Microsoft Releases AntiSpyware Program 580
Nathan Weinberg writes "Microsoft released this morning Microsoft AntiSpyware, the product of last month's acquisition of GIANT. As I write in my report on my site, the program is very powerful, and certainly measures up to and may even beat Spybot and Ad-Aware. However, it's also pretty buggy, and Microsoft might have already sneaked in a pay subscription service."
Comment removed (Score:5, Informative)
Re:Lots of info left out of the summary... (Score:5, Insightful)
Re:Lots of info left out of the summary... (Score:2, Insightful)
You got that right. Its about time they did something. Talk about TCO. Think of the amount of money spyware ridden Windows machines have costed end users and businesses to repair.
Re:Lots of info left out of the summary... (Score:5, Insightful)
Re:Lots of info left out of the summary... (Score:2, Insightful)
I do not see MS losing a huge market share anytime soon, but with other OS's getting more choices of software for end users as well as ease of installation an
Re:Lots of info left out of the summary... (Score:4, Informative)
Re:Lots of info left out of the summary... (Score:3, Funny)
Re:Lots of info left out of the summary... (Score:3, Insightful)
Re:Lots of info left out of the summary... (Score:4, Interesting)
Hopefully that can be protected against, too... I'm not sure how it's configured in the Registry, perhaps they already encrypt it, but if XP can decrypt it to verify, then someone can debug while it does so...
Re:Lots of info left out of the summary... (Score:2, Insightful)
How long would this 'beta version' have taken to be released, if at all, if it were not for Firefox pushing the standards to a higher level?
Re:Lots of info left out of the summary... (Score:2)
Re:Lots of info left out of the summary... (Score:2, Insightful)
Personally, I think Adaware and SpyBot had more to do with it than Firefox. Not to mention Symantec is now bundling spyware detection into theie security software, and CA just acquire PestPatrol so that they can incorporate it into their software.
It seems to me that Microsoft's closed source products has created so many exploits for malware to take advantage of, tha
Re:Lots of info left out of the summary... (Score:5, Informative)
Reading the review would reveal why the submitter said that. The review says it might have a subscription based on the fact that it had 206 days until it expired. My personal opinion is that the expiration is there because it's Beta, but it may very well lead to a subscription service.
As far as the summary not saying it's a beta... Well, seemed pretty obvious to me. They just bought the company afterall.
Re:Lots of info left out of the summary... (Score:3, Informative)
Re:Lots of info left out of the summary... (Score:2, Interesting)
Something like this would be nice too: "We apologize for all the problems Internet Explorer has caused you our loyal customers. We now have a free anti-spyware for you to use"
With more and more people migrating to alternate browsers, thi
Re:Lots of info left out of the summary... (Score:5, Interesting)
Re:Lots of info left out of the summary... (Score:4, Insightful)
What about to the companies making the spyware in the first place? Do they have a case against Microsoft if they make changes to their dominant OS that intentionally break spyware?
I don't think improving security in an OS, even if it harms third parties who make a profit off your bad security, is going to meet the standards for abuse of a monopoly in the same way that tying a new application that adds features instead of fixing problems to the OS would.
Re:Lots of info left out of the summary... (Score:2, Informative)
Well for one it detected RealVNC as a potential spyware threat, even though it's a low risk one and recommended action is ignore... I remember a while ago when XP came out there was a hassle regarding XP licensing and other non-MS remote software to access the machine...
Re:Lots of info left out of the summary... (Score:3, Informative)
Re:Lots of info left out of the summary... (Score:3, Funny)
It's called Microsoft AntiSpyware. The first half of the name explains the bugs pretty well for me.
Now, what I wanna know: Is clippy involved? "You are trying to clean your machine. Would you like to give us money?"
Re:Lots of info left out of the summary... (Score:5, Interesting)
Or maybe the goons are on their way as we speak. Who knows.
Re:Lots of info left out of the summary... (Score:5, Informative)
Re:Lots of info left out of the summary... (Score:5, Interesting)
2. TIME-SENSITIVE SOFTWARE. The software will stop running on July 31, 2005. You may not receive any other notice. You will not receive any further updates when the software stops running.
and figured OMG SUBSCRIPTION!
Another interesting EULA box is the actual definition of the software's function:
4. POTENTIALLY UNWANTED SOFTWARE. The software will search your computer for "spyware," "adware" and other potentially unwanted software ("Potentially Unwanted Software"). If it finds Potentially Unwanted Software, the software will ask you if you want to ignore, disable (quarantine) or remove it. The software will only remove or disable Potentially Unwanted Software as you instruct it. Removing or disabling the Potentially Unwanted Software may cause other software on your computer to stop working, and it may cause you to breach a license to use other software on your computer, if the other software installed the Potentially Unwanted Software on your computer as a condition of your use of the other software. You should read the license agreements for other software before authorizing the removal of any Potentially Unwanted Software. By using this software, it is possible that you will also remove or disable software that is not Potentially Unwanted Software. You are solely responsible for selecting which Potentially Unwanted Software the software removes or disables.
When I worked at Dell, they wouldn't let us dick with spyware stuff because of potential legal problems -- that is, the law might side with the malware.
Re:Lots of info left out of the summary... (Score:5, Funny)
Is Microsoft coining a new term - PUS? My machine is infected with PUS.
I can see it now...
The following has been identified as PUS. You may choose to keep it, however Microsoft cannot guarantee stability if you allow it to remain installed. Do you wish to disable the following PUS?:
Lilo - Identified as PUS
Re:Lots of info left out of the summary... (Score:2)
I wonder if Microsoft were to sell a subscription "spyware removal tool" that they would be caught in the same legal shit that Ralsky is caught in (Infecting computers with spyware, then trying to sell anti-spyware programs that don't really work)
I mean, granted, Microsoft probably isn't deliberatle
Re:Lots of info left out of the summary... (Score:2, Insightful)
You mean like how makers of P2P software make it possible for people to violate copyright law?
Re:Lots of info left out of the summary... (Score:2, Interesting)
Re:Lots of info left out of the summary... (Score:2)
Especially amusing is the idea MS promotes validation as a user benefit, with no mention that the idea is really a benefit to MS for anti-piracy reasons.
No thanks, Bill. While my Windows is legit, I see no reason to become another record in your databas
Re:Lots of info left out of the summary... (Score:5, Insightful)
Because it's a Beta. Most Microsoft Betas expire.
They don't want customers to run beta software... (Score:5, Informative)
Microsoft has often done this. They don't want customers to run beta software forever. They want the customer to realize that he or she must get the latest version.
Re:They don't want customers to run beta software. (Score:3, Insightful)
After XP SP2 came out, I found that WindowsUpdate v5 for w2k was canceled, I had to go back to v4.
It's obvious that they just didn't want to give anyone the benefit of using a better service on an older OS.
That's the sort of shit MS pulls that makes me not buy or use their products.
Apple has pissed me off pretty well too, mostly i
Information and Release (Score:5, Insightful)
1. Release buggy browser
2. Sell antispyware software
3. Profit?
Direct and indirect download links [tech-recipes.com]
Re:Information and Release (Score:3, Insightful)
Re:Information and Release (Score:3, Informative)
It's a beast when it runs and will easily suck up all available CPU cycles.
It asks if you want to report your spyware information back to the mothership as a way to make that the global big-brother database is kept up to date. It asks at least.
You have to have admin rights to run... but you gotta imagine Microsoft pushing this thing in a few months... much like the SP2 roll-out.
Re:Information and Release (Score:2)
Re:Information and Release (Score:4, Informative)
I ran the scan and it told me that WinPcap was spyware. Is MS trying to kill Ethereal?
NAV (Score:3, Interesting)
Re:NAV (Score:2)
Next Version of Windows.. (Score:2, Funny)
Of course the spyware will be able to make it through backdoors in things like caluclator and notepad, because God knows they're wired to the central part of the Windows kernel!
Re:Next Version of Windows.. (Score:2)
Re:Next Version of Windows.. (Score:3, Funny)
Is this true? Can you link to a source?
Sure, have a look here [reference.com].
Re:Next Version of Windows.. (Score:2)
Re:Next Version of Windows.. (Score:2)
Next version? Windows already does this. Thanks to ActiveX, spyware can install itself to places a locked down user has no rights, and thus the user can't use 3rd party tools to clean w/o logging in w/ administrative rights. It's the dumbest thing I've ever heard.
The only tool I'd accept from Microsoft as an anti-s
What - no support for WinME ?!?? (Score:5, Interesting)
I do understand not supporting NT4 tho..
Re:What - no support for WinME ?!?? (Score:2)
Yeah, but what have you done ($$$) for me lately?
-B. Gates III
Re:What - no support for WinME ?!?? (Score:5, Insightful)
Why?
Because that is what came with the computer. Remember that to most people, a computer is just an appliance like a TV or a VCR. At the same time, I see the number of Windows 98 machines dwindling simply because for the cost of repairs on one of these machines, you can buy a brand-spankin' new Dell box with Windows XP on it and a printer.
Re:What - no support for WinME ?!?? (Score:2, Informative)
Re:What - no support for WinME ?!?? (Score:5, Funny)
supported versions of windows: (Score:3, Insightful)
Great, go windows 98!
I guess all of my relatives will keep using ad-aware and spybot, they refuse to buy a new computer to check their email with.
Re:supported versions of windows: (Score:2)
I must say that releasing a Spyware tool looks to me as they are giving up on their current OS since they tried to fix it time and again with no luck.
A proper design would not let Spyware in at all.
They throw this Spyware Software out the door and pray that Longhorn will make it all better. I bet it will. For sure. This time...
Re:supported versions of windows: (Score:2, Interesting)
well it isn't really a MS product... yet (Score:2, Insightful)
Actually... (Score:4, Insightful)
Spybot S&D immunizes your browser, but spyware can get in other ways too through adware programs. It helps but isn't perfect.
If Microsoft can get a good, real-time scanning software package going, then it might just be onto something.
Re:Actually... (Score:3, Insightful)
Even if it was a known about "yes I want to remove adware from my computer" tickbox for disclaimer purposes.
There is NO way I am ever going to run 2 completely seperate runtime scanners that effectively do an identical job.
Doesnt seem to work (Score:4, Funny)
How dare they (Score:2, Funny)
However, it's also pretty buggy, and Microsoft might have already sneaked in a pay subscription service
Bastards. How dare they! They're in the software business after all.
Re:How dare they (Score:2)
Re:How dare they (Score:2)
In other news, Standard Oil, your only source for oil and oil based products has announced a new product called "don't randomly explode" that prevents your oil and oil based products from randomly exploding due to the recent accidental introduction of high explosives into their shipping oil products. For just $50 a month they can guarantee that none of you cars, lamps, or household soaps explode. Remember Standard Oil is the best, and only, source for your petroleum products, so buy from them or don't, we
Re:How dare they (Score:2)
Vested Interest (Score:4, Insightful)
Re:Vested Interest (Score:2)
Are you implying that MS would now NOT fix bugs and security holes, and maybe only even report them to those with the most money? I am SHOCKED by such an accusation!
I am also saddened to think that that really isn't a change from the current status quo.
Not unless they charge (Score:3, Informative)
Is it a potential problem that open source software business plans are based on services and support - meaning they have a vested interest in keeping their applications difficult to use and fix? I'm not saying it is, but would you?
security center (Score:2)
On a sidenote: Funny how they forgot to change the processname and still shows up as GIANTAntiSpywareMain.exe in task manager
How lovely (Score:2)
You gotta hand it to them - that IS a nice strategy. Not so for the consumers though.
Of all the cheek (Score:3, Insightful)
Whats wrong with this picture. (Score:5, Insightful)
Re:Whats wrong with this picture. (Score:2, Informative)
Re:Whats wrong with this picture. (Score:2)
I've just been told... (Score:3, Interesting)
Re:I've just been told... (Score:3, Informative)
Of course, Remote Desktop offers the same level of exposure, but I haven't heard of any exploits that use it (though I'm happy to be informed on this point).
Re:I've just been told... (Score:2)
Good job MS, keep on innovating! (Score:2, Funny)
I suspect this innovation will be so great it has to be bundled with the OS. Why actually write secure software when you can monopolize a market created around your own insecurity?
It's Giant, big whoop (Score:5, Insightful)
The real question will just be how much effort MS puts into keeping the definitions and program updated as new types of spyware come down the pipeline. As effective as the program is right now, it is how effective it will remain in the ever changing world of spyware that is what really matters.
No beta will answer that question, only the test of time will. But, this is just Giant rebranded and it is a very solid platform, which is why MS bought it in the first place.
Re:It's Giant, big whoop (Score:4, Insightful)
I expect they will keep it up to date and bundle it with future versions of Windows until all the competitors apart from a few small die hard open source programs are left at which point they will get bored and let it languish for five years or so all the time telling people that if they wait until the release of Windows MassiveCock 2012 Professional they will get the new version.
I'm sure there is a precedent to this but for the moment I can't quite remember the details.....
WinPCap flagged... (Score:2, Interesting)
They give it a "low" threat rating, and automagically tell the software to "ignore" it (that is, don't remove it), but I'm still offended.
Then again, if WinPCap is on your system and you don't know what it is, I guess it's not a horrible idea to let the
Re:WinPCap flagged... (Score:3, Insightful)
Unless you're doing something advanced like nmap or ethereal, you have no reason to be running it, and if it's there it's probably there to spy on/exploit your network.
OpenVPN uses it still, as does CoLinux, but let's face it, few people in this tool's audience use those.
XBConnect no longer uses it, IIRC, they have their own packet-capturing engi
Just ran it - some first impressions (Score:5, Informative)
As to the resutls, it turfed up three bits of possible Spyware which Ad-Aware and Spybot were missing/ignoring. The first was what it thought was Kazaa, but was infact Kazaa Lite (I've never had the original Kazaa installed). Second was some legacy registry keys left behind by WeatherBug which had piggybacked its way onto my PC with some shareware some time ago - fixed and reported to Spybot/Ad-Aware. Finally, it detected something called SearchSquire, but this turned out to be part of the Immunization feature of Spybot.
So, aside from the conflicts with Spybot's Immunization feature and the false positive on Kazaa Lite's registry keys, both of which can be fixed by setting the detection to "Always Ignore" it's not a bad little tool at all. Expect of course, for the fact that Microsoft is clearly planning of getting people to pay for this tool according to the webpage and EULA. Hmm. Getting people to pay for cleaning up the mess that you helped create in the first place... Unless this product is *vastly* better than Spybot and Ad-Aware on a thoroughly owned PC, I don't think so, and even then I think not...
Re:Just ran it - some first impressions (Score:2)
That's handy. Now, once this is the default spyware scanner bundled as part of the OS, then the spyware author will just have to update that list when the malware is installed.
Yeah, I know that that list is probably 'protected'. Just like the rest of the OS I suppose.
Re:Just ran it - some first impressions (Score:3, Informative)
It don't eats lot
Microsoft AntiSpyware, yeah it's called Firefox (Score:5, Informative)
Re:Microsoft AntiSpyware, yeah it's called Firefox (Score:3, Interesting)
Spybot and SpywareBlaster (Score:2)
Firefox is spyware? (Score:2, Interesting)
Good thing Microsoft is looking out for me and keeping those darn open source spyware programs away from me...
This I Good But... (Score:2)
This is just crap, and Joe/Josephine Sixpack will never realize how much crap it is. He/She will just merrily download the fix and go on about their day and applaud Microsoft for fixing a huge problem. When actually they did not, Giant did. No one will be the wiser and Microsoft continues on making crap.
And then there is the problem that this is just a bandaid and the underlying problems are not fixed just c
Oh, I had to try this (Score:2)
It detected that well known evil spyware called Timbuktu Pro!
Way to go MS! (clap clap clap) Keep up the great work. You are the wind beneath my wings.
[MUTTER]Yer the wind outta me ass, matey...[/MUTTER]
Two notes... (Score:3, Interesting)
Seriously? (Score:2, Insightful)
Are you people for real? Your UPSET that it found things like VNC and WinPCap?
I've tested it on several machines at work, and it found spyware that Adaware and Spybot couldn't. It did also mark Dameware Mini Remote (a remote desktop program) as potential spyware, as well as the custom hosts file that I put on all machines. I think all these non-spyware programs were set to "Ignore" by default, but its not too hard to set to "Ignore All" if you know it should be there.
My point is, if you use VNC/Damewa
My results (Score:3, Interesting)
- It reported WinPCap as "spyware" (or rather an "enabler", whatever that means), but it did have a default action of "Ignore" associated with it when the scan was done.
- It disovered c:\program files\support tools\remote.exe as the Cyanure Remote Administration Tool, classified as a Severe threat. This is Microsoft-made tool that comes with their Windows 2000 Support Tools.
- Some leftover directories of Hotbar that Adaware apparently did not fully clean up from a previous intentional infection.
This is the first time I've ever seen WinPCap flagged on any kind of spyware scan, kind of find that amusing. Microsoft must hate Ethereal or something. The Remote.exe thing is sort of funny too, but probably not unexpected, though it did not have a problem with the copy of Remote Administrator I have installed on my machine (in server mode no less). It'll be interesting to see how this performs on some intentionally-infected machines, compared to AdAware and Spybot.
Donkeys work for Gator? When pigs fly! (Score:3, Insightful)
Strangely, it identified "Edonkey2000" (I have eMule) as a potential adware carrier. I've never known an ED2k client to show ads. Thankfully, the default action for eMule was "Ignore" and there was an "Ignore always" option as well.
Antispyware has the potential to raise the bar for this type of security application. However, I'm a little worried that this beta will turn out to be the best and most functional iteration of the product. The preferential treatment for IE in the options is to be expected, but it could become a troublesome feature if MS pushes their browser too hard.
Real Time protection not up to snuff? (Score:3, Informative)
I figured I'd test MS AntiSpyware against Lavasofts Ad-watch. I installed 'MSN Toolbar Suite'. That isn't malware but lavasofts program gives me the chance to block the registry modification whereas the MS product pops up a window from the sys tray saying the product doing the registry entry isn't known spyware and didn't let me say yay or nay, instead just disappearing faster than I could read the entire message.
I like the behavior of Ad-watch much better; leaving me in control and not making assumptions for me. I realize the MSN product was install by choice but could other programs slip through MS assumptions?
Re:Slashdot - News that the BBC posted 3 hours ago (Score:2, Insightful)
Get a clue, FFS.
Re: (Score:2)
Re:Validation (Score:2)
Re:An Alternative (Score:2)
* Keep on top of security updates
* Use a NAT box instead of connecting directly to the internet
* Don't use IE
* Don't let other people use your computer
* Don't install every damn piece of software under the sun (be paranoid)
I disabled my virus scanner almost a year ago due to it causing problems copying files over the network. I haven't had any problems. I run Spybot once in a while and all it seems to find are cookies to delete.
The thing about Apple is there are security
Re:Interesting... (Score:2)
It's called heuristics for a reason.
Tom
Re:Interesting... (Score:2, Informative)
Here is their explanation of RealVNC.
Re:Who Is Nathan Weinberg? (Score:2, Funny)
</family_guy>
Wineberg=Weinberg (Score:2)
Re:SPYNET???? RUN.... (Score:2)
Yeah.... "Come with me if you want... V1@gRA at below Canaidan wholesale priX0rZ!!!!!!
Re:i dont know (Score:4, Insightful)
What are you talking about, windows has a better permission structure with ACLs than any unix system did. Most modren unix systems have been adopting Windows style ACLs lately. File locking also exists in windows, and also part of ntfs. Ofcourse you would not have these features in FAT.
If anything is the problem is that people are administrators on their computers and this would be solved if they went the apple sudo model, which I prefer the most.