Anderton
I see some people here are very nervous about connecting to the internet due to the nasty stuff floating around, and others who aren't concerned at all. I'm going to describe what I do, and those who really know their stuff can tell me whether I'm doing anything wrong, if there are other steps I should be taking, etc. Ideally, this thread will become "The Complete Guide to How to Keep Your Music Computer Virus-Free Yet Still Use the Net When Needed."
 
1. My computer usually isn't connected. I connect only when I need something, and go to sites I trust like Cakewalk - I don't surf around.
2. I have Microsoft Security Essentials installed, so I figure that will catch anything excessively weird.
3. If I get any kind of notification, e.g. an update to Adobe Flash is available, I never click on it. Instead I go to the Adobe site and download the update from there.
4. I don't download anything unless it's something I've sought out to download, and only from company sites I trust (e.g., driver update from the TASCAM site, Windows update, new trial version plug-in from Universal Audio, etc.).
5. I have an older Mac running Snow Leopard that I use for general-purpose surfing and downloading. It's Intel, though, so probably not as safe as PPC (although it seems most browsers are incompatible with it anyway).
 
 
 

Hi Craig,
 
I'm far from an expert on this, but I sincerely believe my methods have (touches wood and asks God to please allow me to keep my success ratio) been the reason I have every computer I have ever had still working other than 1 that was taken out by lightning. When lightning wants you, it gets you.
 
Anyway, one of the reasons my recording pc's have lasted so long is because they don't go on the net. If you have a well-oiled machine, you don't even need updates unless they are operating system or drivers for your hardware etc. Even there, I try my best to stay off the net and only connect to Windows update and do system things. I could care less about flash, internet exploder trying to update, all the kb 12345678 files etc. I keep it off the net, I don't have to worry.
 
That said, I have what I call a net box. This box has virus protection as well as Spyware stuff. Everything I download hits this box first so it gets checked. I use a KVM switch which allows me to use the same monitor, mouse, keyboard and speakers on 2 different boxes. I click scroll lock two times and it switches me over to the other computer. From there I download whatever I need and because the two pc's are networked, I can just grab the files after they have been scanned.
 
Be careful with Essentials. I've had quite a few people get nasty things even with that totally updated. Your best bet is something that really excels in that stuff that costs a few dollars.
 
Notifications: Disable all of them. I never allow something to tell me anything. I check it manually or when I see something may not be working right. I have a few flash sites I frequent...when the flash doesn't behave right, I know there is an update available. The same with Java....nothing on my machine auto does anything. This not only stops annoying pop ups, it stops system resources from running that really don't need to be there. The more things you have running on your system when you bring up task manager, the slower and more unstable your system *may* become. Only use what you need and what you use. Anything else should be disabled or at least manually controlled.
 
Drivers for hardware: Don't touch them unless you have a problem somewhere. I was taught years ago to never update something for the sake of an update when all is well on a system. That includes everything in my experience. That said, there may be times when an update CAN and WILL give you a performance increase. But you have to look into it and it will usually tell you how much of a difference (if any) it will make.
 
Bios: Some are quick to do bios updates when in reality, you shouldn't unless there is a legitimate reason to do so. I have a machine that doesn't have all the latest bios features or Windows updates to it. It runs fine and I really don't feel like beta testing for these companies or having my system go down or stuck in a loop because the updating system screws me. And it HAS happened a few times. Though Windows updates and bios updates have improved ten-fold over the years in my opinion, there's nothing worse than screwing around with your recording computer when in reality, you need to get work done.
 
Trusting sites: Though they have pretty tight security, I still try my best not to put my recording pc on the net other than for Windows in an OS update. All the other stuff you mentioned (UAD etc) can be done on another pc and scanned. The idea here is to leave a well oiled machine....well oiled with less of a chance of anything happening. All my pc's boot up as expected with no issues. If I run into a problem, it's usually because I either did something purposely during testing....or some update hosed me to where I have to reconfigure something. If I leave the freaking thing alone when it's working fine, it will ALWAYS work fine.
 
You'll get several answers on this....but like I said, I have a really high success ratio with this stuff. I can literally go back and use Cakewalk from Pro Audio 9 to nearly present (I don't have Sonar 3 or 4 installed anywhere) without a problem on all the recording pc's I still have working. I really believe part of that is due to how careful I have been while trying my best not to ever put them on the net. But that's just me. :)
 
-Danny

Well I'm the fool where angels fear to tread.  Laptop is always on the internet, even when recording or mixing.  I've had one virus/malware in 14 year and even then I was able to negate the problem and managed to get the machine to function...note managed to get the machine to function.  I can't even quite remember how I got that...possibly I accidently opened a dodgy email.  I lost my start menu stuff and a couple of other things but the machine still could be used as a DAW machine.  And this continued for about a year or until I had the monitor replaced...don't ask, a drunk girlfriend at the time no money ect.  I also have no virus protector just windows defender and all that.  The trick is not to go onto certain sites ie bit torrent and all that jazz and since I am not a pirate I don't. 
 
Perhaps that is the question that needs to be asked when people say "they have had trouble in the past in regards to virus's and computers"..."how much dodgy software do you have on your machine and many times do you go to dodgy websites??"
 
Ben

Sans hard drive failures (which I just experienced last week, fortunately my projects drives which was backed up), I too have not had a DAW die on me.
 
My DAW is connected to the net 24/7. Yes, I leave my DAW running 24/7 with no sleep/hibernate etc.

I'm exactly like Danny.  I will only update what is proven to need updating. All my IT fiends tell me pretty much the same thing too, why run all those security updates for a computer that is mostly off line?
If one builds a good computer, and sets it up right the first time, it is pretty rare that that the computer will benefit from any offerings from Microsnot. Especially for DAW performance. Keep an eye out for new drivers and firmware for your audio equipment, that's all. And even those can be imported via USB. 
 
I myself don't see why in this day and age why any geeky type person would not own more than one computer. So why put a DAW, which to me is a piece of studio gear, on the internet? Why?  Keep a tablet handy if your needing a on line device.
 
I work in a Hospital. NONE of the important computers are on line and for good reasons.
 
 

sock monkey
...I will only update what is proven to need updating...If one builds a good computer, and sets it up right the first time, it is pretty rare that that the computer will benefit from any offerings from Microsnot. Especially for DAW performance...

I completely agree. For me it's not just about the vulnerability aspect, it's also about keeping it lean, simple and efficient. The less software installed, the better. Why clutter up the registry? If I'm not using the computer for anything else other than music production, then I don't need things installed like FireFox, Google Chrome, browser plugins, Adobe Reader etc. or things that run in the background like virus checkers. I hate software that keeps automatically updating even when you have selected the option not to do this. A separate "family" computer is not far away when I need it.

100% for the no clutter aspect. It's all about a nice low dpclat reading.
I'm just about to build from scratch and I'm tempted to see what really would happen if I don't do any updates. The internet used to be an option, now somehow people think it's an necessity.
If you lived where I live you'd soon see you can live without both the internet and TV connections.

The computer is connected always.
I update everything whenever I wanna.
I use MSE.
I DO NOT surf to stupid sites and therefore do not have to be concerned. I use a laptop for porn.
 
I used to have a primary business computer. It died. Had to quickly move to this computer for Email,...
(Currently got 7 computers in the house. All can remote to the main computers. One is a dedicated video computer connected to the video cables in the house for the 7 "televisions.")
 
I have "optimized" this computer to have most stuff not auto-run/phone-home (lots of these items are triggered by settings in the task scheduler). Most of the stuff that is good to do for audio computers is good for any computer used by those who pay attention.
 
I update windows and java, and adobe,... manually, about weekly. Creating a manual restore point. Especially before hardware updates.
 
Been using computers since '85 when I bought an Amiga 1000. Been supporting windows computers since 1992.
I have had computer virus infections 3 times that required lots of attention. Mostly as the result of researching client issues.
 
Been thinking about creating a new audio only computer. But using one computer for everything is way useful.
Having an issue with sonar? Open a browser and look for the answer.
Want to make notes using Excel (which I use for most all notes, lyrics, data, time tracking,...).
Need to copy/paste serial/install numbers?  Copy from Excel and paste.
Need to respond to a client's email during a break with a Sonar project?   Do it now.
 
Using another computer complicates all this.
 
I am shopping for a 3 monitor video card. So I can have the console view open way big all the time.
 
--------------------
 
Yet, I think a dedicated computer should have the network cable disconnected to avoid electric noise/ground-loops, and the network card disabled. (I do this when recording.)
 
Helped install a theater audio system way too long ago (1982).  Jim had military experience that had put into his soul to test for everything. The oscilloscope displayed a 400,000 hz signal on the power lines with respect to ground, that could interfere with all other signals using the electric grid.  We drilled a hole through too many inches of concrete and drove a stake through its heart to ground our system.
 
At my wife's place of business, it has been recently clarified that the ignorance that resulted in running the AC and the PHONE wires DOWN the same pole in parallel, and underground, to the building and then to same wiring closet is now affecting the new phone system because of the 60 hz constant hum. 60hz filters are not inexpensive. Prolly cheaper to run new wire from the pole.
 
And:::: This was crazy. Was having some AC weirdness about 10 years ago. Cannot remember now what all. But my memory is (not necessarily from this timeline) it included noise on the TVs and some computer screens.
 
Called the electric company. The dude immediately went to the main connection box of the wires in the basement. Our house was built in '26. I know lots of the bits have been replaced. But the big levers, and big red master fuses, appear to be from at least before me. He pulled out a way big screw driver and TIGHTENED the HUGE screws on both sides of the box. And WALLA, everyone rejoiced.  After he left I opened the fuse panels and did the same. And then proceeded to do the same with all connections of AC wires in the house. Opening all the AC outlets, and light switches, and bulb sockets, and connection boxes. I have learned that just "reseating" AC plugs will result in smiles. Gotta unplug/plug all AC connections in the audio space at least yearly. Fur shure when blowing out the dust from the inside of the computer every spring.
 
Point is: the first step is clean power.  And some connections, such as the network cable, connect to devices that are not connected to the filter, and may cause noise/ground-loops below general audibility but still can modulate what can be heard.
 
How do I know this is possible: One practical happy application of this principle is the use of BIAS frequencies during tape recording.
 
Corrosion happens everywhere. 'Tis why we all should use CAIG pro-gold to treat all non-soldered AC and audio connections and contacts inside and outside a dedicated computer.
 
Every AC using device should be connected to a power filter. Whether this should happen before or after the UPS is not to my knowing. I figger, just like every virus scanner finds different critters, each electric filter performs differently. So use more than one, incorrect order.  I have one before the UPS, and then a Furman filter in the rack. Overkill?   We get lots of lightning.
 
Well, don't get me started.
 
------------------------------------
Bugs, comments & suggestions:
We expect this application to not always perform as described. This is by design. Our software
code is free of mistakes and errors. Yet, it does contain undefined behaviors, and undocumented
results. Enjoy the process of discovery. Please inform us of any unique functions you encounter
that we may include them in the list of discovered features.
 
 

I apologize for being so "apparently" off-topic.

1. I use to be disconnected unless I needed an update and even then, I would just download from another computer and then transfer it. I no longer do this as I'm finding more and more I need to be online for this, that or the other thing while I'm working.
 
2. MSE is one of the most useless of the virus protection programs available. It will literally catch next to nothing. There are plenty of tests done on http://av-comparatives.org which will show you the results of different AV programs. I personally use Avira. It's not as lightweight as I would like (and it does have a nag on the free version) but it's one of the better available choices for monitoring as it will catch more and give less false positives. I also do a Malwarebytes scan every now and then for added protection.
 
That being said, programmers of malicious software are getting smarter and no longer waiting for the user to make a mistake and have become much smarter about the way they install on your computer. For instance, let's say that one of them targeted our users here. They would first hack into Cakewalks website and then create a script that runs when people visit cakewalk.com. Sometimes it can be weeks or longer before a company notices the breach but the damage can already be done. The easiest method of protection is to install addons such as noscript and adblock plus. Noscript will block any script on any website and you can manually say yes or no to them while it remembers your settings.

Did someone say lightning? Probably a lot worse than the internet. The only time I had an issue with lightning was one summer 6 years ago during a most unusual lightning storm that would have toasted my computer (which was on at the time) had it not been for a cheepy battery backup/surge protector. When the lightning struck my house the BBU unit squealed like a pig and died in the line of duty. Computer came out of it without a scratch. I only paid $30 for it. $30 well spent. Funny I've never owned another BBU or seen that kind of lightning since then.