Focus on Virus
Back to list
RE: Microsoft AntiSpyware falling further behind
Oct 25 2005 09:20PM
Bruce Klein (bruce klein iovation com)
There will never be a perfect solution - don't wait.
For the moment think of Spyware as cold weather and you want to be
protected (warm); put on layers to protect yourself.
Symantec has updated themselves to add Spam and Spyware to their
antivirus product. We are using Symantec, Websweeper, MS anti-spyware,
and Whole Security (behavior based AS).
You might say this is overkill but who knows for sure - while they all
play nice together I feel like I am at home by the fireplace with a good
supply of logs.
Bruce Klein |Director of IT
From: Quark IT - Hilton Travis [mailto:Hilton (at) quarkit.com (dot) au [email concealed]]
Sent: Friday, October 21, 2005 1:51 PM
To: focus-virus (at) securityfocus (dot) com [email concealed]
Subject: Microsoft AntiSpyware falling further behind
It seems that not only does Microsoft AntiSpyware recommend that
Claria's spyware is ignored, but it also misses a significant amount of
cookies that are placed on a system - I have a VPC environment where I
browse the Internet so that anywhere I go won't affect my regular
Windows session/installation. Regularly CounterSpy is detecting cookies
(such as Cok.ad.yieldmanager, CGI-Bin, Cok.AssassinTrojan2.0 and Zedo
(from yesterday's browsing)) that Microsoft AntiSpyware simply does not
Now, this is not only disappointing, but potentially dangerous. Any
customer or end user running Microsoft AntiSpyware or CounterSpy is not
being protected from these cookies, and MSAS doesn't even detect them -
that's right, neither program's active monitoring is stopping the
installation of these cookies, but at least CounterSpy is detecting them
AntiSpyware is far, far from the accuracy of antivirus, especially
something like NOD32. I wonder how long it will be before a decent
AntiSpyware application is released that, like NOD32 does with viruses,
actually stops spyware *before* it is installed?
Hilton Travis Phone: +61 (0)7 3344 3889
(Brisbane, Australia) Phone: +61 (0)419 792 394
Manager, Quark IT http://www.quarkit.com.au
Quark Group http://quarkgroup.com.au/
Microsoft Small Business Specialists
http://www.threatcode.com/ <-- its now time to shame poor coders
into writing code that is acceptable for use on today's networks
War doesn't determine who is right. War determines who is left.
This document and any attachments are for the intended recipient
only. It may contain confidential, privileged or copyright
material which must not be disclosed or distributed.
The information contained in this email message may be privileged, confidential and protected from disclosure. If you are not the intended recipient, any dissemination, distribution or copying is strictly prohibited. If you think that you have received this email message in error, please notify the sender by reply email and delete the message and any attachments.
[ reply ]
Re: Microsoft AntiSpyware falling further behind
Oct 26 2005 03:25PM
Harish Pillay (h pillay ieee org)
Copyright 2010, SecurityFocus