A new way to disable AV software?

This message is not archived
 >> Stay informed about: A new way to disable AV software? 

"Potblak" wrote:

> Is there some way I can protect my PC's clock from outside interference?

Don't run as admin.

> I realise this will mean I have to set the DST changes myself

Why?
 >> Stay informed about: A new way to disable AV software? 

"Ant" <not RemoveThis @home.today> wrote in message
news:k86dnTuQz-p7KLnanZ2dneKdnZydnZ2d@brightview.co.uk...
> "Potblak" wrote:
>
>> Is there some way I can protect my PC's clock from outside interference?
>
> Don't run as admin.
>
>> I realise this will mean I have to set the DST changes myself
>
> Why?
>
Thank you all for your in-depth, considerate comments.
 >> Stay informed about: A new way to disable AV software? 

Potblak wrote:
> "Ant" <not DeleteThis @home.today> wrote in message
> news:k86dnTuQz-p7KLnanZ2dneKdnZydnZ2d@brightview.co.uk...
>> "Potblak" wrote:
>>
>>> Is there some way I can protect my PC's clock from outside
>>> interference?
>>
>> Don't run as admin.
>>
>>> I realise this will mean I have to set the DST changes myself
>>
>> Why?
>>
> Thank you all for your in-depth, considerate comments.

Try posting at the forum called virtualdr.com and I believe you may get
what you want.
 >> Stay informed about: A new way to disable AV software? 

"Potblak" wrote:

> "Ant" wrote:
>> "Potblak" wrote:
>>> Is there some way I can protect my PC's clock from outside interference?
>>
>> Don't run as admin.
>>
>>> I realise this will mean I have to set the DST changes myself
>>
>> Why?
>
> Thank you all for your in-depth, considerate comments.

Setting the clock requires administrator rights on NT based systems.
If you, and programs running under your control, don't have those
rights it can't be reset. The DST change will still occur because a
system process controls that. If you need to adjust it manually, log
in as admin. Of course, if you are using Win9x this won't apply.

Running as an unprivileged user for normal day-to-day activities goes
a long way to protect your system from the effects of malware attack.
 >> Stay informed about: A new way to disable AV software? 

"Ant" <not DeleteThis @home.today> wrote in message
news:rvWdnbZBkbeMrbvanZ2dnUVZ8vudnZ2d@brightview.co.uk...
> "Potblak" wrote:
>
>> "Ant" wrote:
> Setting the clock requires administrator rights on NT based systems.
> If you, and programs running under your control, don't have those
> rights it can't be reset. The DST change will still occur because a
> system process controls that. If you need to adjust it manually, log
> in as admin. Of course, if you are using Win9x this won't apply.
>
> Running as an unprivileged user for normal day-to-day activities goes
> a long way to protect your system from the effects of malware attack.
>
Thank you Ant.
I appreciate what you say, and I'll consider removing admin rights for
regular day to day use;
but I think you missed my point.
I did not change my clock.
Something else did. (Twice!)
Are you saying that if I don't run with admin rights, NOTHING can change my
clock?
What about Mr Gates? HE obviously can, so why not someone else?
 >> Stay informed about: A new way to disable AV software? 

Potblak wrote:
> Something else did. (Twice!)
> Are you saying that if I don't run with admin rights, NOTHING can change my
> clock?
>
The Jan 01 part sounds like a bad battery or connection, but the "2008"
does not make sense.

None of the other CMOS settings were changed, were they?
 >> Stay informed about: A new way to disable AV software? 

"Potblak" wrote:

> Thank you Ant.
> I appreciate what you say, and I'll consider removing admin rights
> for regular day to day use;
> but I think you missed my point.

You asked what could be done to prevent your clock being changed.

> I did not change my clock.
> Something else did. (Twice!)

Then that something must have the required privilege. When you're
admin, anything run in the session inherits those permissions.
Alternatively, as Offbreed suggested, you may have have a low CMOS
battery, or perhaps it was just a glitch or a bug. My clock advanced
a couple of years once but I'm sure it wasn't done deliberately by
software.

> Are you saying that if I don't run with admin rights, NOTHING can
> change my clock?

System processes (started before you log in) can.

> What about Mr Gates? HE obviously can,

He can't change mine.

> so why not someone else?

If you've allowed a malicious program to install itself, unknowingly
or not, while logged in as admin then your system is open to all.
 >> Stay informed about: A new way to disable AV software? 

Nah, The battery thing is unlikely to put the clock <forwards>, only back to
origin.
And no, no other CMOS setting were changed, I've checked since reading your
reply, Offbreed.
Upon reflection, I suspect a not dodgy, but badly written booking form on a
website might be the culprit.
So I guess taking your original suggestion will fix that for the future.
Thanks, Ant.
"Ant" <not.DeleteThis@home.today> wrote in message
news:ZpydnVAVsvBB3LfaRVnytQA@brightview.co.uk...
> "Potblak" wrote:
>
>> Thank you Ant.
>> I appreciate what you say, and I'll consider removing admin rights
>> for regular day to day use;
>> but I think you missed my point.
>
> You asked what could be done to prevent your clock being changed.
>
>> I did not change my clock.
>> Something else did. (Twice!)
>
> Then that something must have the required privilege. When you're
> admin, anything run in the session inherits those permissions.
> Alternatively, as Offbreed suggested, you may have have a low CMOS
> battery, or perhaps it was just a glitch or a bug. My clock advanced
> a couple of years once but I'm sure it wasn't done deliberately by
> software.
>
>> Are you saying that if I don't run with admin rights, NOTHING can
>> change my clock?
>
> System processes (started before you log in) can.
>
>> What about Mr Gates? HE obviously can,
>
> He can't change mine.
>
>> so why not someone else?
>
> If you've allowed a malicious program to install itself, unknowingly
> or not, while logged in as admin then your system is open to all.
>
>
 >> Stay informed about: A new way to disable AV software? 

Leythos wrote:
> In article <472465a9$0$17208$5a62ac22@per-qv1-newsreader-
> 01.iinet.net.au>, Invalid DeleteThis @Invalid.net says...
>> Then I noticed that AVG wasn't updating on startup or when the preset time
>> came around.
>
> Every day I see more and more reason to not use AVG.
>

Sorry....I have used the free version of AVG since inception, and I find
it to be one of the best.
Lately it has been updating the files 2-3 times day and when it scans
automatically during the night, in my case, it has yet to fail finding
some nasty things, when they exist.

Certainly better than the MacAfee or Norton whose programs eat up
virtually all the resources on a machine.

Just my opinion.
 >> Stay informed about: A new way to disable AV software? 

In article <zPOdnVcyRuFJsq7anZ2dnUVZ_tCrnZ2d.RemoveThis@comcast.com>,
responder.RemoveThis@comcast.net says...
> Leythos wrote:
> > In article <472465a9$0$17208$5a62ac22@per-qv1-newsreader-
> > 01.iinet.net.au>, Invalid.RemoveThis@Invalid.net says...
> >> Then I noticed that AVG wasn't updating on startup or when the preset time
> >> came around.
> >
> > Every day I see more and more reason to not use AVG.
> >
>
> Sorry....I have used the free version of AVG since inception, and I find
> it to be one of the best.
> Lately it has been updating the files 2-3 times day and when it scans
> automatically during the night, in my case, it has yet to fail finding
> some nasty things, when they exist.
>
> Certainly better than the MacAfee or Norton whose programs eat up
> virtually all the resources on a machine.
>
> Just my opinion.

And my experience with more than 100 machines in a University Sorority
environment, about as wild as you can get, is that it's the least
protective AV solution on the market.

I agree about McCrappy and Norton eating up resources, but it's better
to have a secure machine than a fast infected one.

--

Leythos - spam999free.RemoveThis@rrohio.com (remove 999 to email me)

Fight exposing kids to porn, complain about sites like PCBUTTS 1.COM
that create filth and put it on the web for any kid to see: Just take a
look at some of the FILTH he's created and put on his website:
http://forums.speedguide.net/archive/index.php/t-223485.html all exposed
to children (the link I've include does not directly display his filth).
You can find the same information by googling for 'PCBUTTS1' and
'exposed to kids'.
 >> Stay informed about: A new way to disable AV software?