only for more far-off friends or relations.
