RE: Real Time Antivirus on workstations

["Christopher Carpenter" <ccarpenter () dswa net>]

I haven't used Norton GoBack (and the website is short on details), but
I'm assuming it's similar to Microsoft's System Restore.  If you set a
real-time antivirus program to scan only on writes, then resource
utilization would probably approach that of GoBack.

> From another perspective, what happens if a virus decides to overwrite
the GoBack file archive?  Food for thought, I guess.

Chris

-----Original Message-----
From: aj rembert [mailto:ajrembert.samscreen () gmail com] 
Sent: Monday, November 21, 2005 6:07 AM
To: Depp, Dennis M.
Cc: Thierry Zoller; george.peek () gmx net;
security-basics () securityfocus com
Subject: Real Time Antivirus on workstations

Currently we have 10 workstations setup in our intranet, none if them
with the resources required to handle applications such as Norton
Antivirus's autoprotect and so on. I was debating on whether or not I
should disable autoprotect and simply using Norton GoBack since I
believe even if a virus is downloaded it would replace any altered
files back to their original state, or recommend upgrading some of the
hardware that is currently performing at sub standard levels. Any
ideas would be appreciated.
Regards,
Andre Rembert