Feeds

Stop the antivirus vendor hype

Only 800 have ever infected anybody's computer

  • alert
  • submit to reddit

Secure remote control for conventional and virtual desktops

A senior figure in the antivirus industry has spoken out against the misinformation and myths which surround computer viruses - many of which he said arise due to hype from vendors themselves.

David Perry, global director of education for Trend Micro, said the public harbour a number of common misconceptions about computer viruses, due in large part to overstated warnings about viruses from vendors and sensationalist reporting in the media.

Perry, who has spent 10 years in technical support, said: "The problem on help desks is only occasionally fixing the damage caused by computer viruses, it's mostly fixing problems caused by lack of understanding."

His argument is that rumour and innuendo, hoaxes and pop culture create a rich breeding ground for myths about viruses - such as the idea viruses are created by antivirus companies or are able to destroy hardware - that takes focus away from the real issues.

Perry's central point, made in a speech at the 10th Annual European Institute for Anti Virus Research (EICAR) conference in Munich this week, is that misinformed users can actually increase the likelihood of virus infestation, and more needs to be done close the gap between perceived and actual damage caused by viruses.

An example of this knowledge deficit, according to Perry, is that of the 30,000 to 50,000 computer viruses routinely quoted in figures from the antivirus industry, only 800 have ever infected anybody's computer and "only 200 are in circulation".

"The rest are 'zoo' viruses - which are emailed to antivirus companies by virus authors themselves and never make it into the wild," said Perry.

Perry, who himself admits to having over-hyped viruses in the past, said he re-examined his approach after warnings he made about the NewLove virus, a post Love Bug flop, failed to materialise. He argues virus firms need to be more cautious in issuing alerts - despite the temptation to cry wolf.

"The antivirus industry is fiercely competitive. There's millions of dollars to be made and lost and firms gets enormous communication value and mind share when they're quoted in reports of virus outbreaks in the press," said Perry. "The firms who tend to cry wolf are those who need coverage at a particular time, and after an alert is issued things tend to take on a life of their own." ®

Related stories

Anna Kournikova bug drops harmlessly onto the Net
Users haven't learned any lessons from the Love Bug
Virus toolkits are s'kiddie menace
Which country has the most virus infected PCs?
http://www.theregister.co.uk/content/8/17095.html">PC World virus scans offer no real protection
Gnutella users warned of Internet worm

Secure remote control for conventional and virtual desktops

More from The Register

next story
Regin: The super-spyware the security industry has been silent about
NSA fingered as likely source of complex malware family
Why did it take antivirus giants YEARS to drill into super-scary Regin? Symantec responds...
FYI this isn't just going to target Windows, Linux and OS X fans
Privacy bods offer GOV SPY VICTIMS a FREE SPYWARE SNIFFER
Looks for gov malware that evades most antivirus
Patch NOW! Microsoft slings emergency bug fix at Windows admins
Vulnerability promotes lusers to domain overlords ... oops
HACKERS can DELETE SURVEILLANCE DVRS remotely – report
Hikvision devices wide open to hacking, claim securobods
'Regin': The 'New Stuxnet' spook-grade SOFTWARE WEAPON described
'A degree of technical competence rarely seen'
Astro-boffins start opening universe simulation data
Got a supercomputer? Want to simulate a universe? Here you go
prev story

Whitepapers

Driving business with continuous operational intelligence
Introducing an innovative approach offered by ExtraHop for producing continuous operational intelligence.
Why CIOs should rethink endpoint data protection in the age of mobility
Assessing trends in data protection, specifically with respect to mobile devices, BYOD, and remote employees.
Forging a new future with identity relationship management
Learn about ForgeRock's next generation IRM platform and how it is designed to empower CEOS's and enterprises to engage with consumers.
High Performance for All
While HPC is not new, it has traditionally been seen as a specialist area – is it now geared up to meet more mainstream requirements?
Reducing the cost and complexity of web vulnerability management
How using vulnerability assessments to identify exploitable weaknesses and take corrective action can reduce the risk of hackers finding your site and attacking it.