Modern threats—fileless malware, ransomware like LockBit or BlackCat—use tactics that didn't exist when Server 2008 was being coded. To stop these on an old OS, the antivirus software has to do the heavy lifting that the Operating System should be doing.
Q: Do I need to purchase additional antivirus software if I have Windows Server 2008? A: Yes, Windows Server 2008 does not include built-in antivirus protection. Purchasing additional antivirus software is necessary to protect your servers and data. windows server 2008 antivirus
Do not use a remote push deployment tool. Log into the server console or via RDP, and run the installer as Administrator. Many modern push tools fail on Server 2008 due to outdated PowerShell versions. Modern threats—fileless malware