The Active Network
ActiveWin Anonymous | Create a User | Reviews | News | Forums | Advertise | VBA in Excel | Users Online: 0  
 

neowin.net

Amazon.com

  *  

  Virus Writers Target Microsoft Anti-Spyware
Time: 00:02 EST/05:02 GMT | News Source: InformationWeek | Posted By: Chris Hedlund

Malware aimed at disabling Microsoft Corp.'s anti-spyware product has been discovered by security experts who expect the virus to be the first of many to follow.

Malware aimed at disabling Microsoft Corp.'s anti-spyware product has been discovered by security experts who expect the virus to be the first of many to follow. The Trojan horse, which is also designed to steal online banking passwords from Windows computers, was discovered by security experts at Sophos Plc and Symantec Corp. The virus, called Troj/BankAsh-A and PWSteal.Bankash.A, disables Microsoft AntiSpyware, which is available only as a beta download from the company's website. The malicious code attempts to suppress warning messages displayed by the product and to delete all files within the program's folder. Experts believe this virus is only the beginning of what will be a salvo of malware attacks on Microsoft security products.

Read Only Comments
Return to News
  Displaying Comments 1 through 3 of 3
  This is an archived static copy of ActiveWin.com.
#1 By 7754 (216.160.8.41) at Friday, February 11, 2005 11:40:41 AM
This is fantastic beta feedback for Microsoft. They should take this information and use it to protect the software--run it as a random process name, have the binaries watched by system file protection, etc.

#2 By 415 (199.8.64.193) at Friday, February 11, 2005 05:14:44 PM
Hardly anyone had heard of Giant before Microsoft bought them, so yeah you're probably right.

#3 By 5444 (69.30.184.64) at Sunday, February 13, 2005 12:14:18 PM
Of course if people were running as LUA accounts then it this trojan/virus wouldn't matter because it wouldn't have the access to do what it did.

catch 22 ehh Windows NT already had the tools to help prevent this from happening. but the tool itself is a hard pill to swallow because it was designed around networked computers.

MS really needs to look at the LUA account. Make it more User Friendly. And educate educate educate on its use.

there was a recent blog about what firefox was doing wrong in default security. one thing that ms is doing wrong. every new account setups as a Administrative user.

I say MS shouls work with its oem. while you do need an adminstrative account for obvious reaons. Lets push for the system to come setup default as a LUA user. and give tools to allow for admin rights

ahh well enough for now.

el



 

  *  
  *   *
 
replica watches