Slashdot Mirror


Microsoft Links Malware Rates To Pirated Windows

CWmike writes "Microsoft said today that computers in countries with high rates of software piracy are more likely to be infected because users are leery of applying security patches. 'There is a direct correlation between piracy and the malware infection rate,' said Jeff Williams, head manager of the Microsoft Malware Protection Center. Highlighting research that showed worms to be the most prevalent computer security problem today, Williams said the link between PC infection rates and piracy is due to the hesitancy of users of pirated software to use Windows Update. China's piracy rate is more than four times that of the US, but the use of Windows Update in China is significantly below that in this country. Same for Brazil and France. But Microsoft's own data doesn't always support William's contention that piracy, and the hesitancy to use Windows Update, leads to more infected PCs. China, for example, boasted a malware infection rate — as defined by the number of computers cleaned for each 1,000 executions of the MSRT — of just 6.7 per thousand, significantly below the global average of 8.7 or the US's rate of 8.2. France's infection rate of 7.9 in the first half of 2009 was also below the worldwide average."

35 of 348 comments (clear)

  1. So.... by Anonymous Coward · · Score: 5, Insightful

    So malware is Microsoft's fault for not patching pirated machines? Or did I miss something...

    1. Re:So.... by Cartan · · Score: 3, Funny

      Nah, can't be. They wouldn't call it "genuine advantage" then, would they?

      --
      "Don't ask for whom the ^G tolls."
    2. Re:So.... by dgatwood · · Score: 5, Insightful

      So malware is Microsoft's fault for not patching pirated machines? Or did I miss something...

      Yes and no. It is true that by limiting patches to "legitimate" copies, they are making the odds of malware infection worse, and in doing so, are contributing to the botnet problem that creates truckloads of spam, wasted bandwidth, DOS attacks, and other nightmares that hurt everyone including their legitimate users. So I think they're utter morons for acting the way they do.

      That said, this is not the whole story. A large percentage of malware comes from people installing pirated software. People who pirate Windows are... wait for it... more likely to pirate other software, too. Therefore, you'd expect a strong correlation between malware rate and pirated copies of Windows even if Microsoft did everything they could to keep pirated copies of Windows patched. Their "Genuine Advantage" crap is merely compounding the problem.

      --

      Check out my sci-fi/humor trilogy at PatriotsBooks.

    3. Re:So.... by P0ltergeist333 · · Score: 5, Insightful

      You're not applying the proper spin. They are trying to spin it so the pirates look like the problem, when in reality they are holding everyone's security hostage in hopes of scaring a few users into buying a legit copy of Windows.

      --
      One of these days I'm going to cut you into little pieces. - PF
    4. Re:So.... by yukk · · Score: 3, Insightful

      To be totally fair, people who don't pay for their software (pirates) aren't actually customers, and Microsoft has no responsibility towards people who aren't their customers.

      That's not totally true. If all those pirates were to dump Windows for some other O/S, then Microsoft's market share would drop, weakening their near monopolistic hold on the market which allows them to sell other things and force wretched terms on vendors.

      --
      The trouble with the rat race is that even if you win, you're still a rat." Lily Tomlin
    5. Re:So.... by pyrbrand · · Score: 5, Informative

      Security patches are not subject to the Genuine Advantage check. People running pirated software are just less likely to run windows update because they are scared that it will somehow invalidate their pirated install. Also, as you note, installing pirated software, including Windows, is a risk in itself as much pirated software has been prepackaged with malware.

    6. Re:So.... by Totenglocke · · Score: 3, Insightful

      Oh, I have paid for legit student copies of MS products. But they always come hamstrung with things like a 1 install limit, so if you reformat you're SOL. That's why you have to resort to piracy to be able to use what you actually paid for.

      --
      "The tree of liberty must be refreshed from time to time with the blood of patriots and tyrants." ~Thomas Jefferson
    7. Re:So.... by Mhtsos · · Score: 3, Insightful

      Go go gadget car analogy..
      This is like saying a car company isn't liable for faulty brakes in case of an accident where the car is driven by someone who stole the car. The victim of faulty brakes isn't always the driver.

    8. Re:So.... by Carewolf · · Score: 4, Insightful

      Also, as you note, installing pirated software, including Windows, is a risk in itself as much pirated software has been prepackaged with malware.

      True, but funny enough pirated software contains much less malware than the original packages, which is one of the its many advantages.

    9. Re:So.... by nutshell42 · · Score: 3, Insightful
      No it's like a car company providing free brake checks and maintenance to car owners and thieves alike but the thieves don't use it because they're afraid the company's gonna call the cops (which they don't afaik but I never checked) and they don't get it done by anyone else either.

      They also drive with the handbrake engaged all the time (not behind firewall, anti-virus, whatever) so it's shot and use wheels that are known to overheat brakes (lots more pirated stuff).

      Damn that car company does their nefarious schemes know no bounds? Oh the humanity!

      Suffice to say your analogy fails harder than their brakes.

      --
      Don't think of it as a flame---it's more like an argument that does 3d6 fire damage
  2. WGA could be at fault by Anonymous Coward · · Score: 4, Interesting

    Including Windows Genuine Validation is the likely culprit for this.

    1. Re:WGA could be at fault by Renraku · · Score: 5, Insightful

      The very same program that's well-known for marking valid copies as pirated and then holding people's data/work environment hostage until they cough up another $200+. Yeah, I'm leery of that kind of thing too. Why should I let them install a program that takes up a good 20MB of RAM when it's running to make me prove that I'm not a pirate?

      --
      Job? I don't have time to get a job! Who will sit around and bitch about being broke and unemployed then?
  3. Just suppose... by ichbineinneuben · · Score: 3, Insightful

    Suppose it was possible to apply security patches without installing Windows Genuine Advantage (malware by anyone's definition except Microsoft's). Would that make a difference? Perhaps what they are seeing is really just a choice users make between Microsoft malware and "aftermarket" malware.

    1. Re:Just suppose... by jack2000 · · Score: 4, Informative
      It is actually possible to install patches without running headfirst into WGA. Infact there are TWO ways:
      • When choosing mode of autoupdate choose the one that requires you to choose which patches to download and install, WGA is one of the Security patches you uncheck it and it goes away forever.
      • Have security patches installed in redistributed form, they are available from MS or even torrent sites
    2. Re:Just suppose... by dgatwood · · Score: 3, Interesting

      Have security patches installed in redistributed form, they are available from MS or even torrent sites

      Am I the only one who sees the problem here? Why do you think all those machines are infected with malware in the first place? :-D

      --

      Check out my sci-fi/humor trilogy at PatriotsBooks.

    3. Re:Just suppose... by grcumb · · Score: 4, Insightful

      Suppose it was possible to apply security patches without installing Windows Genuine Advantage (malware by anyone's definition except Microsoft's). Would that make a difference?

      Quite likely, but Microsoft is definitely within their rights to insist that people pay for their software. You and I may find it to be unwieldy, intrusive and obnoxious, but that's our problem, not theirs.

      If people don't want to deal with the mess and hassle of keeping their Windows machines clean and up to date, they have alternatives. They can pony up for a Mac or they can install Linux. Heck, if they're absolutely committed to using Windows without paying, they can run it in a snapshotted VM on Linux.

      Just last week I wrote a newspaper column advocating Ubuntu Karmic over Windows 7, so I'm no fan of Windows whatsoever. But as someone who writes a fair amount of software, I fully respect Microsoft's right to license it - and enforce that license - as they see fit.

      The fact that they're doing so in such a way as to drive the world away from them is just gravy, as far as I'm concerned. 8^)

      --
      Crumb's Corollary: Never bring a knife to a bun fight.
    4. Re:Just suppose... by zonky · · Score: 3, Insightful

      Downloading and applying patches from non-authoritative sources, i.e torrents, without some sort of checksum assurance sounds like a very bad idea.

    5. Re:Just suppose... by hedwards · · Score: 3, Insightful

      If they want to do that fine, but they should be liable for the times when they misidentify a copy as pirated.

      Also, I take it that you haven't actually bothered to read the EULA that comes with Windows because it's an absolute joke. Worse still is that it changes regularly when doing updates and I'm willing to bet that if I call them and say that I'm rejecting the new version that they won't let me have my money back for the copies I've paid for.

  4. Users are leery of applying patches because? by CmdrPorno · · Score: 3, Insightful

    And users (with both legit and pirated copies) are leery of applying patches because of Microsoft Genuine Advantage and its ilk. Does this come as a surprise to them?

    --
    Sent from my iPhone
  5. Gee. I wonder why . . . by base3 · · Score: 3, Insightful

    . . . people would be "leery" of installing "security patches," MS having pushed down things like WGA as a "critical updates." Of fscking course the people running dodgy copies of Windows are going to assume that each new wave of patches might come with a copy protection trojan, in light of the fact they've done it before. So in fact, Microsoft has caused the problem they're bellowing about in the name of attempting to inhibit piracy of Windows.

    --
    One CPU cycle wasted on digital restrictions management is ONE TOO MANY.
  6. Stands to reason. by dangitman · · Score: 5, Funny

    They're pirates. Of course they're going to run malicious software.

    What the hell else would pirates do with a computer, donate to charity and solve world hunger? No, they're going to use it to look up www.saucywenches.com or download illegal treasure maps, or perform DDoS attacks on Royal Navy ships. They'd use a pirate version of Quicken to count their doubloons and inventory their treasure chest. They'd be looking up suspicious sites for syphilis treatments. They'd manually edit the Windows Registry with nothing but a cutlass and a corkscrew.

    --
    ... and then they built the supercollider.
  7. Broadband speed might be more of an issue by TheCow · · Score: 4, Insightful

    I just recently returned from a trip to India and found that many of the cyber cafes and family homes that I visited were not running the latest service-packs for Windows. I would attribute that to mostly being because although they had "broadband" their speed even during off hours were more around the range of 64 to 128 Kbps with high latency due to over subscription. Can any of you imagine downloading Windows XP SP3 over that kind of connection? (Setup a speed limiter on your next bit torrent download at about 5 KBs/40 kbps and see how long that file takes to transfer) Along with the problem that most computers are purchased as cheaply as possible so they frequently run with the minimum amount of ram possible, making the use of Antivirus software and the latest Service packs way too slow to even browse the web.

    Security patches and Anti-virus updates that are several megabytes a piece are fine for someone with a lowly 512 kbps broadband connection, but understand that most people in these countries like China and India still have very large modem and slow DSL that is extremely over subscribed at the ISP.

    Even here in the US there are many people that have dial-up even if other options are available because they don't feel the broadband options provide a good cost/performance ratio. $40 for 512kbps WISP connection or $10 for a cheap dial-up connection. $480 + install for the first year, or $120 for a year of dial-up over a phone line they already have...

    Please keep in mind that although 5+ Mbps broadband is available in most Metro markets there are still a lot of people that have much slower connections making many online services out of reach (Steam, hulu, and to some security patches).

  8. Penance? by xeromist · · Score: 3, Funny

    Perhaps these pirates just feel such extreme guilt for copying Windows that they are rejecting patches and virtually flogging themselves with malware.

    --
    This sig is exactly seventy characters long and a real waste of space!
  9. The solution... by The+Grim+Reefer2 · · Score: 3, Interesting

    Williams said the link between PC infection rates and piracy is due to the hesitancy of users of pirated software to use Windows Update.

    Make Windows free.

  10. Liscensed but uneducated users really at fault by elvis15 · · Score: 5, Insightful

    Obviously Microsoft doesn't want to acknowledge the large portion of their licensed users who set Windows to do their updates automatically but have never touched an antivirus or security software. I've worked in IT and with the Joe Public users and that was by far the biggest problem out there.

    People would often call in with viruses/malware they've just been living with on a 2 year old computer, and when you asked them about what they use for antivirus, they wouldn't have a clue. "I used that link that was on my desktop when I bought it," they would say. Well, that 30 day trial will get you into more trouble than not applying your windows updates, especially when they're opening up all those emails from disposed Nigerian dictators.

    1. Re:Liscensed but uneducated users really at fault by BikeHelmet · · Score: 4, Interesting

      I know a guy that has Nod32 antivirus installed.

      Unfortunately for him, he doesn't seem to understand how to activate it. Every year he buys a new code, and loses it, without activating. It's now about 900 days since his subscription ended.

      I took pitty and installed avast, but he doesn't know what the little A is, or even care, because he has Nod32 (which a friend recommended), and he thinks he's protected.

      I agree that uneducated users are the issue.

  11. Seems to be what microsoft wanted by dissy · · Score: 4, Insightful

    Microsoft said today that computers in countries with high rates of software piracy are more likely to be infected because users are leery of applying security patches.

    When you purposely push out "security patches" that only disable copies of Windows that are pirated, then yes, they are leery of using them, and rightly so (Assuming their goal is to run Windows without paying, and not buying Windows or using another OS)

    This is the exact situation Microsoft has stated they wanted to happen.

    And before anyone starts, I am not suggesting Microsoft change their rules on supporting pirated copies of Windows.
    It's theirs to choose how to support how they want.
    Just that this is the only conclusion one could expect from their current choice.

    1. Re:Seems to be what microsoft wanted by BikeHelmet · · Score: 4, Interesting

      When you purposely push out "security patches" that only disable copies of Windows that are pirated, then yes, they are leery of using them, and rightly so

      Don't forget the legit copies they disable. Any of those OEM keys that shady computer repair shops have gotten their hands on.

      Microsoft also disabled my legit key. Apparently if you activate Windows on 4 different motherboards with 3 different CPUs, 4 different types of memory, 3 different GPUs, 6 different HDD setups, from 3 different IPs/ISPs, they find it suspicious and refuse to give you a new key.

      Of course, what actually happened was my PSU blew up my old board. It wasn't good for overclocking, so I got a different one. Then the new PSU blew up the new board(bad luck - never going Antec again) and some memory. After getting it fixed, I sold my CPU and upgraded that and my GPU. I was running out of space, so I also got an HDD upgrade. Then later I moved most of them over to a NAS. Eventually I wanted to upgrade again, so I gave a family member my old PC(after wiping Windows and installing Ubuntu, *gasp*) and tried to reactivate again on a new board with a new CPU + GPU + RAM + more HDDs.

      Microsoft found it suspicious - too suspicious - and yet I'm in the right, because my XP key was only in use on a single machine. I believe a contributing factor was the ISP switching, and my IP geolocation resolving incorrectly. For a while it resolved to Ontario, then Alberta, then BC. Originally I could even watch Hulu (and I'm Canadian), so I know the geolocation software failed pretty badly.

      Right now I'm using XP, but it's not the license key I originally bought. There's no way I'm letting a company force me to pay twice! Everyone I know buys a single license and uses it on every computer in their home, but here I am doing it the right way, and they screw me! Never again!

  12. Re:safer users by Anonymous Coward · · Score: 3, Informative

    In Brazil several computer stores sell PCs wirh a pirated version of windows pre-installed. So it's very likely that a lot of those 'computer pirates' are computer iliterates. Also, pirate versions of any popular application, movies and songs can be easily bought on the streets at broad day light -- not in dark alleys. So, if a person sees "Computer with genuine MS Windows XP" it's not unlikely that they would ask the salesman "can you make it cheaper if you sell it with a pirated version of windows?", even if it's a complete layperson. I believe that things are a bit different in the US, where you have to have at least heard about p2p technology in order to enjoy pirate software.

  13. Could the China anomaly have anything to do with.. by beatsme · · Score: 3, Interesting

    The fact that there's a "Great (Fire)Wall" separating the Chinese from the rest of the internet? Chinese culture being less individualistic may simply not produce as much malware, and since most citizens are restricted to their own countrymen, there's a bias. That such a sampling bias exists should disqualify it from being included among the other countries, or at least warrant further research before lumping it in there.

  14. Re:should it be like giving clean needles to junki by John+Hasler · · Score: 3, Insightful

    Microsoft has a financial incentive to make people fear running unauthorized copies of Windows.

    --
    Warning: this article may contain humor, sarcasm, parody, and perhaps even irony. Read at your own risk.
  15. Re:Always on Internet connections?.. by Tynin · · Score: 3, Informative

    I just got done working on my grandparents machine. They only have dial up, with one phone line in the house. They connect, check their email via POP3, and disconnect. They had 336 viruses that I could find (many of them worms). I don't think connection times matter that much, especially since this was over a 56k modem only connected a few times a week for 10-20 minutes at a shot.

  16. Re:MS Fuud by techno-vampire · · Score: 3, Informative
    NO other security-conscious application these days dares to publish anything but the latest security-patched version.

    I, on the other hand, am inclined to think otherwise.

    I don't think that anybody in their right mind would call Fedora Linux lacking in security, but if you were to download the install DVD for Fedora 11, the latest version, what you'd get is exactly what you'd have downloaded on the first day it was available. Then, after installation, you'd have to download all the updates needed to bring your system up to date. How is this different from what Microsoft does?

    --
    Good, inexpensive web hosting
  17. Sure, but... by Rix · · Score: 4, Insightful

    If I walked out of that store, and someone offered to give me an exact copy of that suit for free, I wouldn't complain.

  18. I wonder... by amoeba1911 · · Score: 5, Funny

    Do people on car forums provide computer analogies to their car issues?