BOClean message 11/26/2003

In addition to the update posting from today:
http://www.wilderssecurity.com/showthread.php?t=16861

Quotes from the update notification from Kevin:

Apologies to all for yet another update - the world of malware has
literally EXPLODED since Microsoft's last "update" and new holes in
Internet Explorer where people STILL allow "active scripting" to be turned
on - trojans are being detected in copious quantities as well on so MANY of
our customer's machines. Worst we've ever seen. Thus another update as it's
once again "zero hour" for yet more spammer takeover tools, exploitation
ad-ware and rootkits. Folks who are unprotected are getting hammered.

Even our OWN customers are seeing BOClean getting busy as soon as they hit
a site and files start coming in, while their file scanners sit there fat,
dumb and happy. Never seen anything LIKE this in all the years we've been
doing this. The "spyware" people have started hiring the former "backdoor"
people and have begun using the same techniques as actual trojans. And
unlike the normal situations where an AV catches it coming in as a file,
more people have been reporting BOClean activity than ever before, and
while BOClean has dealt with it, want to know more about what happened.

With questions. Unfortunately, owing to the workload, we can choose to
find and deal with the nasties, do email, or write reports and "newspeak"
... our highest priority has to be finding and dealing with, THEN email,
and there's just no time for "book reports." For anyone who's sent email,
please bear with us - we're QUITE overloaded this week. We're doing all we
can to keep up with the email, but defeating the nasties has most of us
away from our workstations of late just trying to keep up.

Eight new nasties today for a total of 2552 UNIQUE trojans (14,753
trojans, rootkits, adware, spyware, keyloggers and other malware in total,
including all variants) covered in today's update for BOClean 4.11. Come
and get it at:

http://www.nsclean.com/update.html

 

Hmmm...... Very interesting.

 

When Kevin says "while their file scanners sit there fat, dumb and happy", methinks he is addressing any AT software that doesn't have effective real-time protection. In other words, some of the very ones that the "experts" tout as "the best available".

Maybe those scanners should just have dialogs that say "Hey, your private information went out the pipe earlier today. Or was it yesterday? Oh well, shall I delete some files for you?"

 

That may be the correct interpretation in this case, but I've read enough of Kevin's opinions to believe it could apply as I initially interpreted. Of course, he'd never post that sort of opinion here, in "Edit Land".