Crackers Evolve to Dodge Anti-Virus Software in Windows

Dr. Roy Schestowitz

2010-05-08 18:52:33 UTC
Modified: 2010-05-08 18:52:33 UTC

Summary: A fully 'protected' and patched Windows installation cannot be secured due to new tricks and hidden vulnerabilities that Microsoft conceals from the public

A FEW days ago we wrote about Joanna Rutkowska's observations and mentioned her firm's use of GNU/Linux. Yesterday we found this article from The Register, which speaks about anti-virus software being ineffective in the face of a new pattern of attacks.

Researchers say they've devised a way to bypass protections built in to dozens of the most popular desktop anti-virus products, including those offered by McAfee, Trend Micro, AVG, and BitDefender.

Ghabuntu recommends Ubuntu GNU/Linux as a preventive measure and also argues that:

It is a very serious issue which can have a devastating consequence in the lives of a lot of people. However, there is still hope. The research did not make any mention of this anti-virus as being such an easy to evade guard.

Anti-virus software has been useless for quite some time. Authoritative figures spoke about these issues for years and McAfee went as far as doing more harm than good last month.

According to several independent sources, about one in two Windows PCs is a zombie PC and Microsoft carries on lying about the number of vulnerabilities/patches in order to give the illusion that things are improving when it fact they never did. Microsoft is just lying about its patches, as before. Anti-virus software can't do anything about it and here in Techrights we opine that the public has the right to know the truth. ⬆

Comments

Yuhong Bao

2010-05-13 01:50:00

The attack is on SSDT hooking, which MS and others has been warning against for years and even tried to prevent via PatchGuard in x64 versions of Windows. The Nynaeve blog by Ken Johnson, a Windows kernel-mode expert who joined MS after this was written, has an example of a buggy SSDT hook that has security problems: http://www.nynaeve.net/?p=210

'Dark Patterns' or a Trap at the European Patent Office (EPO): insincere if not malicious E-mail from the EPO's dictators
There's an Abundance of Articles About the New Release of Kali Linux, But This One is a Fake: It can add nothing except casual misinformation (fed back into the model to reinforce lies)
IBM's Leadership Ruining Lives of People Who Thought Working for IBM Would be OK: Nobody gets fire-lined for buying IBM?
The United States' Authorities Ought to Become Enforcers of the General Public License (GPL) for National Security's Sake: US federal agencies ought to pursue availability of code and GPL compliance (copyleft), not bans
The Problem of Microsoft Security Problems is Microsoft (the Solution is to Quit Microsoft) and "Salt Typhoon" Coverage Must Name CALEA Back Doors: Name the holes, not those who exploit them.
A "Year of Efficiency": No, we don't mean layoffs
Microsoft: "Upgrade" to Vista 11 Today, We'll Brick Your Audio and You Cannot Prevent This: Windows Update is obligatory, so...
The Unspeakable National Security Threat: Plasticwares as the New Industrial Standard: Made to last or made to be as cheap as possible? Meritocracy or industrial rat races are everywhere now.
Microsoft's All-Time Lows in Macao and Hong Kong: Microsoft is having a hard time in China, not only for political reasons
[Meme] "It Was Like a Nuclear Winter": This won't happen again, will it?
If You Know That Hey Hi (AI) is Hype, Then Stop Participating in It: bogus narrative of "Hey Hi (AI) arms race" and "era/age of Hey Hi" and "Hey Hi Revolution"
Bangladesh (Population Close to 200 Million) Sees Highest GNU/Linux Adoption Levels Ever: Microsoft barely has a grip on this country. It used to.
Over at Tux Machines...: GNU/Linux news for the past day
IRC Proceedings: Thursday, December 19, 2024: IRC logs for Thursday, December 19, 2024
Gemini Links 19/12/2024: Fast Year Passes and Advent of Code Ongoing: Links for the day
Twitter is Going to Fall Out of Top 100 Domains as Clownflare (DNS MitM) Sees It: evidence of Twitter's (X's) collapse
[Meme] Making Choices at the EPO: Decisions, decisions...
Large and Significant Error Correction in South America?: Windows now has less than half what Android achieved in terms of "market share"
Links 19/12/2024: Astronaut Record and Observer Absorbed: Links for the day
Links 19/12/2024: Seven Dirty Words and Isle Release v0.0.3 (Alpha): Links for the day
Links 19/12/2024: Nurses Besieged by "Apps", More Harms of Social Control Media Illuminated: Links for the day
15 Countries Where Yandex is Already Seen to be Bigger Than Microsoft (in Search): Georgia, Syrian Arab Republic, Cyprus, Moldova, Ukraine, Armenia, Azerbaijan, Kyrgyz Republic, Uzbekistan, Kazakhstan, Turkmenistan, Tajikistan, Belarus, Turkey, and Russia
Links 19/12/2024: Magnitude 7.3 Earthquake and Privacy Camp: Links for the day
Gemini Links 19/12/2024: Port Of Miami Explosion, TurboQOA, Gnus: Links for the day
Fake Articles About 'Linux': Dated yesterday
Over at Tux Machines...: GNU/Linux news for the past day
IRC Proceedings: Wednesday, December 18, 2024: IRC logs for Wednesday, December 18, 2024
FSF Has Made It Halfway to Its Target (Funding Goal) a Week Before Christmas Day: $400,000 definitely seems reachable now, especially if they extend the "deadline"
[Meme] The Master Churnalist: Speaking of press releases being passed off as "journalism"
Spamnil's TFiR: Still Pretending Press Releases Are 'Articles' (TFiR 'Originals' as Plagiarism or Fluff): Same as last year
Links 18/12/2024: Zakir Hussain Dies, TuneIn Layoffs: Links for the day
Links 18/12/2024: Karate Love and Advent of Code: Links for the day
Windows (or Microsoft) Has Become the "One Percent" (Market Share) in Chad: How long before it falls below 1%?
Arvind Krishna, IBM's CEO, Will Eventually Suck Up to Donald Trump Like His Predecessor Did or the Watson Family Did With Adolf Hitler: Literally Hitler
Being a Geek Need Not Mean Being Sedentary: "In the past 18 months," Berkholz writes, "I’ve lost 75 pounds and gone from completely sedentary to fit, while minimizing the effort to do so (but needing a whole lot of persistence and grit)."
GAFAM Kissing the Ring of the Mafia Don: "resistance" to dictatorship and defenders of democracy?
Slop Spaghetti From the Chef, Second Time Today: Fresh slop ready out the oven!
IBM - Like Microsoft - Lies About the Number of People It's Laying Off (Several Tens of Thousands, Not Counting R.T.O. "Silent" Layoffs and Contractors/Perma-Temps): How many waves of silent layoffs have we seen so far at IBM this year?
Links 18/12/2024: EU Launches Probe Into TikTok (At Last!): Links for the day
Links 18/12/2024: Doha/Qatar Trafficking, Bloat Comfort Zone, and Advent of Code 2024: Links for the day
Saving What's Left of Decent and Independent Journalism on the Web: We increasingly (over time) try to make local copies (hosted on our server) of important documents; it's hard to rely on third parties
[Meme] Microsoft's Latest Marketing Pitch: "Stop Being Poor; buy a new PC with TPMs"
In South Africa, a Very Large Nation, Web Developers Can Already Ignore Microsoft Browsers (Edge Measured Below 3% in 55 Nations): The dumb assumption you must naively test with Microsoft browsers is no longer applicable in a lot of places
Open Source Initiative (OSI) is the Voice of Bill Gates and Satya Nadella: Not hard to see what they've done with the money
Microsoft Boasts That Its (Microsoft-Sponsored) "Open Source AI" Propaganda Got Cited in Media (That's Just What the Money Did): This is a grotesque openwashing campaign
In Many Places Around the World, Perhaps as Expected, Yandex is Nearly Bigger Than Microsoft (Like in Several African Countries): Microsoft may soon fall to "third place" in search
Keeping Productive This Christmas: We've (pre)paid for hosting till almost January 2026 and fully back on the saddle
IBM and Canonical Leave Money on the Table Because Microsoft Pays Them Not to Compete and Instead Market Windows, WSL, Microsoft 'Clown Computing', and TPMs: Where are the regulators?
Other Editors Who Agree "Hey Hi" (AI) is Just Hype But Won't Say So Publicly as It Might Upset Key Sponsors: Some media would gladly participate in a scam to make money
Brian Fagioli's Latest "Linux" Article Appears to be Fake: Another form of plagiarism/ripoff using bots?
IBM (and Red Hat) is a Patent Troll, Still Leveraging Software Patents to Extract Money Out of Other Companies by Suing Them: Basically, when it comes to patents, IBM is demonstrably part of the problem, not the solution
Over at Tux Machines...: GNU/Linux news for the past day
IRC Proceedings: Tuesday, December 17, 2024: IRC logs for Tuesday, December 17, 2024

Crackers Evolve to Dodge Anti-Virus Software in Windows

Comments

Recent Techrights' Posts