How are other AV companies handling definition updates for older OS like vista these days?

[ComputerRepairTech]

I only started selling AV licenses about 2 years ago but as far as I know when an OS became out dated they would simply stop updating the engine but the definitions would still keep coming. Am I wrong here? Isn't that the standard?

Emsisoft however stopped updating the engine last year but then stopped all definition updates for that older engine about a week ago. I don't see any notification on the actual software that explains that it simply says something like last updated 5 days ago. The customer says they wherent aware as to why the updates stopped. When I asked Emsisoft about it they said that part of the reason they dropped support was because the OS is not safe from things like kernal level exploits.

Of course the customer should update from vista but thats not my call. Their explanation makes no sense because as we all know its very possible for a downloader using an exploit to be caught by virus definitions. Stopping definition updates doesn't help the customer it simply makes them even more vulnerable to unpatched exploits.

 

[Markverhyden]

Things have changed a lot over the years. I can remember back in the late 90's you bought an AV and it just kept on updating/upgrading. Now, given the maturity of the technology and growth of exploits, I can see why companies will terminate support for OS's as well as support packages like anti-malware. There comes a point in time when supporting things over an ever growing hardware ecosystem becomes uneconomical.

Recently went to a hotel to troubleshoot a suspected malware outbreak. They were having all kinds of problems but most ended up being related to a new ISP circuit and incorrect cabling/router/switch configs. Part of it was scanning an ancient IBM Server 2003. Finally found a scanner from Vyper, the only one that would run on '03.

Personally I don't like being the bearer of bad news but I've come to the point where I'm just simply telling the customer that if they do not want to upgrade nothing will get better.

 

[GTP]

Emsisoft however stopped updating the engine last year but then stopped all definition updates for that older engine about a week ago.

There comes a point in time when supporting things over an ever growing hardware ecosystem becomes uneconomical.

I had to sell some clients updated equipment because of that very reason. I can see why they wouldn't want to keep supporting outdated OS's .
It becomes harder to secure older OS's without going to extraordinary lengths.

As an aside, I have a (Vista) client who still uses Securalive Antivirus. They were an Australian company who burst on the scene then just as promptly disappeared. The weird thing is you cant find Securalive Antivirus now but it is still being updated from "somewhere."

 

[Porthos]

Once MS pulls the "flush" handle on an OS, The other company's are not far behind.

 

[HFultzjr]

Once MS pulls the "flush" handle on an OS, The other company's are not far behind.

^^^^^^^^^This^^^^^^^^^
When MS pulls the plug, it's on borrowed time..................LOL.

 

[Markverhyden]

The weird thing is you cant find Securalive Antivirus now but it is still being updated from "somewhere."

Maybe Kaspersky bought them out..... LOL!!! Seriously though. Have you looked at the def files themselves to see if they have changed? Only thing I can think of is they actually piggy backed off of another solution. Like ClamAV.

 

[Your PCMD]

Believe it or not, AVG still supports Vista and XP.

Windows 10, 8, 7, Vista, XP SP3

 

[Markverhyden]

Believe it or not, AVG still supports Vista and XP.

Windows 10, 8, 7, Vista, XP SP3

But not Server.

 

[Your PCMD]

But not Server.

No not server. But you have to admit, if your running like NT 4, 2000 or 2003, you've got more problems than AV.

 

[glennd]

Believe it or not, AVG still supports Vista and XP.

Windows 10, 8, 7, Vista, XP SP3

I visited a customer today with an 11 year old HP Compaq slim desktop running XP and AVG free.

 

[GTP]

Maybe Kaspersky bought them out..... LOL!!! Seriously though. Have you looked at the def files themselves to see if they have changed? Only thing I can think of is they actually piggy backed off of another solution. Like ClamAV.

Definition files are definately being updated. There are references to ikarus which is a German AV engine used in several Av's. I'm assuming that Securalive was a rebranded [Avira?]
It must be being supported by one of those companies.

 

[JoeTech]

I have had some success in getting people to buy a new computer when I tell them "Hey if your willing to take risks, you might as well go all the way and not even bother using an AV. it's really not going to help much when the O/S isn't even supported anymore. "

To get one person to understand I told them that putting AV on an XP pc these days is like putting a burglar alarm on your cheap plastic Walmart tent. It's might create a loud noise but it's not going to stop anything.

 

[TechPJC]

Icarus which is a German AV engine

According to https://www.av-comparatives.org/av-vendors/,
Ikarus is an Austrian AV vendor which does Not use a 3rd Party Engine but its own one.

 

[GTP]

Ikarus is an Austrian AV

Thanks for that Sherlock...

does Not use a 3rd Party Engine but its own one.

I didn't say it did. But obviously others use their ikarus engine - hence the references to ikarus in the definition files.

 

[TechPJC]

Thanks for that Sherlock...

Anytime, Watson.

 

[ComputerRepairTech]

I have had some success in getting people to buy a new computer when I tell them "Hey if your willing to take risks, you might as well go all the way and not even bother using an AV. it's really not going to help much when the O/S isn't even supported anymore. "

To get one person to understand I told them that putting AV on an XP pc these days is like putting a burglar alarm on your cheap plastic Walmart tent. It's might create a loud noise but it's not going to stop anything.

Don't get me wrong here, I am certainly not suggesting people stick to an outdated OS but this isn't necessarily correct because most AV companies include exploits in their definitions. Assuming the definitions keep being updated its more like a soccer goalkeeper that has issues finding the ball once it makes it way into the net. Its still capable of blocking things and it may even catch some balls that get past it after some definition updates but eventually theres going to be a ball in that net it can't see.

 

[GTP]

I've set all my XP/Vista clients up with a standard account and passworded Admin.
They know not to enter the password unless they know for sure what it's for.
Not 100% but close enough for them.

 

[DavidH]

Since taking over my business I have come across no less than 5 XP/ Vista clients. One of whom has been running Vista with no AV for over 10 years along with a couple of viruses and he hasn’t noticed. This guy is upgrading because his machine is dying, but the others won’t hear of it. Partially because the customer demographics dictate buying stuff like food before computers and partially because they like XP/Vista and don’t want to change. I thought I had left a Vista behind in 2009, but clearly not.

As far as the AV OS support goes, I have worked for a number of software vendors over time in different areas and supporting old platforms gets exponentially more expensive the older the platform. Not surprised that most vendors don’t, but will remember the tip about AVGfor my next encounter.

 

[Sky-Knight]

I don't run AV on servers, users don't have admin rights there, and if you get an infection you've got huge issues due to your configuration.

AV belongs on desktops, servers are protected with proper configuration, security updates, and isolation. Vista is dead, replace it, if the customer won't have it, find a new customer, that's just trouble.

 

[mlcomputers]

I visited a customer today with an 11 year old HP Compaq slim desktop running XP and AVG free.

I can better that just upgraded an 84 year old customer this week who was still using a Toshiba Tecra 8200 from 2000 running xp, no AV but had never been connected to the internet pulled 40 gig of data from his Fujitsu hard drive this was dated 2003. Computer was in really good condition and the customer said he had been using it daily since he purchased it!!