Re: Microsoft AntiSpyware falling further behind

Duston Sickler <[email protected]>
Newsgroups gmane.comp.security.virus
Message-ID <[email protected]>
Hello Mr. Travis,

While I agree that AntiSpyware from all venders has a long way to go I 
would hope they would concentrate on binary detection over cookies.  In 
comparison cookies pose little security risk.  I would much rather have 
a AntiSpyware app that did no cookie detection but did an excellent job 
of of stopping rouge binaries from landing on my HDD.

Hope everyone is having a good week,

Duston Sickler, A+, MCP
www.shonsey.com

Quark IT - Hilton Travis wrote:

>Hi All,
>
>It seems that not only does Microsoft AntiSpyware recommend that
>Claria's spyware is ignored, but it also misses a significant amount of
>cookies that are placed on a system - I have a VPC environment where I
>browse the Internet so that anywhere I go won't affect my regular
>Windows session/installation.  Regularly CounterSpy is detecting cookies
>(such as Cok.ad.yieldmanager, CGI-Bin, Cok.AssassinTrojan2.0 and Zedo
>(from yesterday's browsing)) that Microsoft AntiSpyware simply does not
>know about.
>
>Now, this is not only disappointing, but potentially dangerous.  Any
>customer or end user running Microsoft AntiSpyware or CounterSpy is not
>being protected from these cookies, and MSAS doesn't even detect them -
>that's right, neither program's active monitoring is stopping the
>installation of these cookies, but at least CounterSpy is detecting them
>post-installation.
>
>AntiSpyware is far, far from the accuracy of antivirus, especially
>something like NOD32.  I wonder how long it will be before a decent
>AntiSpyware application is released that, like NOD32 does with viruses,
>actually stops spyware *before* it is installed?
>
>--
>
>Regards,
>
>Hilton Travis                          Phone: +61 (0)7 3344 3889
>(Brisbane, Australia)                  Phone: +61 (0)419 792 394
>Manager, Quark IT                      http://www.quarkit.com.au
>         Quark Group                   http://quarkgroup.com.au/
>
>Microsoft Small Business Specialists
>
>http://www.threatcode.com/ <-- its now time to shame poor coders 
>into writing code that is acceptable for use on today's networks
>
>War doesn't determine who is right.  War determines who is left.
>
>This document and any attachments are for the intended recipient 
>  only.  It may contain confidential, privileged or copyright 
>     material which must not be disclosed or distributed.
>
>  
>
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.