Educate Me About Music Computers and the Internet

I do basically the same thing as you with my DAW.
 
Except for the Mac part. 
 
I also generally load updates and demo SW on my laptop that I use for surfing and whatnot first before I load anything on my DAW.

I do basically the same as Craig. I don't have anything configured to download or install automatically, everything is set to notify. I do occasionally turn off the network on the DAW when tracking, mixing or mastering to make sure I don't get a notification or something at an inopportune time.

Music PC is on internet with virii program and web blocker.
 
all my programs that update are set to ask or tell me about an update never auto update.  Generally I do my own updates manually once a month check and update.
 
I create a restore point for windows before I install ANYTHING so I always can revert back if something goes wonky.
 
all major files are archived or copied to an external USB drive and once a month I pull out a clone drive that is not hooked up all the time mirroring my backup drive.
 
I also don't drive in bad parts of town after dark, walk down alleys with no lights. 
 
being aware in real life as well as on the internet your pretty much safe, even though things can happen that are out of your control

Scan downloads with Malwarebytes unless you totally trust the site. I use MSE but I find it misses a lot of adware.

Well I'm the fool where angels fear to tread.  Laptop is always on the internet, even when recording or mixing.  I've had one virus/malware in 14 year and even then I was able to negate the problem and managed to get the machine to function...note managed to get the machine to function.  I can't even quite remember how I got that...possibly I accidently opened a dodgy email.  I lost my start menu stuff and a couple of other things but the machine still could be used as a DAW machine.  And this continued for about a year or until I had the monitor replaced...don't ask, a drunk girlfriend at the time no money ect.  I also have no virus protector just windows defender and all that.  The trick is not to go onto certain sites ie bit torrent and all that jazz and since I am not a pirate I don't. 
 
Perhaps that is the question that needs to be asked when people say "they have had trouble in the past in regards to virus's and computers"..."how much dodgy software do you have on your machine and many times do you go to dodgy websites??"
 
Ben

I'm exactly like Danny.  I will only update what is proven to need updating. All my IT fiends tell me pretty much the same thing too, why run all those security updates for a computer that is mostly off line?
If one builds a good computer, and sets it up right the first time, it is pretty rare that that the computer will benefit from any offerings from Microsnot. Especially for DAW performance. Keep an eye out for new drivers and firmware for your audio equipment, that's all. And even those can be imported via USB. 
 
I myself don't see why in this day and age why any geeky type person would not own more than one computer. So why put a DAW, which to me is a piece of studio gear, on the internet? Why?  Keep a tablet handy if your needing a on line device.
 
I work in a Hospital. NONE of the important computers are on line and for good reasons.
 
 

100% for the no clutter aspect. It's all about a nice low dpclat reading.
I'm just about to build from scratch and I'm tempted to see what really would happen if I don't do any updates. The internet used to be an option, now somehow people think it's an necessity.
If you lived where I live you'd soon see you can live without both the internet and TV connections.

I apologize for being so "apparently" off-topic.

Did someone say lightning? Probably a lot worse than the internet. The only time I had an issue with lightning was one summer 6 years ago during a most unusual lightning storm that would have toasted my computer (which was on at the time) had it not been for a cheepy battery backup/surge protector. When the lightning struck my house the BBU unit squealed like a pig and died in the line of duty. Computer came out of it without a scratch. I only paid $30 for it. $30 well spent. Funny I've never owned another BBU or seen that kind of lightning since then.

Both my studio computers are setup for my home network, although, both have the wireless network turned off and the anti-virus and updates are disabled. I only turn them on when HAVING TO get online. As soon as I'm done I turn them all off again.
I have one laptop in the den that I use for internet. It stays online 24/7.

My music computer is off line.  The Ethernet cable is disconnected and the Ethernet card is disabled in the device manager.  I only update when absolutely necessary, which is almost never.  I transfer data, updates, etc via USB thumb drives and all data is backed up on a couple of USB HDs.  All USB thumb drives are scanned for viruses, spyware and malware prior to moving from my Internet computer to my music computer.  All of my computers run of Uninterrupted Power Supplies.

The only time this computer gets connected is when I must activate software that I can not activate via another computer.

Overkill?  Maybe but I have been doing this for over 10 years and I've never had a problem: I hope I didn't just jinx myself!  I have had a couple of issues with my Internet computer as well as my wife's computer and neither of us goes to questionable sites.  In fact my wife got a virus from one of her recipe sites!  This is why my music computer is virtually never on line.

Well, Craig - if you are happy with your approach to it all, that's fine.  It is, ultimately, a matter of personal choice, once you get past a point where attacks are stopped - whether that is from simply not connecting except when absolutely (like what you do), etc.
 
Your approach is inherently safer than those who employ more of a wild west mentality, if for no other reason than your limited web site accesses, versus a surf or die mind set.
 
There is no doubt that there is some degree less risk in having limited access to the web, in so far as reducing the opportunity 'window' for sneaky bad stuff to try to attack your computer's defenses.
 
Even with Microsoft Essentials running, there is a small chance that something could get past it, by the way.  If a computer connects to a web, then at some periodic intervals, I usually recommend doing a boot-time full system scan to make sure all is well.  In addition, I have installed and recommend installing additional antivirus software protection - I suggest Avast's free version.  I have built well over 60 computers for folks, over the past 2 years, and none of them have ever gotten any viruses.  (they still need to be careful with malware, mostly from crappy bundled installers, like when you download the free HOOPLA program from Downloads.com (I made the name up), and the CNET bundled installer tries to sneak pre-checked boxes and 'click next' screens that are actually YOU authorizing them to install things like Spigot software and other ad-related stuff.  Because YOU have authorized its installation - by not seeing the pre-checked boxes, or have not read the ACTUAL text of the install screen you are on.  If you have given your permission to install it, it is technically NOT malware.  
 
The fix to ALL of the above is to make damn sure you are reading EVERY screen prior to installing software.  I ALWAYS recommend skipping ANY 'Express Install' option, and ALWAYS instead go the longer route where I have to read things but then have more control over what gets installed.
 
New computers come with giagantic swaths of 'bloatware', and the first thing I do, after installing Avast antivirus software, is to go in and exorcise the demons - find and remove all the extra junk that the computer manufacturer has plopped on there for me.
 
As far as MY own computer goes, I use the web all the time with it, and have had zero problems from doing so.  I do NOT allow ANY software to automatically update itself, I retain that power and that responsibility.  I generally am looking at web material that is science, tech, music, or zombies are at your door news links.  I have a firewall, I use Microsoft Essentials, don't open  ANYTHING downloaded without a thorough scan of it - sometimes performing additional research on the file and on the company that theoretically put the file out on the web.  Avast has a web rating mechanism in place that does its thing, and unknown programs usually get to try running in the Avast 'Sandbox' prior to being allowed general access to anything on my computer.
 
I was typing out a long blurb about my backups and all of that, but deleted it, since that is not what this thread was asking about.  Suffice it to say that even IF something got into my computer, I have mechanisms that I could implement to do a full system restore to as far as 6 months back.  If I ever have to employ such a recovery mechanism, then I would IMMEDIATELY expand my backup strategy to allow for going back to the next level, which for me would be a 'year'.  If that was later not sufficient, then 2 years, or 5 years, etc.  
 
Because I have some sense about where I go for web pages, I think I have a lower risk than some, and I am further somewhat protected by the firewall, and by Microsoft Essentials, and by various aspects of Avast Antivirus software, plus I have MalwareBytes, if needed, I don't ever seem to get viruses or even quasi-malware.
 
Oh, here's a HANDY method of cleaning and testing a hard drive for infections.  Physically remove the primary drive and plug it into a different machine - where it is simply a data drive, and then you can scrub away at it with antivirus and anti-malware software quite easily, made even better because when such a drive never gets to load anything into memory (since it is not used in the boot process), the drive will have no infectious second-like of defenses running when you are seeking to identify and remove them.  I do this ALL the time for people.  It's a great way to clean an infected drive.  Of course, if it gets too ridiculous, you may have to backup what you can and reload the drive (wipe out Windows and whatever else is there that you couldn't back up).
 
Sorry this next point didn't make it into my post until the end here, but another thing that greatly protects me is the fear of instant and painful rippage of body parts of anyone ANYONE who looks at my computer and fancies themselves a spin on 'celery wrestling' or some other pornyliscious kind of site, while I am looking for a loose connection in the other room.  NOBODY is allowed on to my primary music computer to get to the web for any reason, at an time, or bad things will happen to them. :)
 
I think that with some common sense, some basic protective software. a firewall, and good and diligently followed backup/recovery procedures, the risk of GETTING infected is quite low, and with the backup/recovery procedures properly followed, an infection can be removed in short order.
 
Bob Bone

Thanks everyone, this is great info. The only area where I don't have much choice is I do need to stay updated to current versions for the purpose of writing articles, as well as testing because I need to be using the same type of setup someone getting into SONAR would be using if they went out and bought a system today.
 
I've seen a few recommendations about virus protection software, but is there any consensus as to which gives the minimum performance hit to your computer?

I have two DAWs connected but no AV.  They never get infected.  I scan them online.   I don't like AV software since some are resource hogs except for MSE.  Malwarebytes seems the most effective for scans.