Virus Bulletin - May 2009

Editor: Helen Martin

Technical Consultant: John Hawes

Technical Editor: Morton Swimmer

Consulting Editors: Ian Whalley, Nick FitzGerald, Richard Ford, Edward Wilding

2009-05-01

Abstract

One man's spam (comment); Anti-unpacker tricks - part six (technical feature); Case study: the TDSS rootkit (feature); Comodo Internet Security (product review)


Comment

One man's spam

'The most troublesome category of messages – that requires the most thought – are those that occupy the awkward grey area between ham and spam.' Helen Martin, Virus Bulletin

Helen Martin - Virus Bulletin, UK


News

Russian state award for Kaspersky

Eugene Kaspersky honored with highest Russian state award.

Helen Martin - Virus Bulletin, UK


Trend makes new acquisition

Trend snaps up Third Brigade.

Helen Martin - Virus Bulletin, UK


The early bird

The early bird catches the ... discounted registration rate for VB2009.

Helen Martin - Virus Bulletin, UK


Archive material

Six AV companies suffer archive processing vulnerabilities.

Helen Martin - Virus Bulletin, UK


Malware prevalence report

March 2009

The Virus Bulletin prevalence table is compiled monthly from virus reports received by Virus Bulletin; both directly, and from other companies who pass on their statistics.



Technical feature

Anti-unpacker tricks – part six

New anti-unpacking tricks continue to be developed as the older ones are constantly being defeated. In this series of articles Peter Ferrie describes some tricks that might become common in the future, along with some countermeasures. This article concentrates on anti-debugging tricks that target plug-ins for the OllyDbg debugger.

Peter Ferrie - Microsoft, USA


Feature

Case study: the TDSS rootkit

The TDSS modular downloader is known for its ability to bypass active protection, for its outstanding persistence and its rootkit functions. Alisa Shevchenko presents a detailed case study.

Alisa Shevchenko - eSage Lab, Russia


Product review

Comodo Internet Security

Comodo's Internet Security suite leaves an overall favourable impression on the VB test team.

John Hawes - Virus Bulletin, UK


Calendar

Anti-malware industry events

Must-attend events in the anti-malware industry - dates, locations and further details.



Spam Bulletin

Spam Supplement - May 2009

Anti-spam news; Mail authentication with Domain Keys Identified Mail - part two (feature); Anti-spam comparative review May 2009 (comparative review)



Quick Links

Poll
Does your company allow you to use a personal laptop/mobile device to access company resources?
Yes, it's allowed
Yes, it's actively encouraged
No
I don't know
Leave a comment
View 2 comments

Ciso-Intelligence

Virus Bulletin
In this month's magazine:
Virus Bulletin 05 2012
Subscribe now!

Virus Bulletin currently has 225,307 registered users.