Sneak Peek At Microsoft Anti-Spyware 440
Ant writes "Broadband Reports mentions Neowin's sneak peek of Microsoft's upcoming anti-spyware software recently acquired community favorite Giant spyware; Microsoft has code-named their re-hashed version of that software 'Atlanta.' It is currently in an internal beta test. There are screenshots of the application in action."
Sample (Score:5, Funny)
Re:Sample (Score:3, Interesting)
Re:Sample (Score:5, Insightful)
That said, dollars to donuts that nobody who'd install FF or its ilk would pay Microsoft for something they can get for free off Lavasoft/Spybot.
Re:Sample (Score:4, Interesting)
Re:Sample (Score:3, Funny)
Considering their recent track record in the european courts...I almost wish they'd go ahead and try to get away with that one.
Re:Sample (Score:4, Interesting)
Re: (Score:3, Insightful)
Re:Sample (Score:3, Informative)
You don't seem to be getting it. Yes, Mozilla adheres to the standards, but there are lots of websites out there that don't. And they all don't necessarily break adherence in the same way.
The problem is not the website creators blaming Mozilla, it's the end user who can't get into the site they want. THEY blame Mozilla.
Mozilla is saying they won't try to im
Re:Sample (Score:5, Funny)
Re:Sample (Score:3, Insightful)
They would, if the tool provided by Microsoft detected everything (and more) that the 2 programs combined detect.
Some say Ad-Aware is better than Spybot. Others claim vice-versa. Only yesterday i first ran Spybot (detected 19 objects correctly) and then Ad-Aware, which still detected 39 objects (that Spybot somehow missed). Other people may tell you the sam
Re:Sample (Score:2, Interesting)
This girl had acquired a pirated version of Norton 2004 off kazaa or some p2p and I think it was bundled with a crack. To cut the story short, Norton virus scan was detecting the crack file(Norton2004crack.exe) as a viral file. She thought the whole program was a virus since it was detecting "itself" as a virus.
Ofcourse I made a couple of bucks tro
Conflict of interests... (Score:2, Interesting)
Re:Sample (Score:4, Informative)
Most likely they'll charge for this product, whereas it's completely unnecessary if you use firefox and IE and don't install apps like Gator and such.
Re:Sample (Score:3, Insightful)
Re:Sample (Score:5, Funny)
To me it seems like getting a broom to crack a nut. If you use the right tool (read Firefox) in the first place you do not need to sweep up the mess.
Re:Sample (Score:3, Insightful)
With XP SP2, modulo security holes, the defaults on downloading code are all NO - the user has to decide that they want the rubbish or not.
After that, it's a question of user education.
SP2 still enables AX by default (Score:5, Interesting)
If you turn that off, windows update stops working, as http[s]:*.microsoft.com is in that zone.
I dont call that locking down the browser, To secure IE (even if you only use it for windows update)
1. disable AX download in internet zone
2, edit trusted zone site security to medium. Like you ever need a 'run anything, unprompted' zone.
3. add https:*.microsoft.com and http:*.microsoft.com to the trust zone
4. uncheck the 'require https in trusted zone' switch
the aim is to redefine "trusted" from "total access" to "prompted download active X controls", which is a serious enough undertaking that I dont want to enable it broadly. Only MS sites and spyware vendors seem to use it, after all.
Re:Sample (Score:5, Insightful)
That kind of work would be probably be even harder than writing Longhorn, and we've seen how long that's taking. And that would most likely require a development team as big as that of Longhorn, if not bigger. And they wouldn't be getting paid for it - so what do you thing the chances are of MS doing that?
Not too far off (Score:2, Interesting)
Ironic methinks. (Score:5, Insightful)
At the risk of sounding trollish... I think it's more than a bit ironic that MS is now going to bundle spyware when a good chunk of spyware is installed thanks to bugs within the present code. Why not deal with existing issues first?
Oh wait, new bells and whistles are good PR and prompt upgrades.
Re:Ironic methinks. (Score:5, Funny)
THE SOUTH SHALL FORMAT AGAIN!
-B
Re:Ironic methinks. (Score:2)
Sherman own Kazaa
Re:Ironic methinks. (Score:3, Informative)
close, but no cigar [sharmannetworks.com]
Re:Ironic methinks. (Score:4, Insightful)
Jerry
http://www.syslog.org/ [syslog.org]
Re:Ironic methinks. (Score:5, Insightful)
I don't think it's so much clicking "yes" for most people (joe user)... it's more of clicking "go away" on things.
buying isn't fixing (Score:2)
The real irony lies in the fact that they (MS) aren't 'fixing' the problem. MS is buying a company that 'fixed' it and passing that off as charitable intent... MS remains clueless outside of pimping.
Re:Ironic methinks. (Score:5, Informative)
You don't have to click YES or ACCEPT to get spyware in IE. All you have to do is visit a specific website... or a website that's been hacked... or a website that shows ads from a network that's been hacked... and it will auto-install it for you through one of IE's lovely unpatched exploits.
I just cleaned 12 off my sister's Win98 laptop and then promptly installed Firefox and Thunderbird.
Re:Ironic methinks. (Score:2, Informative)
Re:Ironic methinks. (Score:2, Insightful)
Re:Ironic methinks. (Score:4, Insightful)
Even so, please tell me which pieces of spyware exploit legitimate security holes? The "security hole" they exploit is that users run as admin. Hardly a bug in the OS, just a horrifically misguided ease of use 'feature' in the installer. Easily fixed. I've never gotten infected with spyware while running as a Limited user, and neither has my Mom, who has a penchant for running little apps she finds on the web. In the cases where they are malicious, she just gets a protection fault and knows to happily move along to the next little animation.
http://www.techproblemsolver.com/limited.html
http://blogs.msdn.com/aaron_margosis/
h
http://support.microsoft.com/d
For the handful that did take advantage of some buffer overflow, please point out those vulnerabilities that remain unpatched through Windows Update.
Re:Ironic methinks. (Score:5, Interesting)
Why should a browser EVER make it that easy to run arbitrary code off the net at the user's priviledge level in the native OS?
The only "valid" reason is that it was THE stick to beat Java over the head with and allow web-based applications to run as Windows applications, with all the easy advantages and UI widgets people expected. Java was stuck with it's horrid GUI, while ActiveX looked and felt like a Windows application.
And that reason was only "valid" if you were a Windows product strategist trying to keep the web and Java from eliminating the need for Windows and IE.
So now we have every third web site wanting to run Active X on our machines, often in the "helper" mode to add stuff to our machines so we can see their over-animated web sites that just HAD to be implemented with Flash or Shockwave or worse.
And you wonder how people reflexively hitting "OK" to Active X warnings get infested with spyware and insist it's not MS fault?
Re:Ironic methinks. (Score:2)
Re:Ironic methinks. (Score:2, Insightful)
If Microsoft can't plug the hole, why's there a dialog box: "Do you want to uninstall the keylogger?" I think its all these layers and cartoons for something that could just be buried in the OS that may just irk some people.
But those people
Re:Ironic methinks. (Score:3, Insightful)
Re:Ironic methinks. (Score:4, Interesting)
I was part of some focus group thing (online) that MS did and they asked me how to improve Windows Update. I told them to make Windows more secure. Failing that, they need to make stuff to fix the problems they caused. Not Giant. Not Lavasoft. Not Patrick Kolla.
Microsoft.
Re:Ironic methinks. (Score:4, Interesting)
Because that would mean admitting responsibility. At present, Microsoft can still rely on the myth that Windows' continual security problems are do to monoculture and basically being a big target.
It would also piss off developers of spyware and anti-spyware, and if there is anything that Microsoft is reluctant to do, it's scare of developers, even if it's at the expense of the user's experience. Remember Ballmer's "Developers! Developers! Developers!"? That's where the focus is.
Re:Ironic methinks. (Score:5, Insightful)
Keep in mind that a good amount of Microsoft criticism (call it "bashing" if you want) is due to their engineering choices. Those choices lead to the outcomes critics predicted. Which in turn leads to a wasteland of broadband zombies.
When Microsoft attempts bandaid solutions, there is more criticism. That isn't bashing. It's pointing out that Microsoft has issues - much of their own doing.
Sure - they're doing something. But is "doing something" really solving the problem?
hmm (Score:3, Funny)
Hate to break it to Microsoft... (Score:5, Informative)
Re:Hate to break it to Microsoft... (Score:5, Insightful)
Most people dont know where to get software like firefox or spyware removal - let alone even know it exists
Microsoft will either bundle it for free, increasing the value of their OS (again most people don't know about alternatives) or MS will charge for it, making more $$ - in the end, average joe will think MS is their hero for saving them from spyware (o the irony)
Re:Hate to break it to Microsoft... (Score:5, Funny)
All you have to do is advertise it correctly:
ur WIFE says she wants your big MOZILLA!
watch firefox PLUG every security HOLE at the same time
Re:Hate to break it to Microsoft... (Score:3, Informative)
That statement might be true if the majority of spyware wasn't installed directly by the user's actions and not the browser's.
Re:Hate to break it to Microsoft... (Score:5, Informative)
I personally have always used (and liked) AdAware and Spybot, and as much as I hate to admit this about purely commercial software... I recently had a chance to try Giant.
Slower than a DOJ antitrust proceeding against Microsoft, and takes a similarly budensome level of system resources (100% CPU for over half an hour on a Pentium-M 1.7GHz!), but damned if it didn't find two problems both AA and SB had completely missed (completely as in, not just left inactive fragments lying around, but real live active spyware).
Also, just stop using Internet Explorer. That move right there will cut down at least 90% of all spyware/adware.
Agree completely. The above-mentioned two problems that Giant caught - Well, let me first say that I use Mozilla almost exclusively, only loading MSIE (in a maximally-locked-down configuration) perhaps once a month for sites that absolutely will not work (even with the user agent switcher add-on) in Moz/FF. And both the spies that Giant caught had latched on to MSIE.
Sad. I mean, good to see MS address (one of) their current major weaknesses; but sad that they would use something comparable to an antivirus scanner rather than just fix the security flaws that lead to massive spyware infestations in the first place.
What ever happened to SP2 as the end-all to MS's security flaws?
Reads like a bad translation (Score:5, Funny)
What? Microsoft's anti-spyware software acquired a company? I wasn't aware software could own something, although you can certainly use software to own something - usually windows.
Editors, is it too much to ask that you edit?
Re:Reads like a bad translation (Score:2)
Mod parent up! (Score:2)
Unacceptable! (Score:5, Funny)
Re:Unacceptable! (Score:3, Funny)
Re:Unacceptable! (Score:2)
Only problem is that it's going to be a bit hard to find the rightsholder. If I remember my Greek mythology correctly, Atalanta was last alive about, oh, 4000 years ago.
Wait two weeks... (Score:4, Funny)
Re:Wait two weeks... (Score:3, Interesting)
DOS, Excel, Front Page, IE
were all originaly bought.
Needs improvement (Score:2)
If it works.. (Score:5, Interesting)
Anyone know if it IS going to be free?
Re:If it works.. (Score:3, Funny)
The first one's always free.
Re:If it works.. (Score:3, Insightful)
Anyone know if it IS going to be free?
Having a GPO aware anti-spyware would be good, but I doubt if MS would be allowed to make it free. Certainly I don't think they could bundle it with the OS, because they'd kill the anti-spyware industry at a stroke. Leveraging a monopoly, anybody?
Coral Caches Of The Pics (Score:3, Informative)
http://www.neowin.net.nyud.net:8090/staff/creamha
http://www.neowin.net.nyud.net:8090/staff/creamha
http://www.neowin.net.nyud.net:8090/staff/creamha
http://www.neowin.net.nyud.net:8090/staff/creamha
http://www.neowin.net.nyud.net:8090/staff/creamha
http://www.neowin.net.nyud.net:8090/staff/creamha
http://www.neowin.net.nyud.net:8090/staff/creamha
http://www.neowin.net.nyud.net:8090/staff/creamha
http://www.neowin.net.nyud.net:8090/staff/creamha
http://www.neowin.net.nyud.net:8090/staff/creamha
Heh (Score:5, Funny)
Available through Windows Update? (Score:3, Insightful)
Wasted space? (Score:2)
SpyNet... (Score:2, Interesting)
Sounds a little too much like SkyNet to me
Interesting Move (Score:5, Interesting)
Think about that for a moment. There is plenty of malicious software out there but there is also plenty of "grey" software which drives users nuts but is in reality legal. Is it ok for software to change a user's homepage and install fake ad killers? Can companies no longer sell software which preys on users who are used to quickly hitting the OK button? I'd be interested to know what ISV's Microsoft is now for the first time denying access to Windows even though they develop semi-legit software. Are big legal battles about the start up?
Re:Interesting Move (Score:3, Informative)
It gives a description of what the problem is, explains that its not the actual Messenger plus program that has the problem, but the spyware installed around it, there is the option of ignoring it (selected on screenshot).
I cannot tell from the screenshots whether it comes up on ignore by default, but its at least giving more information than previously.
On a slightly different note, in the neowin forum, some folks are saying "i haven
How long until the EU considers this a monopoly? (Score:3, Interesting)
Re:How long until the EU considers this a monopoly (Score:2)
Damned if they do, damned if they don't. Pretty lame, eh?
Re:How long until the EU considers this a monopoly (Score:5, Funny)
Heh. Yep, just like Honda should profit from the car theft market.
Honda profit from stolen cars. (Score:2)
For you see any car that is recovered has a minimum amount of damage done to it and sometimes a large amount. The bulk of these repairs will be done using certified Honda parts and many of the repairs will be performed at Honda dealerships.
admitting defeat? (Score:3, Insightful)
Re:admitting defeat? (Score:2)
Re:admitting defeat? (Score:3, Insightful)
100% correct. Spyware doesn't *need* insecure-by-design features like ActiveX to spread, that just makes it easier. Social engineering is always going to be available, and if Linux or Mac OS X became sufficiently mainstream then will be problems there as well (probably not to the same extent, but they will exist). The only solution I can see is sandboxing with fine-grained access permissions. The spiffy curs
Re:admitting defeat? (Score:2)
Really? I think that's the best part.
Admitting to the problem is the first step toward fixing the problem.
And so as I type this... (Score:5, Funny)
This product supports versions other than XP (Score:3, Interesting)
Why MS has the advantage (Score:2, Insightful)
Besides, the problem with the hijack stuff is that it's increasingly complicated to figure it out inside of MS's nonsense. Who better to offer protection than the people who invented the comple
Re:Why MS has the advantage (Score:2, Insightful)
It's like the "UFO conspiracy" that the US government has been executing for the last 50 years - do you really think they're that organised???
Re:Why MS has the advantage (Score:3, Informative)
While this is true to an extent, they provided the fuel for said fires. They also have the best programmers in the world working for them...and lots of them. Rest assured they have a stack of paper sitting there with nothing but bugs yet to be discovered by the public. Fixing them and rolling out a patch may be impractical, but at
MS's grad plan? (Score:2, Insightful)
Mirrordot links: (Score:2)
http://mirrordot.org/stories/8b19ec436a9f78511e825 e1cbb5dc270/index.html [mirrordot.org] http://mirrordot.org/media/c5260ec181995ef3d472bcc 0049c5a6c/install1.PNG [mirrordot.org] http://mirrordot.org/media/eb8aff4f358a42e5f76f3f8 bc4033936/setup1.PNG [mirrordot.org] http://mirrordot.org/media/e2f7236ee6118616ca5d3e7 80481fc05/main.PNG [mirrordot.org] http://mirrordot.org/media/ad30fb274ef73d1eb4e3e19 35e731e0b/scan.PNG [mirrordot.org] http://mirrordot.org/media/567ec8d3ee764e87c3b3abc e7202fc31/realtime. [mirrordot.org]
Messenger Plus (Score:2, Interesting)
When installing Messenger Plus, you can agree or disagree to supporting them by having adware thrown all over your PC. I disliked seeing this addition, but just simply disagreed to it to avoid it. Perhaps the person submitting the screens didn't?
(Yes, I'm awar
Re:Messenger Plus (Score:2)
So with behaviour like that I'm glad it's labelled adware, and probably illegal too - seeing as I'd specifically refused to have CWS on my mac
treating symptoms? (Score:3, Insightful)
Am I the only one? (Score:2)
just plain wrong (Score:2)
This is kind of stupid... (Score:5, Interesting)
Disable ActiveX controls.
Is there any legitimate reason for a non-intranet website to use them? Whenever a site requires ActiveX controls to work, I think "Boy, they hired an bunch of idiots to design their site."
They should just modify IE so that ActiveX flat-out doesn't work on any site that isn't explicitly and MANUALLY allowed to by the user or network admin.
Re:This is kind of stupid... (Score:3, Insightful)
MSAV (Score:2)
This is insane. (Score:2, Insightful)
It's like tossing a half-full Dixie cup onto a raging housefire you set in the first place. A half-assed placebo to gull the gullible.
Any Mac or Linux user can te
Easiest way to eliminate Spyware (Score:3, Funny)
can't remove "69.20.16.183 ieautosearch" from host (Score:5, Interesting)
There is a new extreme piece of spyware which seems to have surfaced in the last month.
http://forum.iamnotageek.com/t-78554-1.html [iamnotageek.com]
is the start of a very interesting thread concerning what seems to be the latest generation of spyware.
some of the things that it does include generating randomly named dll's
restarting processes that have been killed, runs IE even in safe mode, drags in a whole raft of other spyware to confuse things and leaves the PC it infects after unsuccessful removal unable to connect to the internet.
This thing is really nasty.
I am pretty sure I was dealing with a case of this yesterday. When adaware was installed and ran on a pc with XP service pack2 It triggered a Reboot due to a failure in dcom with a 1 minute countdown. The worst part was after cleaning with adaware the Pc was unable to connect to the internet unable to get an address from the router.
Manually configuring a network address and setting 192.168.2.1 as the gateway got the network working to the lan pc's.
The router could be pinged successfully but it wasn't possible to reach 192.168.2.1 through firefox netscape or IE to check the router status.
and after several hours of trying this pc refused to connect to the internet.
After banging my head against this brickwall over a period of about 12 hours the only solution was to reinstall XP.
This is the worst spyware I have ever seen, according to the thread the initial attack seems to have occured after a search for the song "over and over" by nelly although a precise location of the source of this infection isn't known.
If you have to deal with spyware on a regular basis check this thread out because you are not going to solve this one just by running adaware and spybot S&D.
http://forum.iamnotageek.com/t-78554-3.html [iamnotageek.com]
This latest spyware really should be submitted as a story on slashdot it is very new, very nasty and it is going to infect a lot of Pc's.
Please mod this up or investigate this yourself and Post about it.
because this is going to be a major disruption to Pc users everywhere, especially with it's defence of blocking the Pc's internet connection when you attempt to remove it.
How long will it work for? (Score:3, Interesting)
If Microsoft starts distributing this as standard software, should we expect to see more spyware that avoids removal in this way? Will users have to reinstall the software, or run it from a boot disk, every time they want to clean their system?
Re:And the motto to go with it... (Score:5, Funny)
Re:And the motto to go with it... (Score:2)
An attempt? (Score:2)
Re:wow... good job at nothing (Score:3, Interesting)
Seriously, back when Microsoft first got their grubby mitts on Virtual PC, the first thing they did was release an updater for it. If that updater did anything at all other than just replace "Connectix" with "Microsoft" everywhere in the program, I couldn't tell you what it was to save my life.
Re:wow... good job at nothing (Score:5, Funny)
Re:wow... good job at nothing (Score:4, Insightful)
Re:wow... good job at nothing (Score:5, Insightful)
Imagine for a moment that the computer is doing more than painting pretty pictures on your monitor (that's the TV-thing on top). Could we agree that a program intended to detect spyware could be substantially modified without altering the appearance to the user?
How did this get modded as "informative"?
Oh, that's right--he bashed MS. Sorry.
Its not entirely baseless, you know... (Score:3, Informative)
When Microsoft purchased VirtualPC for Mac, they released a 'major' update that did nothing more than rebrand the product to Microsoft. No improvements, no fixes, just the window dressing. So while these people are certainly bashing Microsoft, there is a kernel of truth in their sarcasm.
Re:wow... good job at nothing (Score:2, Funny)
They had to stop it from removing IE and Windows Media Player
Re:Already in the works (Score:2, Interesting)
Re:Just fix Windows... (Score:2)