Slashdot Mirror
Sneak Peek At Microsoft Anti-Spyware
Ant writes "Broadband Reports mentions Neowin's sneak peek of Microsoft's upcoming anti-spyware software recently acquired community favorite Giant spyware; Microsoft has code-named their re-hashed version of that software 'Atlanta.' It is currently in an internal beta test. There are screenshots of the application in action."
Warning: Firefox detected! - Internet Hijacker - Automatically deleted for your protection.
At the risk of sounding trollish... I think it's more than a bit ironic that MS is now going to bundle spyware when a good chunk of spyware is installed thanks to bugs within the present code. Why not deal with existing issues first?
Oh wait, new bells and whistles are good PR and prompt upgrades.
Trolling is a art,
...but there's already plenty of free alternatives out there. Also, just stop using Internet Explorer. That move right there will cut down at least 90% of all spyware/adware.
What? Microsoft's anti-spyware software acquired a company? I wasn't aware software could own something, although you can certainly use software to own something - usually windows.
Editors, is it too much to ask that you edit?
"You're right," Fisheye says. "I should have set it on 'whip' or 'chop.'"
As a resident of Atlanta, I resent and am offended by this nomenclature. Where do I file my complaint?
And some malicious website will have an exploit which turns this anti-spyware into a remote code execution tool.
fast as fast can be. you'll never catch me.
If it works, is free and can be deployed and controlled via Active Directory GPOs I am going to be a happy man for the enterprise.
Anyone know if it IS going to be free?
"They won't be spying, because we will.
Oxymoron (n) A rhetorical figure in which incongruous or contradictory terms are combined, as in Microsoft Anti-Spyware.
I find this interesting because traditionally Microsoft has always had an open door policy about which software can be installed on Windows. There are many pieces of software that legitimate companies install which users and many anti-spyware companies consider spyware and thus remove. Microsoft up until this point has had no public policy on semi-legit software which users have unwittingly been installing. So now here we have MS now denying them the ability to install their semi-legit software. Will they now be able to sue MS for keeping them off of the Windows platform? Did ms tweak the rules so that companies like Claria can continue to push Gator?
Think about that for a moment. There is plenty of malicious software out there but there is also plenty of "grey" software which drives users nuts but is in reality legal. Is it ok for software to change a user's homepage and install fake ad killers? Can companies no longer sell software which preys on users who are used to quickly hitting the OK button? I'd be interested to know what ISV's Microsoft is now for the first time denying access to Windows even though they develop semi-legit software. Are big legal battles about the start up?
If you wanna get rich, you know that payback is a bitch
.. thousands of mallicious coders are linning up to grab a copy of their newest target.
Did it ever occur to you that they might have modified code other than the UI? Maybe there are non-visible changes to the scanning engine or something, perhaps to enhance the integration with the Windows OS?
Imagine for a moment that the computer is doing more than painting pretty pictures on your monitor (that's the TV-thing on top). Could we agree that a program intended to detect spyware could be substantially modified without altering the appearance to the user?
How did this get modded as "informative"?
Oh, that's right--he bashed MS. Sorry.
"well MS created the market in the first place, so they should at least be allowed to profit from it :)"
Heh. Yep, just like Honda should profit from the car theft market.
"Derp de derp."
Exactly: the reason they bought Connectix, not VMWare, was that Microsoft and Connectix are both nine letter: they wouldn't need to deal with any pesky offset differences when they did a global search and replace...
Call me old fashioned, but I like a dump to be as memorable as it is devastating - Bender
The solution to the spyware/malware problem is simple, as demonstrated by Firefox-
Disable ActiveX controls.
Is there any legitimate reason for a non-intranet website to use them? Whenever a site requires ActiveX controls to work, I think "Boy, they hired an bunch of idiots to design their site."
They should just modify IE so that ActiveX flat-out doesn't work on any site that isn't explicitly and MANUALLY allowed to by the user or network admin.
on a clean SP2 build (that is the MSDN WinXP+SP2 all in one install), Prompted ActiveX download is still enabled for the internet zone.
If you turn that off, windows update stops working, as http[s]:*.microsoft.com is in that zone.
I dont call that locking down the browser, To secure IE (even if you only use it for windows update)
1. disable AX download in internet zone
2, edit trusted zone site security to medium. Like you ever need a 'run anything, unprompted' zone.
3. add https:*.microsoft.com and http:*.microsoft.com to the trust zone
4. uncheck the 'require https in trusted zone' switch
the aim is to redefine "trusted" from "total access" to "prompted download active X controls", which is a serious enough undertaking that I dont want to enable it broadly. Only MS sites and spyware vendors seem to use it, after all.
Well if Microsoft is doing anything to help against spyware it has got to be of some use.
There is a new extreme piece of spyware which seems to have surfaced in the last month.
http://forum.iamnotageek.com/t-78554-1.html
is the start of a very interesting thread concerning what seems to be the latest generation of spyware.
some of the things that it does include generating randomly named dll's
restarting processes that have been killed, runs IE even in safe mode, drags in a whole raft of other spyware to confuse things and leaves the PC it infects after unsuccessful removal unable to connect to the internet.
This thing is really nasty.
I am pretty sure I was dealing with a case of this yesterday. When adaware was installed and ran on a pc with XP service pack2 It triggered a Reboot due to a failure in dcom with a 1 minute countdown. The worst part was after cleaning with adaware the Pc was unable to connect to the internet unable to get an address from the router.
Manually configuring a network address and setting 192.168.2.1 as the gateway got the network working to the lan pc's.
The router could be pinged successfully but it wasn't possible to reach 192.168.2.1 through firefox netscape or IE to check the router status.
and after several hours of trying this pc refused to connect to the internet.
After banging my head against this brickwall over a period of about 12 hours the only solution was to reinstall XP.
This is the worst spyware I have ever seen, according to the thread the initial attack seems to have occured after a search for the song "over and over" by nelly although a precise location of the source of this infection isn't known.
If you have to deal with spyware on a regular basis check this thread out because you are not going to solve this one just by running adaware and spybot S&D.
http://forum.iamnotageek.com/t-78554-3.html
This latest spyware really should be submitted as a story on slashdot it is very new, very nasty and it is going to infect a lot of Pc's.
Please mod this up or investigate this yourself and Post about it.
because this is going to be a major disruption to Pc users everywhere, especially with it's defence of blocking the Pc's internet connection when you attempt to remove it.
Blarney Quality Restaurant, Plants