Recent Posts

Community

Email Notifications

Personal Links

Archives

Harry Waldron - IT Security

Security Developments, Software Updates and Best Practices

Windows Vista - More secure than reported to combat 1st "virus"

 Lee Holmes, works on the team building the Vista Monad scripting environment.  In his blog, he shares a great response on the new Damon "virus" variants (5 so far) designed to interact with the new Vista Monad environment.

This is a good read as it is chockful of great security points (e.g., think before you click, use non-admin accounts, don't use out-of-the-box security defaults, etc).

Lee Holmes Blog - Monad and the "First Vista Virus"

Windows Vista - First Proof-of-Concept MSH based Virus

QUOTES: 

It's a misleading title, as it's an issue that affects any vehicle for any executable code on any operating system.

To protect yourself against the point of entry, follow the guidance suggested by Microsoft's Malware FAQ: The best way to stop viruses is to use common sense. If an executable computer program is attached to your e-mail and you are unsure of the source, then it should be deleted immediately. Do not download any applications or executable files from unknown sources, and be careful when trading files with other users.

To limit the amount of damage that the malicious code can do, try to limit the amount of time you run as Administrator / root. 

To combat this, Monad has three features to help: not installing a shell association by default, configurable execution policies (along with digitally signing scripts,) and not running scripts from the current directory.

As for not running scripts in the current directory, Monad follows a policy similar to that of Unix shells: we do not run them, unless you explicitly ask us to.