<![CDATA[[SecurityRatty] tag: grisoft]]> http://securityratty.com/tag/grisoft Wed, 01 Aug 2007 15:21:00 +0000 iRatty Engine http://blogs.law.harvard.edu/tech/rss <![CDATA[Detection Rates for Malware in the Wild]]> http://securityratty.com/article/6c1f7d34659a1e926821a4fa36eeaf9a http://securityratty.com/article/6c1f7d34659a1e926821a4fa36eeaf9a Yet another Early Warning Security Event System has been made available to the public, earlier this month. The Malware Threat Center is currently generating automated tracking reports in the following sections :

- Most Aggressive Malware Attack Source and Filters
- Most Effective Malware-Related Snort Signatures
- Most Prolific BotNet Command and Control Servers and Filters
- Most Observed Malware-Related DNS Names
- Most Effective Antivirus Tools Against New Malware Binaries
- Most Aggressively Spreading Malware Binaries

I was particularly interested in the rankings in the "Most Effective Antivirus Tools Against New Malware Binaries" section, especially its emphasis on malware that's currently in the wild. Furthermore, to prove my point, you can see the top 10 list of Anti virus vendors as it were on the 20th, and the top 10 list of anti virus vendors as it were yesterday? Can you find the differences? Grisoft, Avira, Secure Computing and Quick Heal remain on the same
positions, whereas the rest of the vendors are in a different rank, although on the 20th they were exposed to 1030 binaries only, and on the 29th to 1759.

So what? In respect to signatures based malware scanning, every vendor has its 15 minutes of fame, however, as I pointed out two years ago :

"Avoid the signatures hype and start rethinking the concept of malware on demand, open source malware, and the growing trend of malicious software to disable an anti virus scanner, or its ability to actually obtain the latest signatures available."

What has changed? The DIY nature of malware building, the managed undetected binaries as a service coming with the purchase of proprietary malware tools, the fact that malware is tested against all the anti virus vendors and the most popular personal firewalls before it starts participating in a campaign, and is also getting benchmarked and optimized against the objectives set for its lifecycle. Moreover, with malware authors waging tactical warfare on the vendors infrastructure by supplying more malware variants than then can timely analyze, this tactical warfare on behalf of the malicious parties is only going to get more efficient.
]]> Wed, 30 Apr 2008 00:58:01 +0000 malware signatures based malware malware authors source malware malware threat center malware binaries binaries vendors vendors infrastructure Detection Rates for Malware in the Wild <![CDATA[Grisoft changes name to AVG Technologies ]]> http://securityratty.com/article/5a3811a8868692ed4d907a1f0eccaf60 http://securityratty.com/article/5a3811a8868692ed4d907a1f0eccaf60 Wed, 06 Feb 2008 21:00:00 +0000 avg technologies grisoft Grisoft changes name to AVG Technologies <![CDATA[Links for 2008-01-14 [del.icio.us]]]> http://securityratty.com/article/75c7cadff5e52894f2b8ad3292fcdc1a http://securityratty.com/article/75c7cadff5e52894f2b8ad3292fcdc1a
  • Nick Selby’s Blog » Grisoft/EPL, SANS and some anti malware trend stuff
    • ]]>     Mon, 14 Jan 2008 21:00:00 +0000 sans Links for 2008-01-14 [del.icio.us]     <![CDATA[Keeping the Computer in Good Condition Using Free Spyware Adware Programs]]> http://securityratty.com/article/96668b6f4a73cc03058443bf7743d084 http://securityratty.com/article/96668b6f4a73cc03058443bf7743d084
    Ever downloaded something from the web and the next thing that happens, you notice something goes wrong with the computer? When something like this happens, there is a very big chance that the system has been infiltrated by a virus, spyware or adware.

    Everyone surely knows how dangerous viruses can be. It can shutdown the entire computer that will cost the individual a lot of money just to have it repaired. But what about spyware and adware? How dangerous are these?

    Spyware are programs designed to send certain information back to the programmer. This may include bank account numbers, credit card numbers and anything else important. Someone can use this to buy items without the owner really knowing until the bill comes which is already too late to do almost anything.

    Adware on the other hand will show pop up ads that are really quite annoying even if the person did not log into that site. It might inform the user there is a virus in the computer even if there is none and those who click on it will get it thus causing more problems.

    Given that this problem has happened in homes and in offices, software companies have come out with various versions of spyware and adware programs to help get rid of it. The program will first eliminate the existing ones in the computer and then create a firewall keeping future ones from entering.

    The individual will notice that some of these are free while those made by the major corporations charge a certain fee. This can either be bought from the store or downloaded from the web, which usually comes with a free trial period that will surely impress and eventually make the customer buy it.

    Having a software program that can fight against spyware and adware will help prevent damage from happening to the computer. In fact, since there are new threats everyday, the designers have even come up with updates that can be uploaded automatically keeping everything in check.

    The person can choose to pay but given that it performs the same function, why not get the kind that is free?

    One good example is Ewido designed by the Grisoft Group. It can handle spyware and adware as well as other threats such as Trojans, dialers, worms and keylogger.

    Spybot Search and Destroy is another popular brand. This is compatible for windows based operating systems, which has been recommended for use by both PC Magazine and PCMag.com.

    Adware is another known program. If the user will use this for personal things, then this can be downloaded for free. Those who use it for commercial purposes will have to pay a small fee.

    Those who choose to download the spyware and adware program for free should be careful. This is because there are some that are bogus and when downloaded, can cause big problems to the computer. This can be prevented by doing some research first and then deciding what to do next.

    Computer security should be everyone’s concern. A simple slip up or ignoring this could be disastrous later on because the cost for repairing the unit could almost be the same as buying a new one.

    With that, it is up to the individual whether to get one that is free or pay a little extra to be able to feel safe at all times.]]>     Wed, 01 Aug 2007 15:21:00 +0000 adware programs adware computer spyware free adware program entire computer free trial period handle spyware Keeping the Computer in Good Condition Using Free Spyware Adware Programs