Slashdot Mirror


Microsoft Links Malware Rates To Pirated Windows

CWmike writes "Microsoft said today that computers in countries with high rates of software piracy are more likely to be infected because users are leery of applying security patches. 'There is a direct correlation between piracy and the malware infection rate,' said Jeff Williams, head manager of the Microsoft Malware Protection Center. Highlighting research that showed worms to be the most prevalent computer security problem today, Williams said the link between PC infection rates and piracy is due to the hesitancy of users of pirated software to use Windows Update. China's piracy rate is more than four times that of the US, but the use of Windows Update in China is significantly below that in this country. Same for Brazil and France. But Microsoft's own data doesn't always support William's contention that piracy, and the hesitancy to use Windows Update, leads to more infected PCs. China, for example, boasted a malware infection rate — as defined by the number of computers cleaned for each 1,000 executions of the MSRT — of just 6.7 per thousand, significantly below the global average of 8.7 or the US's rate of 8.2. France's infection rate of 7.9 in the first half of 2009 was also below the worldwide average."

17 of 348 comments (clear)

  1. So.... by Anonymous Coward · · Score: 5, Insightful

    So malware is Microsoft's fault for not patching pirated machines? Or did I miss something...

    1. Re:So.... by dgatwood · · Score: 5, Insightful

      So malware is Microsoft's fault for not patching pirated machines? Or did I miss something...

      Yes and no. It is true that by limiting patches to "legitimate" copies, they are making the odds of malware infection worse, and in doing so, are contributing to the botnet problem that creates truckloads of spam, wasted bandwidth, DOS attacks, and other nightmares that hurt everyone including their legitimate users. So I think they're utter morons for acting the way they do.

      That said, this is not the whole story. A large percentage of malware comes from people installing pirated software. People who pirate Windows are... wait for it... more likely to pirate other software, too. Therefore, you'd expect a strong correlation between malware rate and pirated copies of Windows even if Microsoft did everything they could to keep pirated copies of Windows patched. Their "Genuine Advantage" crap is merely compounding the problem.

      --

      Check out my sci-fi/humor trilogy at PatriotsBooks.

    2. Re:So.... by P0ltergeist333 · · Score: 5, Insightful

      You're not applying the proper spin. They are trying to spin it so the pirates look like the problem, when in reality they are holding everyone's security hostage in hopes of scaring a few users into buying a legit copy of Windows.

      --
      One of these days I'm going to cut you into little pieces. - PF
    3. Re:So.... by pyrbrand · · Score: 5, Informative

      Security patches are not subject to the Genuine Advantage check. People running pirated software are just less likely to run windows update because they are scared that it will somehow invalidate their pirated install. Also, as you note, installing pirated software, including Windows, is a risk in itself as much pirated software has been prepackaged with malware.

    4. Re:So.... by Carewolf · · Score: 4, Insightful

      Also, as you note, installing pirated software, including Windows, is a risk in itself as much pirated software has been prepackaged with malware.

      True, but funny enough pirated software contains much less malware than the original packages, which is one of the its many advantages.

  2. WGA could be at fault by Anonymous Coward · · Score: 4, Interesting

    Including Windows Genuine Validation is the likely culprit for this.

    1. Re:WGA could be at fault by Renraku · · Score: 5, Insightful

      The very same program that's well-known for marking valid copies as pirated and then holding people's data/work environment hostage until they cough up another $200+. Yeah, I'm leery of that kind of thing too. Why should I let them install a program that takes up a good 20MB of RAM when it's running to make me prove that I'm not a pirate?

      --
      Job? I don't have time to get a job! Who will sit around and bitch about being broke and unemployed then?
  3. Re:Just suppose... by jack2000 · · Score: 4, Informative
    It is actually possible to install patches without running headfirst into WGA. Infact there are TWO ways:
    • When choosing mode of autoupdate choose the one that requires you to choose which patches to download and install, WGA is one of the Security patches you uncheck it and it goes away forever.
    • Have security patches installed in redistributed form, they are available from MS or even torrent sites
  4. Stands to reason. by dangitman · · Score: 5, Funny

    They're pirates. Of course they're going to run malicious software.

    What the hell else would pirates do with a computer, donate to charity and solve world hunger? No, they're going to use it to look up www.saucywenches.com or download illegal treasure maps, or perform DDoS attacks on Royal Navy ships. They'd use a pirate version of Quicken to count their doubloons and inventory their treasure chest. They'd be looking up suspicious sites for syphilis treatments. They'd manually edit the Windows Registry with nothing but a cutlass and a corkscrew.

    --
    ... and then they built the supercollider.
  5. Broadband speed might be more of an issue by TheCow · · Score: 4, Insightful

    I just recently returned from a trip to India and found that many of the cyber cafes and family homes that I visited were not running the latest service-packs for Windows. I would attribute that to mostly being because although they had "broadband" their speed even during off hours were more around the range of 64 to 128 Kbps with high latency due to over subscription. Can any of you imagine downloading Windows XP SP3 over that kind of connection? (Setup a speed limiter on your next bit torrent download at about 5 KBs/40 kbps and see how long that file takes to transfer) Along with the problem that most computers are purchased as cheaply as possible so they frequently run with the minimum amount of ram possible, making the use of Antivirus software and the latest Service packs way too slow to even browse the web.

    Security patches and Anti-virus updates that are several megabytes a piece are fine for someone with a lowly 512 kbps broadband connection, but understand that most people in these countries like China and India still have very large modem and slow DSL that is extremely over subscribed at the ISP.

    Even here in the US there are many people that have dial-up even if other options are available because they don't feel the broadband options provide a good cost/performance ratio. $40 for 512kbps WISP connection or $10 for a cheap dial-up connection. $480 + install for the first year, or $120 for a year of dial-up over a phone line they already have...

    Please keep in mind that although 5+ Mbps broadband is available in most Metro markets there are still a lot of people that have much slower connections making many online services out of reach (Steam, hulu, and to some security patches).

  6. Re:Just suppose... by grcumb · · Score: 4, Insightful

    Suppose it was possible to apply security patches without installing Windows Genuine Advantage (malware by anyone's definition except Microsoft's). Would that make a difference?

    Quite likely, but Microsoft is definitely within their rights to insist that people pay for their software. You and I may find it to be unwieldy, intrusive and obnoxious, but that's our problem, not theirs.

    If people don't want to deal with the mess and hassle of keeping their Windows machines clean and up to date, they have alternatives. They can pony up for a Mac or they can install Linux. Heck, if they're absolutely committed to using Windows without paying, they can run it in a snapshotted VM on Linux.

    Just last week I wrote a newspaper column advocating Ubuntu Karmic over Windows 7, so I'm no fan of Windows whatsoever. But as someone who writes a fair amount of software, I fully respect Microsoft's right to license it - and enforce that license - as they see fit.

    The fact that they're doing so in such a way as to drive the world away from them is just gravy, as far as I'm concerned. 8^)

    --
    Crumb's Corollary: Never bring a knife to a bun fight.
  7. Liscensed but uneducated users really at fault by elvis15 · · Score: 5, Insightful

    Obviously Microsoft doesn't want to acknowledge the large portion of their licensed users who set Windows to do their updates automatically but have never touched an antivirus or security software. I've worked in IT and with the Joe Public users and that was by far the biggest problem out there.

    People would often call in with viruses/malware they've just been living with on a 2 year old computer, and when you asked them about what they use for antivirus, they wouldn't have a clue. "I used that link that was on my desktop when I bought it," they would say. Well, that 30 day trial will get you into more trouble than not applying your windows updates, especially when they're opening up all those emails from disposed Nigerian dictators.

    1. Re:Liscensed but uneducated users really at fault by BikeHelmet · · Score: 4, Interesting

      I know a guy that has Nod32 antivirus installed.

      Unfortunately for him, he doesn't seem to understand how to activate it. Every year he buys a new code, and loses it, without activating. It's now about 900 days since his subscription ended.

      I took pitty and installed avast, but he doesn't know what the little A is, or even care, because he has Nod32 (which a friend recommended), and he thinks he's protected.

      I agree that uneducated users are the issue.

  8. Seems to be what microsoft wanted by dissy · · Score: 4, Insightful

    Microsoft said today that computers in countries with high rates of software piracy are more likely to be infected because users are leery of applying security patches.

    When you purposely push out "security patches" that only disable copies of Windows that are pirated, then yes, they are leery of using them, and rightly so (Assuming their goal is to run Windows without paying, and not buying Windows or using another OS)

    This is the exact situation Microsoft has stated they wanted to happen.

    And before anyone starts, I am not suggesting Microsoft change their rules on supporting pirated copies of Windows.
    It's theirs to choose how to support how they want.
    Just that this is the only conclusion one could expect from their current choice.

    1. Re:Seems to be what microsoft wanted by BikeHelmet · · Score: 4, Interesting

      When you purposely push out "security patches" that only disable copies of Windows that are pirated, then yes, they are leery of using them, and rightly so

      Don't forget the legit copies they disable. Any of those OEM keys that shady computer repair shops have gotten their hands on.

      Microsoft also disabled my legit key. Apparently if you activate Windows on 4 different motherboards with 3 different CPUs, 4 different types of memory, 3 different GPUs, 6 different HDD setups, from 3 different IPs/ISPs, they find it suspicious and refuse to give you a new key.

      Of course, what actually happened was my PSU blew up my old board. It wasn't good for overclocking, so I got a different one. Then the new PSU blew up the new board(bad luck - never going Antec again) and some memory. After getting it fixed, I sold my CPU and upgraded that and my GPU. I was running out of space, so I also got an HDD upgrade. Then later I moved most of them over to a NAS. Eventually I wanted to upgrade again, so I gave a family member my old PC(after wiping Windows and installing Ubuntu, *gasp*) and tried to reactivate again on a new board with a new CPU + GPU + RAM + more HDDs.

      Microsoft found it suspicious - too suspicious - and yet I'm in the right, because my XP key was only in use on a single machine. I believe a contributing factor was the ISP switching, and my IP geolocation resolving incorrectly. For a while it resolved to Ontario, then Alberta, then BC. Originally I could even watch Hulu (and I'm Canadian), so I know the geolocation software failed pretty badly.

      Right now I'm using XP, but it's not the license key I originally bought. There's no way I'm letting a company force me to pay twice! Everyone I know buys a single license and uses it on every computer in their home, but here I am doing it the right way, and they screw me! Never again!

  9. Sure, but... by Rix · · Score: 4, Insightful

    If I walked out of that store, and someone offered to give me an exact copy of that suit for free, I wouldn't complain.

  10. I wonder... by amoeba1911 · · Score: 5, Funny

    Do people on car forums provide computer analogies to their car issues?