MVP Jubo Security Blog : Spyware

An Online ticket?!?

jubo — Mon, 22 Sep 2008 14:28:00 GMT

What a surprise... This morning I was happily working at the office, hhmm... okay, from home..., when Outlook notified me that I had received an email. When I checked it was from an unknown company USA3000 Airlines. When I read the email they even had a ticket for me and had charged the credit card for $646.27. I thought, that should be at least a ticket to fly across the pond. Well, could have been a surprise from my wife since she's visiting family in the USA. But no, I unzipped the file and there was a file called: "eTicket.doc.exe" and... not detected by McAfee's antivirus program... yet... Submitted the file to VirusTotal and you can find the result here.

Then I also submitted the file to McAfee's WebImmune and they found a "new detection" and named it "spy-agent.bw". Not really a new one but a new variant. Not long after that I received an "Extra.dat" file from AvertLabs for some extra protection. See also McAfee's Avert Labs Blog: Invoice Spam Takes Flight

No e-ticket for me this morning... but the computer is still safe. Now I only wonder how it came through the company's security. They run Symantec stuff...

Malware Removal Guides at Bleepingcomputer

jubo — Sat, 07 Jul 2007 17:24:00 GMT

More spyware and malware removal guides are posted at Bleepingcomputer:

For more malware removal instructions, see the Spyware and Malware Removal Guides and Reading Room at Bleepingcomputer.

Windows AntiSpyware (Beta): Analysis Approach and Categories

jubo — Sat, 19 Mar 2005 10:32:00 GMT

Published: March 10, 2005

Introduction

Microsoft® Windows® AntiSpyware (Beta) is a security technology that helps protect Windows users from spyware and other potentially unwanted software. The scanning engine in Windows AntiSpyware (Beta) uses a definition library of over 100,000 threat files and settings. Spyware threats, like viruses, continue to emerge, and as a result, the Microsoft research team regularly adds new forms of spyware and other potentially unwanted software to the Windows AntiSpyware (Beta) definition library.

This white paper provides an overview of the approach and criteria categories currently used by the Microsoft research team to analyze and classify software. This is an emerging topic, with new forms of spyware and other potentially unwanted software developing rapidly along with their related behaviors. As a result, the approach and criteria categories described in this paper may change over time to adjust to the environment.

Full article: Microsoft Security at Home

What you can do about spyware and other unwanted software

jubo — Sun, 26 Dec 2004 17:17:00 GMT

Part 1: What is spyware?

Published: September 29, 2004

Spyware is a general term used for software that performs certain behaviors such as advertising, collecting personal information, or changing the configuration of your computer, generally without appropriately obtaining your consent. You might have spyware or other unwanted software on your computer if:

You see pop-up advertisements even when you're not on the Web.
The page your Web browser first opens to (your home page) or your browser search settings have changed without your knowledge.
You notice a new toolbar in your browser that you didn't want, and find it difficult to get rid of.
Your computer takes longer than usual to complete certain tasks.
You experience a sudden rise in computer crashes.

Spyware is often associated with software that displays advertisements (called adware) or software that tracks personal or sensitive information. That does not mean all software which provides ads or tracks your online activities is bad. For example, you might sign up for a free music service, but "pay" for the service by agreeing to receive targeted ads. If you understand the terms and agree to them, you may have decided that it is a fair tradeoff. You might also agree to let the company track your online activities to determine which ads to show you.

Source: Microsoft Security At Home: Spyware

Continue reading to learn the signs of a spyware infection, how to get rid of spyware, and how you can prevent spyware from getting on your computer.

Microsoft Statement on Sunbelt Claims to GIANT Technology

jubo — Sat, 18 Dec 2004 14:43:00 GMT

REDMOND, Wash., Dec. 17, 2004 -- On December 16, 2004, Microsoft announced that it acquired GIANT Company Software, a provider of anti-spyware and Internet security products, to help protect customers from the threat of spyware and other deceptive software. While the terms of acquisition and legal agreements made by Giant prior to the acquisition are confidential, Microsoft would like to clarify some of the issues that have been raised regarding the ownership terms of the anti-spyware technology acquired by Microsoft.

Microsoft's upcoming beta solution for spyware, and any product offerings that Microsoft may subsequently deliver based on Giant technology, will be owned solely by Microsoft, and in no way will be co-owned by any third party.

Anti-spyware solutions require definition updates-signatures of known spyware and other unwanted software-that are necessary to keep the solutions up-to-date. Because of a legal agreement between Sunbelt Software Distribution and Giant that preceded the Microsoft acquisition, Microsoft will provide spyware signature updates to Sunbelt through July 2007.

Microsoft strongly recommends that customers use an anti-spyware solution in addition to following the three simple steps outlined at http://www.microsoft.com/protect: Use an Internet firewall on all PCs, update all PCs regularly with the latest security updates, and use up-to-date antivirus software.

Source: Microsoft PressPass

Microsoft Acquires Anti-Spyware Leader GIANT Company

jubo — Thu, 16 Dec 2004 18:56:00 GMT

New Offerings Will Help Customers Keep SpywareAnd Other Deceptive Software Off Their Computers

REDMOND, Wash. -- Dec. 16, 2004 -- Microsoft Corp. today announced that it has acquired GIANT Company Software Inc., a provider of top-rated anti-spyware and Internet security products. Microsoft will use intellectual property and technology assets from the acquisition to provide Microsoft® Windows® customers with new tools to help protect them from the threat of spyware and other deceptive software. In addition, key personnel from GIANT Company will be joining Microsoft's security efforts.

"Spyware is a serious and growing problem for PC users, and customers have made it clear that they want Microsoft to deliver effective solutions to protect against the threat," said Mike Nash, corporate vice president of the Security Business and Technology Unit at Microsoft. "Through this acquisition we're excited to be able to provide near-term relief to Windows customers by offering new technology to help keep spyware and other deceptive software off their PCs."

Source: Microsoft PressPass
See also: Microsoft: Security At Home