VB - 2008 02 Virus Bulletin - February 2008

Virus Bulletin - February 2008

Editor: Helen Martin

Technical Consultant: John Hawes

Technical Editor: Morton Swimmer

Consulting Editors: Ian Whalley, Nick FitzGerald, Richard Ford, Edward Wilding

2008-02-01

Abstract

Malware vs. anti-malware: (how) can we all survive? (comment); Crimea river (virus analysis); How to disable WFP using physical disk information (virus analysis); Assessment war: Windows services (feature); VB2008 Ottawa (call for papers); Windows Server 2003 (comparative review)


Comment

Malware vs. anti-malware: (how) can we still survive?

‘Well executed and comprehensive tests will light the way to better products.’ Andreas Marx, AV-Test.org

Andreas Marx - AV-Test.org, Germany


News

Anti-malware school

F-Secure launches malware analysis course at Helsinki University.



More rogue Flash ads

Rogue ads infiltrate Expedia and Rhapsody sites.



All in the name

Grisoft becomes AVG.



Malware prevalence report

December 2007

The Virus Bulletin prevalence table is compiled monthly from virus reports received by Virus Bulletin; both directly, and from other companies who pass on their statistics.



Virus analyses

Crimea river

Peter Ferrie describes Crimea, a Linux virus that integrates its code with the host code, making it hard to find.

Peter Ferrie - Symantec, USA


How to disable WFP using physical disk information

Recently, a threat has appeared which obtains a file’s physical disk location information with the aid of the Windows system APIs, then proceeds to infect the corresponding system file. Ha Young Yang describes exactly how physical disk information is being used to disable Windows file protection.

Ha Young Yang - AhnLab, Korea


Feature

Assessment war: Windows services

In the world of Web 2.0, Java, .NET and other hot technologies we are often guilty of forgetting about the core components that make it all possible. Aleksander Czarnowski describes a simple attack scenario based on a high-privilege Windows service vulnerability.

Aleksander Czarnowski - AVET, Poland


Call for papers

VB2008 Ottawa

Calling all speakers...



VB100 comparative review

VB comparative review: Windows Server 2003

John Hawes reports on the VB100 successes and failures of 27 anti-malware products tested on Windows 2003 Server.

John Hawes - Virus Bulletin


Calendar

Anti-malware industry events

Must-attend events in the anti-malware industry - dates, locations and further details.



Spam Bulletin

Spam Bulletin - February 2008

Anti-spam news; Predictions about the prediction scam (feature)




Poll

Have you ever actually read an End-User License Agreement?
I always read them in full
I've never read to the end of one
No

Leave a comment
View 4 comments

vb2008-sidebar

VB2008

VB2008 VB2008 will take place 1-3 October 2008 at the Westin Ottawa, Canada. Registration has opened; please check the call for papers.
Virus Bulletin currently has 132,945 registered users.