PDA

View Full Version : How good is MSAS at detecting trojans?


big_bob
August 14th, 2005, 02:24 AM
I know it's a called MS Anti Spyware but does MSAS still find some trojans? How good is it at detecting trojans? Has anyone ever seen a list of how many trojans it will find? Can it be relied on for your main AT? Or does it only find a few trojans, and therefore you would still require a regular AT? How good is its realtime protection at finding trojans compared to a manual scan for them? Thanks if anyone knows.

Tom772
August 14th, 2005, 06:29 AM
-{ Quote: "I know it's a called MS Anti Spyware but does MSAS still find some trojans? How good is it at detecting trojans? Has anyone ever seen a list of how many trojans it will find? Can it be relied on for your main AT? Or does it only find a few trojans, and therefore you would still require a regular AT? How good is its realtime protection at finding trojans compared to a manual scan for them? Thanks if anyone knows." }-Its does find some trojans, keyloggers, spyware and a whole other range of scumware, but there are alot of false postives, it is though pretty good at monioring system changes - there may be a thread at wilders that talks about this program.

Hope this helps

T

siliconman01
August 14th, 2005, 06:52 AM
On a scale of 1-10 (10 being best for trojans), I'd rate MS Antispyware at a 2...not very good at all. Excellent trojan detectors are TrojanHunter at www.misec.net, Ewido at www.ewido.com, and KAV at www.kaspersky.com. I'd rate KAV as best, TrojanHunter as No.2 and Ewido as No.3 (but improving).

Just my opinion and experience. ;)

abhi_mittal
August 14th, 2005, 07:06 AM
MSAS is junk. It comfortably sits in your tray and does NOTHING!! While my avast home definitely stops a few trojans from creeping in.

Smokey
August 14th, 2005, 07:09 AM
-{ Quote: "I know it's a called MS Anti Spyware but does MSAS still find some trojans? How good is it at detecting trojans? Has anyone ever seen a list of how many trojans it will find? Can it be relied on for your main AT? Or does it only find a few trojans, and therefore you would still require a regular AT? How good is its realtime protection at finding trojans compared to a manual scan for them? Thanks if anyone knows." }-
The target of MS AntiSpyware are NOT trojans.

Like the name already explain: it is anti-SPYWARE.

Take a look here (http://www.microsoft.com/athome/security/spyware/software/about.mspx)

Smokey
August 14th, 2005, 07:18 AM
-{ Quote: "MSAS is junk. It comfortably sits in your tray and does NOTHING!! While my avast home definitely stops a few trojans from creeping in." }-
Junk?::)

In my tray it sits not only, it have waked up me up a few times with warnings about spyware.
Analyze of the warnings: no false positives, really spyware.

BTW: about junk, the Babylon dictionary say:

n. material which has been thrown out or discarded, trash, refuse, something which is useless or worthless; heroin or other narcotic (Slang)

n. flat-bottomed Chinese sailing ship with square sails

v. throw out, get rid of, trash

JRCATES
August 14th, 2005, 08:50 AM
-{ Quote: "It comfortably sits in your tray and does NOTHING!!" }-

Ahhhh....but just wait until you decide to uninstall it. That's when it will rear it's ugly head and be a royal pain! Seriously, this is one of the more difficult software apps to completely remove and uninstall from your PC. I thought that Norton and AOL were bad, buuuuut.....

abhi_mittal
August 14th, 2005, 10:39 AM
-{ Quote: "Ahhhh....but just wait until you decide to uninstall it. That's when it will rear it's ugly head and be a royal pain! Seriously, this is one of the more difficult software apps to completely remove and uninstall from your PC. I thought that Norton and AOL were bad, buuuuut....." }-

Couldnt agree More!!

The Hammer
August 16th, 2005, 12:26 PM
-{ Quote: "Ahhhh....but just wait until you decide to uninstall it. That's when it will rear it's ugly head and be a royal pain! Seriously, this is one of the more difficult software apps to completely remove and uninstall from your PC. I thought that Norton and AOL were bad, buuuuut....." }-
Could you elaborate on your difficulties?

Trekk
August 16th, 2005, 02:58 PM
I didnt have any trouble uninstalling it. It took all of 2 minutes and didnt cause any problems :")



One more thing....it is free.


Trekk

ErikAlbert
August 16th, 2005, 04:11 PM
-{ Quote: "Ahhhh....but just wait until you decide to uninstall it. That's when it will rear it's ugly head and be a royal pain! Seriously, this is one of the more difficult software apps to completely remove and uninstall from your PC. I thought that Norton and AOL were bad, buuuuut....." }-

Any software that isn't able to uninstall itself properly, makes itself ridiculous and indicates already a poor programming.
No way to whitewash this, not for me.

Once the uninstaller of a program is started by the user, the uninstaller should close the program completely and automatically and then start the uninstalling procedure.
Alot of (ignorant) users forget to close the program FIRST, when they start the uninstaller. If that happens the uninstaller should take care about that.

Wai_Wai
August 16th, 2005, 04:36 PM
-{ Quote: "The target of MS AntiSpyware are NOT trojans.

Like the name already explain: it is anti-SPYWARE.

Take a look here (http://www.microsoft.com/athome/security/spyware/software/about.mspx)" }-

In fact, the name itself is misleading.
It holds true for all AV, AT, AS.

Now let us see what these labels really mean based on what the companys are really doing now
AV = NOT only just for anti-virus, it is capable of getting trojans-related malware too.
AT = this one is really mainly deal with trojan-related software.
AS = NOT just for spyware & adware. AS also take care of trojans-related malware too.

So ignore the misleading labels and try to re-delimit their scopes.
I try to outline the scope of each type of program is focusing (ie wht aspects of malware do they mainly handle):
(Methodoloy: First, look at all programs of the same kind. Second, mark what type of malware each program of the same type can handle. Third delimit their scope based on the the results.)
AV: pre-requisite: must focus on virus(-related) threats. Also focus on macro, worms, scripts, trojans, keyloggers, dialers, and miscellaneous (harmeful**) malware.
AT: pre-requisite: must focus on trojan(-related) threats. And that's it! For other aspects, they do (very) little.
AS: pre-requisite: must focus on spyware(-related) threats. Also focus on adware, hijackers, trojans, keyloggers, dialers miscellaneous (harmeless**) malware.
** here "harmful/harmless" refers to the (intentional) damage done on the computer. Some malware may aim to screw the computer (similar to virus but the behaviour is not the same as virus). I call them as harmful malware. to the contrary, harmles malware is more to do with privacy intrusion, advertising, tracking (simliar to spyware/adware but the behaviour is different). I call them as harmless malware.


Conclusion
AV = AV&AT
AT = AT
AS = AS&AT

richrf
August 16th, 2005, 05:28 PM
I would never trust MSAS to clean a machine of trojans. My favorites to clean out trojans are Kasperky AV and Ewido (TDS-3 use to be on this list). To prevent, I prefer Kaspersky AV, Ewido, and ProcessGuard.

Rich

JRCATES
August 16th, 2005, 08:01 PM
-{ Quote: "Could you elaborate on your difficulties?" }-
It just did not do a clean uninstall for me (using Windows own Add/Remove). It left behind a ton of files and folders that I had to manually remove. And it wasn't just the left behind junk, but during the uninstall it seemed to be holding on for dear life and wouldn't go easily (and that was even though I had not only disabled it, but removed it from the startup programs list through WinPatrol, and completely exited the program through the sytem tray icon). I did a search through "Start>Search" and found dozens of left behind referrences to the program that I had to delete manually. Then I ran my registry cleaners which found several registry keys that had been left behind. Not a pretty experience....

ErikAlbert
August 16th, 2005, 08:14 PM
I'm already afraid to uninstall my MSAS.
Uninstall is the opposite of install, which means that each object of the software has to be removed completely as if the software was never there.
Is that so difficult for programmers, who made the software themselves ?

Tom772
August 16th, 2005, 08:50 PM
Hi,

I feel you guys are being harsh about MSAS, it dosnt uninstall amazingly, but tell me how many other prgrams uninstall all of there files perfectly, most programs will most certainaly leave some files in programs files, start up entries and even sometimes registry keys etc, etc.

Its not that hard manually deleting these left files really is it? I know it is a pain though!!


Tom

2bach
August 16th, 2005, 09:15 PM
-{ Quote: "Hi,

I feel you guys are being harsh about MSAS, it dosnt uninstall amazingly, but tell me how many other prgrams uninstall all of there files perfectly, most programs will most certainaly leave some files in programs files, start up entries and even sometimes registry keys etc, etc.

Its not that hard manually deleting these left files really is it? I know it is a pain though!!


Tom" }-

I think it's called MS bashing ;) It's very common to target the big guy on the block. Though I don't often hear any praises for MS offering a FREE anti-spyware program. Some folk are just never satisfied, no matter what they get for completely FREE. I agree that nearly every program will leave it's folder in program files, and some other stuff behind, and you don't hear them complaining about that....strange don't you think.

JRCATES
August 16th, 2005, 09:33 PM
-{ Quote: "I think it's called MS bashing ;)" }-

No, not really. Not from my part anyway. All you have to do is click on my username and read all of my previous posts, and you'll see that I have stated several times that I am NOT a part of the "bash Microsoft" crowd, and I have defended Microsoft more often than not. But when it comes to MSAS, I just realize that there are major problems with the uninstallation.

And Tom, you're right.....several programs do not do a clean unistall....but some are worse than others. MSAS fits into the "much worse" category. ;)

ErikAlbert
August 16th, 2005, 09:49 PM
-{ Quote: "Hi,
I feel you guys are being harsh about MSAS, it dosnt uninstall amazingly, but tell me how many other prgrams uninstall all of there files perfectly, most programs will most certainaly leave some files in programs files, start up entries and even sometimes registry keys etc, etc.
Its not that hard manually deleting these left files really is it? I know it is a pain though!!
Tom" }-

Do you call that a good excuse ? No wonder that so many softwares have a bad uninstall program.
Even the knowledgeable users don't even care.

Don't these programmers have any respect for themselves and do it right like real professionals do in stead of acting like amateurs ?
They just don't care about quality.

Free or paid has nothing to do with the quality of a program, those programmers were paid to write a free program and MS has money enough.

Deleting manually isn't that hard ? For you maybe, but not for ignorant users (the majority).
They don't even know what registries are, when those are not deleted by the uninstall program.

Bashing MS ? No, not at all, I have PITY with MS that doesn't even know how to use all that money in the benefit of the users.
:)

Tom772
August 16th, 2005, 10:29 PM
To be honest i havnt had that many problems with MSAS, but then i havnt unistalled it yet. I wasnt trying to say that you were 'Microsoft Bashing';) but i do think it is a nice addition ' for the average home user to add to his/hers protection as long as its free. When it comes to paying for it i think i might feel the same way as you guys do, but until then i will probably keep using it.

Take Care T

ErikAlbert
August 17th, 2005, 03:03 AM
tom772,
I still use MSAS, mainly because it's free. I'm married with MS, but that doesn't mean I'm happy with MS.

We users made MS filthy rich and I expect from MS QUALITY, SAFETY and CREATIVITY in return and certainly when money isn't problem.
Not many companies have the same possibilities as Microsoft and in spite of that, these smaller companies create better softwares than Microsoft and that's what bothering me the most.
What are they doing with all that money at MS ? Spending it on drinks and lunches ? Buying companies ? Certainly not on what I want as a user.

I replaced my browser MSIE with FIREFOX and it took me a long time to do this, because I had already a browser (MSIE).
Firefox isn't only safer, but a very comfortable browser.
Why isn't Microsoft able to create such a browser, which is the most important tool to get access to the internet.
Why recommend security websites to replace MS Outlook with Thunderbird ? Because it's also safer.
Where is the spam filter in MS Outlook ?
Why do people replace the Windows Defragmenter with Diskeeper ? Because it's better.
Even Notepad and Regedit have better alternatives.
And I could go on and on.

Maybe all that money is Microsoft's biggest problem, they aren't motivated anymore to make their dreams true.

siliconman01
August 17th, 2005, 03:47 AM
-{ Quote: "What are they doing with all that money at MS ? Spending it on drinks and lunches ? Buying companies ? Certainly not on what I want as a user." }-

Well, here's one awesome thing they are doing with some of the money.

http://www24.homepage.villanova.edu/david.zawitkowski/acc1001/billgates.htm

Trekk
August 17th, 2005, 08:56 AM
Wow! 23 Billion? Not many other corporations laying down that kinda jack. I do agree though, the software is free and meant for "Johnny Enduser". If you are a "Power User" or someone who frequents these boards, you probably arent using it anyway. And if you are and it doesnt uninstall properly? ITS FREE! Get over it....


Trekk!

Tom772
August 17th, 2005, 07:31 PM
-{ Quote: "tom772,
I still use MSAS, mainly because it's free. I'm married with MS, but that doesn't mean I'm happy with MS.

We users made MS filthy rich and I expect from MS QUALITY, SAFETY and CREATIVITY in return and certainly when money isn't problem.
Not many companies have the same possibilities as Microsoft and in spite of that, these smaller companies create better softwares than Microsoft and that's what bothering me the most.
What are they doing with all that money at MS ? Spending it on drinks and lunches ? Buying companies ? Certainly not on what I want as a user.

I replaced my browser MSIE with FIREFOX and it took me a long time to do this, because I had already a browser (MSIE).
Firefox isn't only safer, but a very comfortable browser.
Why isn't Microsoft able to create such a browser, which is the most important tool to get access to the internet.
Why recommend security websites to replace MS Outlook with Thunderbird ? Because it's also safer.
Where is the spam filter in MS Outlook ?
Why do people replace the Windows Defragmenter with Diskeeper ? Because it's better.
Even Notepad and Regedit have better alternatives.
And I could go on and on.

Maybe all that money is Microsoft's biggest problem, they aren't motivated anymore to make their dreams true." }-

Why isn't Microsoft able to create such a browser, which is the most important tool to get access to the internet. - To answer your question, why should Microsoft it beat Netscape!! So they were last Web Broswer, so they had no reason to improve and add new features, until Firfox began taking maket share. Now look they are going to release IE 7, this summer. Microsoft are like any big Multinational Corp in America, Europe, and Britian, in other words in less they are force to update, improve they wont!

But then again , i believe MS, are trying to be a different and better company in the long term, becasue if they dont who will trust them and buy there software. Companies in Europe and Asia are already turning to Linux for there needs, at the end the day MSAS is based on a good program that they purchased, so even if it dosnt uninstall perfectly.

Take care T

Trekk
August 18th, 2005, 01:53 PM
Hey peeps,

I have used several of the non-ms based browsers over the years, and like most of you I have gone through my Microsoft bashing phase. One thing I have noticed is this; Microsoft has more issues because there are more people using the product and thus, more people to notice and point out issues. Firefox and others along that line, have issues just like any other application. We just tend to notice more of them from IE because 20 million people are using it at any given time. Hackers dont set out to crack Firefox, there just isnt any glamour in it. Thousands of them spend countless hours looking for holes in anything with the Microsoft logo. In theory; by bringing so much attention to these issues-exploits, you are in fact adding fuel to the fire and making it more appealing for other hackers-crackers. I realize Microsoft has an endless flow of cash, but we as end users dont see everything they are working on behind the scenes.

When was the last time any of you could say you were perfect?


Trekk

richrf
August 18th, 2005, 01:59 PM
-{ Quote: "But then again , i believe MS, are trying to be a different and better company in the long term, becasue if they dont who will trust them and buy there software. Companies in Europe and Asia are already turning to Linux for there needs, at the end the day MSAS is based on a good program that they purchased, so even if it dosnt uninstall perfectly.

Take care T" }-

My experiences with MS are that they are primarily (exclusively?) concerned with making money, without any real concern with user security. If there is any belated concern (e.g. MSAS), it is only because there is a perceived "market" with which they can make more money (e.g. One Care), especially since the growth in their primary OS and Office markets has slowed considerably.

If you are a Microsoft shareholder, you get back some of the money and time lost with MS in the form of dividends. For the rest of us, it is non-stop grief. It is pretty straightfoward to build a reasonably safe operating system. MS Windows has so many problems because it was designed to "peek into" users desktops - not protect them. So be it. When I think the time is right, I'll switch to another operating sytem. It will probably be a few more years though. I am thinking that Apple may get into the "operating system business" once they port their OS to the Intel chip.

Rich

Trekk
August 18th, 2005, 02:12 PM
Rich,

It is reasonably easy to build an OS, correct. It is not however easy to build one that nobody will try to find an exploit for, especially when your Microsoft. I think you need to take a step back, and rethink your general position. Your looking at this from a single user point of view. Microsoft is the largest OS supplier, with this title they subject themselves to every wannabe hacker on the planet. What better praise from your elders then being able to say you hacked into Microsoft's OS, found a weakness, and exploited it to show everyone how smart you are. Microsoft has its weaknesses, but you need to pay more attention to the losers who are creating the problems (hackers). If these morons werent always trying to break it, the average user wouldnt even realize it needed fixed.

Also, show me a corporation who isnt interested in making money?>


Trekk

richrf
August 18th, 2005, 02:33 PM
Hi Trekk,

There is a continuum, and MS Windows is at the extreme end of a monstrosity. There are ways to "secure" systems" as opposed to "opening them up" so that every Tom, Dick, and Harry, can do what ever they want to do. On a scale of 1 -10, in terms of how Windows NT was initally designed, I would give it a 1. In terms of MS's efforts to fix the giant holes that they created, I'll give them a 4 - but they were only responding to enormous bad publicity from the press.

It is alright for them to make money. And it is also alright for me to say that the the way that they are making money is at my expense. Sort of like the way Enron made money (for a period of time) at the enormous expense of California utility users. MS is not a company I trust, and hopefully other companies over time can address this market. If not, then I can make do. But I will not give any credit to MS, who's Windows design is the basic source of all the security problems.

So to answer you question. Yes, MS could have done much better. Was it within their means? Absolutely. Why didn't they do it? Because they didn't care.

Rich

dog
August 18th, 2005, 02:44 PM
-{ Quote: " MS is not a company I trust, and hopefully other companies over time can address this market. If not, then I can make do. But I will not give any credit to MS, who's Windows design is the basic source of all the security problems. " }-Not to take this thread OT, but there are lots of other solutions out there Rich ... Linux 100s of variants, Unix multiple variants, MAC OS ... have you ever actually tried any of them? BTW they all have some weaknesses/security holes too ... but open source stuff tends to get patched rather quickly. If you do decide to try a Linux Distro I would suggest you start with SuSE. ;)

Trekk
August 18th, 2005, 03:13 PM
I dont trust any company who is after my money :) Anytime you include the all mighty dollar in the picture, the level of dishonestly increases exponentially. I dont think they are as evil as everyone says, I do however think they are guilty of releasing their OS's to soon in the interest of showing a quick ROI. I also dont like how they use us all as guiney pigs, instead of issuing a version of an OS, then waiting for the hackers to show the exploits, they need to spend more time looking for weaknesses prior to release. Im simply pointing out ALL operating systems have vulnerabilities, Microsoft's are just noticed more since they own so much of the market.

One more thing; Microsoft is NOT the cause of the security issues, the people who exploit them are. Please dont make the mistake of ignoring the dirtbags who create these virus' etc, THEY are the cause of the millions of dollars in lost productivity.


Take Care,

Trekk

richrf
August 18th, 2005, 03:14 PM
-{ Quote: "Not to take this thread OT, but there are lots of other solutions out there Rich ... Linux 100s of variants, Unix multiple variants, MAC OS ... have you ever actually tried any of them? BTW they all have some weaknesses/security holes too ... but open source stuff tends to get patched rather quickly. If you do decide to try a Linux Distro I would suggest you start with SuSE. ;)" }-

Thanks for the reference dog. I will probably be investigating alternatives at the beginning of next year. But I will continue to look out for users experiences with products such as SuSE.

Thanks.

Rich

Starrob
August 18th, 2005, 03:42 PM
-{ Quote: "
I am thinking that Apple may get into the "operating system business" once they port their OS to the Intel chip.

Rich" }-

See http://www.wilderssecurity.com/showthread.php?t=93713

Trekk
August 18th, 2005, 03:44 PM
-{ Quote: "See http://www.wilderssecurity.com/showthread.php?t=93713" }-

Nope! They are just the largest so the most focused on. Its sad to say, but I think people are mostly jealous because Gates was just a common schmuck with good timing.

ErikAlbert
August 18th, 2005, 03:53 PM
Sorry guys, but all the arguments that have been mentioned to whitewash MS, don't satisfy me.

Charity ? Most people give money to charity, not all of us have $23 billion dollars to spend on charity like MS.
What has charity to do with development of software anyway ? I don't see the connection.

The most spread OS and any other software in the world is of course the most vulnerable one.
Even Firefox, one of the safest browser, will become a target of the bad guys and it's already happening.
As I said before, you have to run faster than the bad guys. Which means brains, research and above all motivation.
A company and certainly not MS, doesn't wait until their software is hacked, they have to work constantly on that problem.

One of the basic rules of testing is that you NEVER use the same group of people, who created the OS, for testing.
These people aren't good in testing, because creating and testing software isn't the same.
I'm not talking about bugs in software due to bad coding, beta testers will find these errors easily.
I'm talking about security holes within bug-free softwares.

That's why you need another group of people to test an OS.
A test group that has only one goal : crack the OS in every possible way they can and report it to the developers.
And you don't give that job to people with an average I.Q., because they won't find anything or only the easy security holes.
That's why you need brilliant people, that think like the bad guys and do everything to destroy the OS.
That requires a total different attitude and way of thinking, than creating an OS.
How long the testing of an OS has to be ? Until the NEXT OS is ready for testing.
That doesn't count only for OS, that counts for every software, even MSAS.

And please don't try to convince me that a bad uninstaller is an excuse for freeware.
There are some BASIC RULES in good programming, that NEVER change and UNINSTALLING is one of them.
An uninstaller that doesn't work is due to poor programming. Period and being freeware has nothing to do with it.
Each programmer, that respects himself, will never make a bad uninstaller, not the programmers, I know in real life.
They are ashamed for each mistake they made in their programs and they will correct them as soon as possible.

If I hurt somebody, sorry about that, I'm really a nice guy, but I have my opinions about computer softwares and I have a language problem, which doesn't make it easier for me to explain things in a more diplomatic way like I do in my own language (Dutch).

Trekk
August 18th, 2005, 03:55 PM
No offense taken at all Erik. We are all entitled to our opinions, and everyone has a different perspective.

Take Care Bud,

Trekk

richrf
August 18th, 2005, 04:11 PM
-{ Quote: " There are some BASIC RULES in good programming, that NEVER change and UNINSTALLING is one of them. An uninstaller that doesn't work is due to poor programming. " }-

That's the way I see it. Any beta tester could have told MS (for example) that their uninstaller does not complete back out MSAS. It is rather simple. But if a company doesn't care, it doesn't care. And there is nothing anyone can do about it, except avoid the product. In any case, I couldn't dream of a situation where I would trust MS to secure any aspect of my computer. There is only one MS product that I use, by default, and that is Windows XP. And most of the other products that I have purchased in the last year (maybe all) have been to secure XP so that I can use Firefox to browse the Web.

Cya,
Rich

JRCATES
August 18th, 2005, 04:47 PM
So....

Does anyone think that security software companies like:

DiamondCS
Webroot
Ghost Security
McAfee
Norton/Symantec
Sunbelt
PC Tools
Kaspersky Labs
Lavasoft
Privacy Software Corporation
Mischel Internet Security
Computer Associates
Eset
Soft4Ever
Agnitum, Ltd.
BillP Studios
Zonelabs, Inc.
Emsisoft
StarForce
Greatis Software
Softwin
Authentium
Kerio Technologies
Norman
Trend Micro
Panda Software
PestPatrol, Inc.
Tall Emu
SalD Ltd.
FRISK Software
etc.
etc.
etc., ..........

*are all upset that Microsoft has some flaws with it's operating system?

*Has anyone thought that perhaps without these flaws, that these businesses don't exist?

*And without these businesses in existence, there's an aweful lot of people either out of work or in a different professional other than the one they've chosen?

*And that if that's the case, the world economy is in a totally different position?

So while Microsoft's operating system flaws are being exploited by people who have bad intentions.......it has also provided an aweful lot of other people OTHER THAN MICROSOFT an opportunity to MAKE MONEY and keep the economy rolling. And this has helped put people to work, and provide them with a livelihood and a means necessary to put their IT and computer science degrees to work and to use?

So go ahead and bash the "computer giant" if you want to, but when you do...just realize that Microsoft not only offers a product for tens of millions of users....but also employs several thousands of people as well. And if not directly, indirectly by allowing the above type security software vendors the opportunity to exist and to employ people themselves in this marketplace.

Besides, Trekk was right earlier when he said "Microsoft is NOT the cause of the security issues, the people who exploit them are." This is so very true.

SEE....it can always be spun to be looked at as a positive....if you want and/or allow it to be. ;)

ErikAlbert
August 18th, 2005, 06:03 PM
JRCATES,
I agree with you and the security industry offers indeed alot of jobs/hobbies for many people.
That's the only good side of malware, it puts food on the table for all, who are involved.

I thought about this too, but even that doesn't make sense to me and I will explain it.

1. Malwares are created by malware writers and in most cases their work is destroyed by anti-malware writers, who detect/remove their malware.
What is the final result : NOTHING, because that what was created is destroyed.

2. Users are infected by malware and they remove it, no matter how long it takes.
What is the final result : NOTHING, because the infection was removed.
They just brought their computer from malware-free back to malware-free.

The whole malware/anti-malware industry is based on "create and destroy" without any positive result.
It's like building a bridge and then destroy that bridge and we still don't have a bridge.
Even worse, we all waste our talent, our money and above all our time on NOTHING.

Well I can create alot of jobs that are based on "create and destroy".
Don't we have better things to do than working without results to be proud of ?
There are SO MANY OTHER problems in the world that need a solution, let us take care about them in stead of creating and removing malware.

JRCATES
August 18th, 2005, 06:37 PM
-{ Quote: "
I thought about this too, but even that doesn't make sense to me and I will explain it.

1. Malwares are created by malware writers and in most cases their work is destroyed by anti-malware writers, who detect/remove their malware.
What is the final result : NOTHING, because that what was created is destroyed.
" }-
True

-{ Quote: "2. Users are infected by malware and they remove it, no matter how long it takes.
What is the final result : NOTHING, because the infection was removed.
They just brought their computer from malware-free back to malware-free." }-
True again

-{ Quote: "The whole malware/anti-malware industry is based on "create and destroy" without any positive result.
It's like building a bridge and then destroy that bridge and we still don't have a bridge.
Even worse, we all waste our talent, our money and above all our time on NOTHING." }-

OK, well this is where I differ somewhat, Erik. By security software vendors CREATING a product that counters what the nasty developers want and are trying to do, and the user is saved from harm and returned to a normal state....there IS positive taking place. The bridge was rebuilt!

Think of it this way: There are criminals in society. No matter how much those of us law-abiding citizens do not want them to be there, they still exist. OK....now think of a society without COPS (Police). The criminals would reign supreme. So the security vendors are more or less the internet/PC Cops....making sure that the "bad guys" don't have the upper hand. And by having Police on duty, people are put to work in a legal and ethical fashion, and people are protected and criminal activity deterred and punished somewhat. Criminal activity still exists, but not to the degree that it would if there were no police (who are earning a living and providing the means to support their family) on patrol.

OK, I know...it's not the perfect analogy...it's flawed. Just like Microsoft's operating system. But honestly, if Microsoft was in the position of Linux.....and Linux was in the position of Microsoft (marketshare wise).....who does everyone think the "hackers" and malware authors would be targetting? It would no longer be Microsoft, I'd bet my bottom dollar on that!

-{ Quote: "There are SO MANY OTHER problems in the world that need a solution, let us take care about them in stead of creating and removing malware." }-
And I agree with this as well. But it's not a perfect world, and there is no perfect operating system. And unfortunately, there are criminals who will continue to be criminals no matter what roadblocks or obstacles (i.e. - Police) we throw in their way. So while it is frustrating to those of us who don't want to "worry" about malware, it's going to exist - like it or not. So the best thing to do is prepare ourselves, and handle it the best way accordingly.

It's like the expression...."If someone hands you a lemon, make lemonade!" In other words, make the best of a bad situation.....and in the case of Microsoft, they're the "bad situation" because they are targetted by the malware authors simply because they have the marketshare that will affect the most customers. Everyone wants to be the guy that "defeated the champion". Or remember the children's game "king of the hill" that kids play? Where everyone tried to knock the guy standing on top of the hill off of the hill so they could be standing on the top of it? That's really why Microsoft is targetted so much by the bad guys, not because of "horrible design strategy", but primarily because of marketshare.

thinkdeeper
August 18th, 2005, 06:54 PM
I think something some people are forgetting here is that MSAS is still beta software, so why should it function flawlessly? Beta software usually has flaws and bugs, and you agree to test the software and report any bugs found. I hope that's what the folks bitching here so much, about a piece of beta software, are doing. Nobody made you try a beta software program. You should be reporting all bugs to MS so they can be fixed.

richrf
August 18th, 2005, 07:37 PM
-{ Quote: "SEE....it can always be spun to be looked at as a positive....if you want and/or allow it to be. ;)" }-

Hi John,

I have X amount of disposable cash/time available to me. I can spend part of it securing XP or I can use it to do something enjoyable - such as purchasing a book. The former I consider necessary, but "wasteful" (since a decent operating system would have avoided this whole problem), the second I consider a pleasure in life.

As for the AV/AT companies, they are fulfilling a need in the marketplace, because MS doesn't care about security. Kudos to those who do provide security, and the Bronx cheer for MS. ;)

Cya,
Rich

richrf
August 18th, 2005, 07:46 PM
-{ Quote: "I think something some people are forgetting here is that MSAS is still beta software, so why should it function flawlessly? Beta software usually has flaws and bugs, and you agree to test the software and report any bugs found. I hope that's what the folks bitching here so much, about a piece of beta software, are doing. Nobody made you try a beta software program. You should be reporting all bugs to MS so they can be fixed." }-

Hi thinkdeeper,

This problem could be fixed in less than one programmer day if MS wanted to. But, as the saying goes: "You can lead a horse to water, but you can't make it drink." MS is a company that simply doesn't care about these kind of things. It costs money to fix and doesn't make money. Pretty simple.

Cya,
Rich

JerryM
August 18th, 2005, 08:37 PM
I was unable to update MSAS, and so disabled it with Win Patrol. I also have Counterspy which is what I depend upon for AS.
I understand that if you have both on your machine, and uninstall one of them it causes all sorts of problems. For that reason I have not uninstalled MSAS.

I like Counterspy, and will stick with it. I had no objection to MSAS, except at the point where I was unable to update. I tried a lot of things, but finally gave up. I don't miss it, and suppose that since I have a lot of room on my harddrive it can just sit there forever.

Jerry

ErikAlbert
August 18th, 2005, 09:24 PM
@JRCATES,
What you said in your last post makes also sense. We can't allow the bad guys taking over the internet.
Sometimes I have to remove the frustration in my brain and write it down in a post to get rid of it ;D .

@RICHRF,
I fully agree with your last post too.
The uninstaller is a separate program of MSAS with a total different function than the scanner and should work properly from the start, beta or not.

Notok
August 19th, 2005, 11:48 AM
-{ Quote: "
This problem could be fixed in less than one programmer day if MS wanted to. But, as the saying goes: "You can lead a horse to water, but you can't make it drink." MS is a company that simply doesn't care about these kind of things. It costs money to fix and doesn't make money. Pretty simple." }-I think the main problem here is that for every X number of home users that want MS to change that stuff, you've got a mega corporation (with thousands of licenses) that demands the opposite. MY opinion is that they need to create a real home version that is more secure for home users (not just the same thing with the ability to conotrol/secure those components removed).. it's mostly the enterprise level features that have a lot of these bugs.. you can do a lot by just disabling those features. There will still always be problems, though.. don't forget that there were Mac virii until it became more profitable to write malware exclusively for PC. It may be "straight forward" to write a secure operating system (since I'm not a programmer, I can't really say), but it's quite another thing to make a secure operating system suitable for literally billions of people and companies alike. Split them up (home users and businesses), and I think you might have a chance, though.

But I agree.. if you're paranoid that MS is out to spy on you, there are plenty of alternatives. Try out Knoppix for a while, you won't have to install anything.

justwondering
August 19th, 2005, 11:55 AM
-{ Quote: " It may be "straight forward" to write a secure operating system (since I'm not a programmer, I can't really say),
" }-

Well that makes sense. But I don't need to be a programmer or even need to have even seen other Operating systems to say windows design is unsecure.

.
-{ Quote: "
But I agree.. if you're paranoid that MS is out to spy on you, there are plenty of alternatives. Try out Knoppix for a while, you won't have to install anything." }-

I also have a stack of ubuntu cds, they seem to be appearing everywhere free, 2 CD pack, one of them is a live CD that runs without installing.

Works great.

Wai_Wai
August 21st, 2005, 03:16 AM
-{ Quote: "JRCATES,
I agree with you and the security industry offers indeed alot of jobs/hobbies for many people.
That's the only good side of malware, it puts food on the table for all, who are involved.

I thought about this too, but even that doesn't make sense to me and I will explain it.

1. Malwares are created by malware writers and in most cases their work is destroyed by anti-malware writers, who detect/remove their malware.
What is the final result : NOTHING, because that what was created is destroyed.

2. Users are infected by malware and they remove it, no matter how long it takes.
What is the final result : NOTHING, because the infection was removed.
They just brought their computer from malware-free back to malware-free.

The whole malware/anti-malware industry is based on "create and destroy" without any positive result.
It's like building a bridge and then destroy that bridge and we still don't have a bridge.
Even worse, we all waste our talent, our money and above all our time on NOTHING.

Well I can create alot of jobs that are based on "create and destroy".
Don't we have better things to do than working without results to be proud of ?
There are SO MANY OTHER problems in the world that need a solution, let us take care about them in stead of creating and removing malware." }-

It's really sad there are so many malware in the world.

As a matter of facts, the world is not all roses. We have police who catch bad guys. We have shop-detectives to catch thieves, and so on. All these postions are somewhat wasteful. But since there are bad guys, the resources spent are not really wasteful. Sad but true.

The best solution is to prevent them from becoming bad guys in the first place. Nowadays the education system focus too much on teaching people knowledge, but they don't realise the importance of teaching them to use their knowledge on the right/good side.

No matter how knowledgeable a person is, if it uses his talents on bad side, what's the point? We are just helping these bad guys to do evil things.

Ethics and morals are what we should really learn nowadays.

Trekk
August 23rd, 2005, 03:05 PM
Ethics and morals are best taught in the home. I dont need a teacher to do my parenting for me :)