Virus Bulletin - October 2007

Editor: Helen Martin

Technical Consultant: John Hawes

Technical Editor: Morton Swimmer

Consulting Editor: Ian Whalley, Nick FitzGerald, Richard Ford, Edward Wilding

2007-10-01

Abstract

Gateway scanning is not enough! (comment); Oh, Vienna! (conference report); The need for an in-house SMTP honeypot (feature); OpenOffice security and viral risk - part two (technical feature); Exepacker blacklisting (feature)


Comment

Gateway scanning is not enough!

'Why is the number of malicious attachments decreasing - and why shouldn't I be happy about it?' Paul Dickens, Institute of Physics Publishing.

Paul Dickens - Institute of Physics Publishing, UK


News

Wot, no comparative?

VB100 Netware comparative delayed.



Alarm over possible PDF flaw

Vulnerability announcement hyped to disaster level.



Trivia

Panda reveals country with lowest level of infected PCs.



Malware prevalence report

August 2007

The Virus Bulletin prevalence table is compiled monthly from virus reports received by Virus Bulletin; both directly, and from other companies who pass on their statistics.



Conference report

Oh, Vienna!

Helen Martin reports on three packed days of presentations, networking, a little bit of gambling and a lot of fun at VB2007 in Vienna.

Helen Martin - Virus Bulletin, UK


Feature

The need for an in-house SMTP honeypot

By blocking port 25 at the firewall, an organization can prevent a mass-mailer from spreading. However, by blindly blocking outgoing SMTP traffic, valuable data is lost on threats that use port 25. Vinoo Thomas and Nitin Jyoti discuss the benefits of redirecting vs. blocking internal SMTP traffic.

Vinoo Thomas - McAfee Avert Labs, India & Nitin Jyoti - McAfee Avert Labs, India


Technical feature

OpenOffice security and viral risk – part two

In the conclusion of his two-part article presenting an up-to-date evaluation of the security of OpenOffice, Eric Filiol looks at security issues in OpenOffice integrity management and draws conclusions about the overall security of OpenOffice.

Eric Filiol - Army Signals Academy, France & Jean-Paul Fizaine - Army Signals Academy, France


Opinion

Exepacker blacklisting

The blacklisting of exepackers by AV products is a controversial subject with opinions among the AV community varying widely. Gabor Szappanos takes a balanced view and discusses the pros and cons of exepacker detection.

Gabor Szappanos - VirusBuster, Hungary


Late addition: Comparative review

VB comparative review: Novell NetWare 6.5

John Hawes puts 10 anti-malware products through their paces on Novell NetWare 6.5.

John Hawes - Virus Bulletin


The comparative review is also available as a standalone PDF.



Calendar

Anti-malware industry events

Must-attend events in the anti-malware industry - dates, locations and further details.



Spam Bulletin

Spam Bulletin - October 2007

Anti-spam news; Boosting email anti-spam filters using an ensemble of SVM classifiers (feature)



Quick Links

Poll
The Japanese government is reported to have commissioned a 'defensive virus'. Is 'defensive' malware ever a good idea?
Yes
No
I don't know
Leave a comment
View 11 comments

99 Subscription Promo

Malware Prevalence
Autorun |#######|
Encrypted/Obfuscated |#####|
Heuristic/generic |#####|
Sality |####|
Zbot |####|
 View this month's full report

Virus Bulletin currently has 224,238 registered users.