The Register® — Biting the hand that feeds IT

Feeds

Microsoft: Malware for Windows on the rise

Attack of the killer password stealers

Regcast training : Hyper-V 3.0, VM high availability and disaster recovery

Malware and unwanted software made strides in the first half of 2008, according to the latest security intelligence report from Microsoft, which tallied a 43 percent increase in the number of programs exorcised by the the company's malicious software removal tool.

In the first six months of this year, there were some 62 million disinfections on 23.8 million machines, according to the report which was published Monday. In the second half of last year, 42 million programs were removed on 15 million computers. Because it runs on hundreds of millions of machines worldwide, Microsoft's MSRT, or malicious software removal tool, functions as something of a bellwether for the state of successful attacks affecting Windows computers.

The increase was driven in part by the addition of new strains of malware that the MSRT checks for, said Jeff Williams, principal architect for the Microsoft Malware Protection Center. Win32/Taterf, a family of worms that steals login credentials for a host of online games, was one such addition and was removed 2.7 million times.

Other causes included the growing aggressiveness of established malware families. Win32/Zlob, a trojan that has bedeviled Windows users for years, was removed 7.5 million times.

The report "tells us that people still don't understand the level of threat, that perhaps they don't think they're a target," Williams told The Register.

The MSRT runs once a month during installation of Microsoft's monthly security patches. When malware is found, users are notified of the disinfection, and anonymized data is relayed back to Microsoft.

Microsoft's report, which is designed to act as a snap shot of the changing threat landscape, also showed a 13 percent industry-wide rise in the number of reported vulnerabilities rated as high severity by the common vulnerability scoring system. The figure included vulnerabilities in software made by Microsoft as well as third-party companies. The increase came even as the overall number of vulnerabilities decreased 4 percent compared with the second half of 2007.

Microsoft's data also showed that 90 percent of the reported vulnerabilities affected applications, rather than operating systems.

No doubt, long-time Microsoft critics will view the report as proof that the company's software is riddled with weaknesses that make users hopelessly vulnerable to the net's more nefarious elements. We see it a bit differently. To us, the data is evidence that users who use a firewall and anti-virus program and patch both Windows and third-party applications religiously aren't at much more risk than users of other platforms.

More importantly, it shows Microsoft's willingness to openly acknowledge the giant elephant in the room, that being the threat that every computer user faces a host of threats each time he logs on. This isn't something vendors such as Apple have dared to admit. At least not yet. ®

Agentless Backup is Not a Myth

Latest Comments

The simple way to stop malware

Don't run as root. Of course, Windows _MAKES_ you do it, so it's no wonder it's insecure.

0
0

How many machines?

Perhaps if MS ran their tool on more than "hundreds of machines worldwide", they'd get more meaningful results?

Just at thought.

0
0

Well...

I use Windows, and Vista at that. I do patch regularly. I have firewall and AV. I don't expect it to keep me safe, so I try to be careful when browsing. I've had an XP computer for the past few years, and done the same. I can't remember the last malware/virus infection I had. Then again, I've also used Ubuntu for the past year, and liked it a lot. Didn't get any viruses on that either.

Maybe I'm just lucky.

Penguin, save me from the flamers!

0
0

More from The Register

 breaking news
NSA PRISM snoop-gate: Won't someone think of the children, wails Apple
10,000 things probed, mostly about missing kids, Alzheimer patients, we're told
 breaking news
NSA PRISM-gate: Relax, GCHQ spooks 'keep us safe', says Cameron
Whatever they are up to, it's all above board, we're told
PRISM snitch claims NSA hacked Chinese targets since 2009
Snowden suddenly looks safer in Hong Kong after revelations
 breaking news
US chief spook: Look, we only want to spy on 6.66 BEELLLION of you
Americans assured they are not in the NSA's sights
Speech-to-text drives motorists to distraction
Will talking to you mean I crash into that car up ahead, Siri?
 breaking news
Number of cops abusing Police National Computer access on the rise
Only a telegram from the Queen can get you off it
DHS warns of vulns in hospital medical equipment
Has your doctor's anasthesia machine been hacked?
 breaking news
'BadNews is malware' says outfit that found it
Google says code harmless but Lookout says code base is evolving
Panda-peddlers cuffed for chess gambling gambit
More porridge on the menu for Chinese coders after second offence
 breaking news
Yes, maybe we should keep hackers in the clink for YEARS, mulls EU
Watch out black hats, they just might throw away the key