Well it shouldn’t come as a big surprise, but Microsoft is expected to bundle their anti-spyware product (which will be renamed windows defender) with Vista when the next version of the OS ships. It’s probably not a big surprise given the headaches that people have with spyware and the potential for a subscription update service. For most people this will probably be the only anti-spyware application they have.
Tag: antivirus
-
The end of antivirus definition updates?
Well, frankly, there has been talk of the end of definition based antivirus scanning for years. You see the achilles heel of any AV scanner is that it has to have signatures of what known viruses look like, so there will always be a reflex window, where there’s a new unknown virus that people are getting infected with before there’s a reaction from the antivirus vendors. The supposed cure for this dillema was hueristic scanning which was supposed to detect things that “looked” like they might be viruses. A noble goal, but along the path it’s proven innefective mostly, either too aggressive and tagging EVERYTHING as potentially viral, or really unnoticable.
-
Like flypaper for malware..
The diary over at the SANS Institute mentioned an interesting program today. Nepenthes is a program that can simulate a vulnerability so that it can collect samples of malware trying to exploit that vulnerability.
-
US-CERT talks spyware
US-CERT is addressing the issue of spyware. According to Spyware Confidential, they’ve released a document (pdf) on the matter, including techniques to guard against spyware. Education and awareness are two elements that are highly emphasized.
-
Another Massive ID theft ring
It looks like Sunbelt has found ANOTHER massive Identity theft ring. They suspect it’s a trojan from the Dumaru family that is contentedly logging the infromation and promise more details.
-
Esbot and Zotob updates….
Wednesday afternoon and Esbot is up to revision .B, Zotob is up to G according to Sarc (Symantec antivirus research). They have appropriate removal tools and details on affected systems there. Meanwhile the Sans institute (incidents.org) has a rundown of the latest in todays handlers diary.
-
Microsoft’s quick response to network worms….
This is an ironic title because frankly, Microsoft has seemed to be slow in solutions for the recent zotob worm. Of course, they announced the vulnerability and accompanying update to solve the issue to begin with, but after the virus started propagating what do we see from Microsoft? They have a page titled What you should know about Zotob
-
Computer security software nets $2.6 Billion over last two years.
SecurityFix is talking about the computer security industry. Further, computer users spend $9 billion a year on computers repairs from spyware and antivirus. This reminds me of a recent story of a man that threw out a perfectly good machine because it was infested with spyware. For starters, I do computer repair. I charge $40/ hour and even at that rate I’ve had people balk at 3-4 hours of heavy cleaning versus the Dell ads. How many people take this route instead of repairs? It’s hard to say overall. In his blog, Brian Krebs lays part of the blame at Microsoft’s door and I think rightly so.
-
Zotob details
Here are some details on the zotob worm (s) culled from several sources….
It copies itself to the Windows system folder as BOTZOR.EXE, it modifies the hosts file to frustrate attempts to access antivirus sites. The .b variant copies itself as csm.exe in the Windows System folder. Both variants create a Mutex so that only one copy can run at a time.
(more…) -
Web smarts is the main defence against spyware
Over at the Security Fix, Brian Krebs is talking about spyware and the fact that keeping up-to-date on patches, and running current antivirus with current definitions is not enough to protect your machine from spyware. He sums it up by saying common sense is the best defence.
(more…)