So we just got a fancy new spy/malware/virus killer loaded onto our machines here at the office, and I ran my little scan and lo and behold! it found a piece of adware on the old CPU here. So I go to the control panel and I get the basically zero information it tells me about the dumb thing, and I go to kill it... and I can't. I don't have the option of killing it, it's just quarantined.
What option do I have? I'm glad you asked. My one option that I can do is to ALLOW THE ADWARE TO RUN ON MY MACHINE. It's adware. It's going to spam my computer with crap. It's worthless drivel, and I don't want/need it. But can I get rid of it? No. All I can do is authorize the stupid thing to do its thang. If I wanted to kill it I'd have to be an Admin.
So... idiot end-users can't kill the malware on their computer because they're not authorized, but those same idiot end-users can set the malware free on their PC to wreak whatever havoc it can.
Yes doctor, I am sick. Sick of those who are spineless. Sick of those who feel self-entitled. Sick of those who are hypocrites. Yes doctor, an army is forming. Yes doctor, there will be a war. Yes doctor, there will be blood.....
Tavish wrote:Actually there is a good reason for a setup like this, although it is rather limited.
So that you have something to do in between browsing the Cafe?
So the "idiot end-users" knapp was talking about don't kill a process that the anti-virus might be reporting a false positive on, forcing me to reconfigure their system and spend valuable time away from the Cafe.
Tavish wrote:So the "idiot end-users" knapp was talking about don't kill a process that the anti-virus might be reporting a false positive on, forcing me to reconfigure their system and spend valuable time away from the Cafe.
Is this a frequent enough occurrence to justify giving that same idiot end-user the ability to activate malware on their computer, but not to delete that same malware?
Tavish wrote:So the "idiot end-users" knapp was talking about don't kill a process that the anti-virus might be reporting a false positive on, forcing me to reconfigure their system and spend valuable time away from the Cafe.
Is this a frequent enough occurrence to justify giving that same idiot end-user the ability to activate malware on their computer, but not to delete that same malware?
It would all depend on how good the antivirus program is. If it is constantly throwing false positives or if the tech department is stretched very thin so that it may take a good deal of time before they could address an issue that might come up then yes it is justifiable. Its not an optimal solution and fairly limited in when it will actually help, but not unthinkable.
Deletion of incorrect files can cause a great deal more damage to a system than most malware will, its why quarantine exists in the first place.