We are running Symantec's Corporate Edition on the SBS2000
and all clients, where updates and schedules are tweaked
on the server and relayed to all clients.

At the moment, two machines on our LAN do not have AV on
them, as the users insist that AV slows down their
machine...in fact, he showed me a program he ran on a
large database file (GB's worth) and it took double the
amount of time than it did with no AV running. Although
we disabled the Heuristics in Symantec's BloodHound
technology etc..., it still made a difference.

I am concerned about these two machines running no AV. I
want to install a "light" AV so at least I know that the
machines are covered but will not interupt or slow down
programs being run (data processing!).

Can someone help me and tell me what is a good "light" AV
product to buy that is easy on processing power. The
machines in question are Windows2000, SP4 patched with all
updates and Blaster.

The two guys VPN in a lot from home and abroad, so they
could easily infect their machines!

skc

Re: Anti-Virus Question by Merv

Merv
Mon Sep 01 09:11:54 CDT 2003

Have you tried other tweaks in the Symantec Realtime Protection (RTP) on the
workstations? If you go into RTP, select "File Types" and set it to
"Selected" and use the default set of file types. Also, go to the "Drive
Types" section and deselect "Network Drives". On some machines, I've even
had to click on the "Advanced" button, set the "Scan Files When" to
"Modified" and not "Accessed and Modified".

HTH

--
Merv Porter [SBS MVP]
===================================

"skc" <skc@skc.com> wrote in message
news:069f01c37070$e6ce3e70$a301280a@phx.gbl...
> We are running Symantec's Corporate Edition on the SBS2000
> and all clients, where updates and schedules are tweaked
> on the server and relayed to all clients.
>
> At the moment, two machines on our LAN do not have AV on
> them, as the users insist that AV slows down their
> machine...in fact, he showed me a program he ran on a
> large database file (GB's worth) and it took double the
> amount of time than it did with no AV running. Although
> we disabled the Heuristics in Symantec's BloodHound
> technology etc..., it still made a difference.
>
> I am concerned about these two machines running no AV. I
> want to install a "light" AV so at least I know that the
> machines are covered but will not interupt or slow down
> programs being run (data processing!).
>
> Can someone help me and tell me what is a good "light" AV
> product to buy that is easy on processing power. The
> machines in question are Windows2000, SP4 patched with all
> updates and Blaster.
>
> The two guys VPN in a lot from home and abroad, so they
> could easily infect their machines!
>
> skc



Re: Anti-Virus Question by skc

skc
Mon Sep 01 10:26:51 CDT 2003

Merv,

The Symantec has been locked down on the SBS when rolling
out to the clients. If I unlock some of the options, then
the other clients will fiddle the AV and screw it up as
they had done before.

skc

>-----Original Message-----
>Have you tried other tweaks in the Symantec Realtime
Protection (RTP) on the
>workstations? If you go into RTP, select "File Types"
and set it to
>"Selected" and use the default set of file types. Also,
go to the "Drive
>Types" section and deselect "Network Drives". On some
machines, I've even
>had to click on the "Advanced" button, set the "Scan
Files When" to
>"Modified" and not "Accessed and Modified".
>
>HTH
>
>--
>Merv Porter [SBS MVP]
>===================================
>
>"skc" <skc@skc.com> wrote in message
>news:069f01c37070$e6ce3e70$a301280a@phx.gbl...
>> We are running Symantec's Corporate Edition on the
SBS2000
>> and all clients, where updates and schedules are tweaked
>> on the server and relayed to all clients.
>>
>> At the moment, two machines on our LAN do not have AV on
>> them, as the users insist that AV slows down their
>> machine...in fact, he showed me a program he ran on a
>> large database file (GB's worth) and it took double the
>> amount of time than it did with no AV running. Although
>> we disabled the Heuristics in Symantec's BloodHound
>> technology etc..., it still made a difference.
>>
>> I am concerned about these two machines running no AV.
I
>> want to install a "light" AV so at least I know that the
>> machines are covered but will not interupt or slow down
>> programs being run (data processing!).
>>
>> Can someone help me and tell me what is a good "light"
AV
>> product to buy that is easy on processing power. The
>> machines in question are Windows2000, SP4 patched with
all
>> updates and Blaster.
>>
>> The two guys VPN in a lot from home and abroad, so they
>> could easily infect their machines!
>>
>> skc
>
>
>.
>

Re: Anti-Virus Question by Les

Les
Mon Sep 01 12:17:14 CDT 2003

In article <069f01c37070$e6ce3e70$a301280a@phx.gbl>, skc@skc.com says...
> We are running Symantec's Corporate Edition on the SBS2000
> and all clients, where updates and schedules are tweaked
> on the server and relayed to all clients.
>
> At the moment, two machines on our LAN do not have AV on
> them, as the users insist that AV slows down their
> machine...in fact, he showed me a program he ran on a
> large database file (GB's worth) and it took double the
> amount of time than it did with no AV running. Although
> we disabled the Heuristics in Symantec's BloodHound
> technology etc..., it still made a difference.
>
> I am concerned about these two machines running no AV. I
> want to install a "light" AV so at least I know that the
> machines are covered but will not interupt or slow down
> programs being run (data processing!).
>
> Can someone help me and tell me what is a good "light" AV
> product to buy that is easy on processing power. The
> machines in question are Windows2000, SP4 patched with all
> updates and Blaster.
>
> The two guys VPN in a lot from home and abroad, so they
> could easily infect their machines!
>
> skc
>
This is not so much a techie "how-to" issue as it is a training and
management issue. You don't need "AV light", you need "user smart".

Nonetheless, perhaps you could use a batch file that stops the AV
service, runs the user's app, then restarts the AV service on app exit.
These two users are asking for trouble, and you will be the one in the
soup when it goes belly up, due to their VPN'd "Infect-omatic"

My 0.02.

Re: Anti-Virus Question by skc

skc
Tue Sep 02 04:14:26 CDT 2003

Merve,

How do I create a batch file to start the AV services at
say around 12am and stop them around 8am?

skc

>-----Original Message-----
>In article <069f01c37070$e6ce3e70$a301280a@phx.gbl>,
skc@skc.com says...
>> We are running Symantec's Corporate Edition on the
SBS2000
>> and all clients, where updates and schedules are
tweaked
>> on the server and relayed to all clients.
>>
>> At the moment, two machines on our LAN do not have AV
on
>> them, as the users insist that AV slows down their
>> machine...in fact, he showed me a program he ran on a
>> large database file (GB's worth) and it took double the
>> amount of time than it did with no AV running.
Although
>> we disabled the Heuristics in Symantec's BloodHound
>> technology etc..., it still made a difference.
>>
>> I am concerned about these two machines running no AV.
I
>> want to install a "light" AV so at least I know that
the
>> machines are covered but will not interupt or slow down
>> programs being run (data processing!).
>>
>> Can someone help me and tell me what is a good "light"
AV
>> product to buy that is easy on processing power. The
>> machines in question are Windows2000, SP4 patched with
all
>> updates and Blaster.
>>
>> The two guys VPN in a lot from home and abroad, so they
>> could easily infect their machines!
>>
>> skc
>>
>This is not so much a techie "how-to" issue as it is a
training and
>management issue. You don't need "AV light", you
need "user smart".
>
>Nonetheless, perhaps you could use a batch file that
stops the AV
>service, runs the user's app, then restarts the AV
service on app exit.
>These two users are asking for trouble, and you will be
the one in the
>soup when it goes belly up, due to their VPN'd "Infect-
omatic"
>
>My 0.02.
>.
>

Re: Anti-Virus Question by Kevin

Kevin
Tue Sep 02 04:46:24 CDT 2003

Create one batch file (avstop.bat) to stop them, and one file (avstart.bat)
to start them

Schedule them via Control Panel > Scheduled Tasks, and make sure you assign
the two scheduled tasks to run as administrator.

For avstop.bat, use a series of NET STOP "service name" commands
For avstart.bat, use a series of NET START "service name" commands

I don't use Symantec, so I do not know what the names of the services are,
but go to Start > Programs > Admin Tools > Services to view the services,
and use what is in the 'Name' field for the name of the service.

I use Trend, so one statement might look like this for me:
NET STOP "OfficeScan NT RealTime Scan"
-or-
NET START "OfficeScan NT RealTime Scan"

Hope this helps,
kw

"skc" <skc@skc.com> wrote in message
news:07ba01c37132$9b624cc0$a401280a@phx.gbl...
> Merve,
>
> How do I create a batch file to start the AV services at
> say around 12am and stop them around 8am?
>
> skc
>
> >-----Original Message-----
> >In article <069f01c37070$e6ce3e70$a301280a@phx.gbl>,
> skc@skc.com says...
> >> We are running Symantec's Corporate Edition on the
> SBS2000
> >> and all clients, where updates and schedules are
> tweaked
> >> on the server and relayed to all clients.
> >>
> >> At the moment, two machines on our LAN do not have AV
> on
> >> them, as the users insist that AV slows down their
> >> machine...in fact, he showed me a program he ran on a
> >> large database file (GB's worth) and it took double the
> >> amount of time than it did with no AV running.
> Although
> >> we disabled the Heuristics in Symantec's BloodHound
> >> technology etc..., it still made a difference.
> >>
> >> I am concerned about these two machines running no AV.
> I
> >> want to install a "light" AV so at least I know that
> the
> >> machines are covered but will not interupt or slow down
> >> programs being run (data processing!).
> >>
> >> Can someone help me and tell me what is a good "light"
> AV
> >> product to buy that is easy on processing power. The
> >> machines in question are Windows2000, SP4 patched with
> all
> >> updates and Blaster.
> >>
> >> The two guys VPN in a lot from home and abroad, so they
> >> could easily infect their machines!
> >>
> >> skc
> >>
> >This is not so much a techie "how-to" issue as it is a
> training and
> >management issue. You don't need "AV light", you
> need "user smart".
> >
> >Nonetheless, perhaps you could use a batch file that
> stops the AV
> >service, runs the user's app, then restarts the AV
> service on app exit.
> >These two users are asking for trouble, and you will be
> the one in the
> >soup when it goes belly up, due to their VPN'd "Infect-
> omatic"
> >
> >My 0.02.
> >.
> >



Re: Anti-Virus Question by skc

skc
Tue Sep 02 08:08:01 CDT 2003

how do i add a batch file to Scheduled Tasks?

thanks.

>-----Original Message-----
>Create one batch file (avstop.bat) to stop them, and one
file (avstart.bat)
>to start them
>
>Schedule them via Control Panel > Scheduled Tasks, and
make sure you assign
>the two scheduled tasks to run as administrator.
>
>For avstop.bat, use a series of NET STOP "service name"
commands
>For avstart.bat, use a series of NET START "service name"
commands
>
>I don't use Symantec, so I do not know what the names of
the services are,
>but go to Start > Programs > Admin Tools > Services to
view the services,
>and use what is in the 'Name' field for the name of the
service.
>
>I use Trend, so one statement might look like this for me:
>NET STOP "OfficeScan NT RealTime Scan"
>-or-
>NET START "OfficeScan NT RealTime Scan"
>
>Hope this helps,
>kw
>
>"skc" <skc@skc.com> wrote in message
>news:07ba01c37132$9b624cc0$a401280a@phx.gbl...
>> Merve,
>>
>> How do I create a batch file to start the AV services at
>> say around 12am and stop them around 8am?
>>
>> skc
>>
>> >-----Original Message-----
>> >In article <069f01c37070$e6ce3e70$a301280a@phx.gbl>,
>> skc@skc.com says...
>> >> We are running Symantec's Corporate Edition on the
>> SBS2000
>> >> and all clients, where updates and schedules are
>> tweaked
>> >> on the server and relayed to all clients.
>> >>
>> >> At the moment, two machines on our LAN do not have AV
>> on
>> >> them, as the users insist that AV slows down their
>> >> machine...in fact, he showed me a program he ran on a
>> >> large database file (GB's worth) and it took double
the
>> >> amount of time than it did with no AV running.
>> Although
>> >> we disabled the Heuristics in Symantec's BloodHound
>> >> technology etc..., it still made a difference.
>> >>
>> >> I am concerned about these two machines running no
AV.
>> I
>> >> want to install a "light" AV so at least I know that
>> the
>> >> machines are covered but will not interupt or slow
down
>> >> programs being run (data processing!).
>> >>
>> >> Can someone help me and tell me what is a
good "light"
>> AV
>> >> product to buy that is easy on processing power. The
>> >> machines in question are Windows2000, SP4 patched
with
>> all
>> >> updates and Blaster.
>> >>
>> >> The two guys VPN in a lot from home and abroad, so
they
>> >> could easily infect their machines!
>> >>
>> >> skc
>> >>
>> >This is not so much a techie "how-to" issue as it is a
>> training and
>> >management issue. You don't need "AV light", you
>> need "user smart".
>> >
>> >Nonetheless, perhaps you could use a batch file that
>> stops the AV
>> >service, runs the user's app, then restarts the AV
>> service on app exit.
>> >These two users are asking for trouble, and you will be
>> the one in the
>> >soup when it goes belly up, due to their VPN'd "Infect-
>> omatic"
>> >
>> >My 0.02.
>> >.
>> >
>
>
>.
>

Re: Anti-Virus Question by Andrew

Andrew
Tue Sep 02 13:11:10 CDT 2003

In 8.x versions of SAV CE, you can create separate groups that have
different settings. Maybe a separate group set to "scan on create/modify"
(as opposed to "every access") and "program files only" (instead of "all
files") is the way to go.

Regardless, you simply cannot allow this situation to persist,
performance or no. Every workstation has to have antivirus software, no
exceptions, no excuses, period. Users simply must accept that antivirus
software is a fact of life today. You can't have the tail wagging the dog.

"skc" <skc@skc.com> wrote in message
news:069f01c37070$e6ce3e70$a301280a@phx.gbl...
> We are running Symantec's Corporate Edition on the SBS2000
> and all clients, where updates and schedules are tweaked
> on the server and relayed to all clients.
>
> At the moment, two machines on our LAN do not have AV on
> them, as the users insist that AV slows down their
> machine...in fact, he showed me a program he ran on a
> large database file (GB's worth) and it took double the
> amount of time than it did with no AV running. Although
> we disabled the Heuristics in Symantec's BloodHound
> technology etc..., it still made a difference.
>
> I am concerned about these two machines running no AV. I
> want to install a "light" AV so at least I know that the
> machines are covered but will not interupt or slow down
> programs being run (data processing!).
>
> Can someone help me and tell me what is a good "light" AV
> product to buy that is easy on processing power. The
> machines in question are Windows2000, SP4 patched with all
> updates and Blaster.
>
> The two guys VPN in a lot from home and abroad, so they
> could easily infect their machines!
>
> skc



Re: Anti-Virus Question by Kevin

Kevin
Tue Sep 02 17:03:42 CDT 2003

I'm sorry, but did you even try to run the Scheduled Tasks wizard? It steps
you right through it.

Click on Start > Control Panel > Scheduled Tasks > Add Scheduled Task
Use the Browser button to locate your batch file
Give it a name, select how often you want it to ruin,

"skc" <skc@skc.com> wrote in message
news:0a7d01c37153$3d328090$a301280a@phx.gbl...
> how do i add a batch file to Scheduled Tasks?
>
> thanks.
>
> >-----Original Message-----
> >Create one batch file (avstop.bat) to stop them, and one
> file (avstart.bat)
> >to start them
> >
> >Schedule them via Control Panel > Scheduled Tasks, and
> make sure you assign
> >the two scheduled tasks to run as administrator.
> >
> >For avstop.bat, use a series of NET STOP "service name"
> commands
> >For avstart.bat, use a series of NET START "service name"
> commands
> >
> >I don't use Symantec, so I do not know what the names of
> the services are,
> >but go to Start > Programs > Admin Tools > Services to
> view the services,
> >and use what is in the 'Name' field for the name of the
> service.
> >
> >I use Trend, so one statement might look like this for me:
> >NET STOP "OfficeScan NT RealTime Scan"
> >-or-
> >NET START "OfficeScan NT RealTime Scan"
> >
> >Hope this helps,
> >kw
> >
> >"skc" <skc@skc.com> wrote in message
> >news:07ba01c37132$9b624cc0$a401280a@phx.gbl...
> >> Merve,
> >>
> >> How do I create a batch file to start the AV services at
> >> say around 12am and stop them around 8am?
> >>
> >> skc
> >>
> >> >-----Original Message-----
> >> >In article <069f01c37070$e6ce3e70$a301280a@phx.gbl>,
> >> skc@skc.com says...
> >> >> We are running Symantec's Corporate Edition on the
> >> SBS2000
> >> >> and all clients, where updates and schedules are
> >> tweaked
> >> >> on the server and relayed to all clients.
> >> >>
> >> >> At the moment, two machines on our LAN do not have AV
> >> on
> >> >> them, as the users insist that AV slows down their
> >> >> machine...in fact, he showed me a program he ran on a
> >> >> large database file (GB's worth) and it took double
> the
> >> >> amount of time than it did with no AV running.
> >> Although
> >> >> we disabled the Heuristics in Symantec's BloodHound
> >> >> technology etc..., it still made a difference.
> >> >>
> >> >> I am concerned about these two machines running no
> AV.
> >> I
> >> >> want to install a "light" AV so at least I know that
> >> the
> >> >> machines are covered but will not interupt or slow
> down
> >> >> programs being run (data processing!).
> >> >>
> >> >> Can someone help me and tell me what is a
> good "light"
> >> AV
> >> >> product to buy that is easy on processing power. The
> >> >> machines in question are Windows2000, SP4 patched
> with
> >> all
> >> >> updates and Blaster.
> >> >>
> >> >> The two guys VPN in a lot from home and abroad, so
> they
> >> >> could easily infect their machines!
> >> >>
> >> >> skc
> >> >>
> >> >This is not so much a techie "how-to" issue as it is a
> >> training and
> >> >management issue. You don't need "AV light", you
> >> need "user smart".
> >> >
> >> >Nonetheless, perhaps you could use a batch file that
> >> stops the AV
> >> >service, runs the user's app, then restarts the AV
> >> service on app exit.
> >> >These two users are asking for trouble, and you will be
> >> the one in the
> >> >soup when it goes belly up, due to their VPN'd "Infect-
> >> omatic"
> >> >
> >> >My 0.02.
> >> >.
> >> >
> >
> >
> >.
> >



Re: Anti-Virus Question by Kevin

Kevin
Tue Sep 02 17:14:37 CDT 2003

whoops, I was too quick on the SEND button ....

Click on Start > Control Panel > Scheduled Tasks > Add Scheduled Task
Use the Browser button to locate your batch file
Give it a name, select how often you want it to run it
Then enter your administrator userid and password and you are set to go!

-kw