Virus Bulletin - May 2009

Editor: Helen Martin

Technical Consultant: John Hawes

Technical Editor: Morton Swimmer

Consulting Editors: Ian Whalley, Nick FitzGerald, Richard Ford, Edward Wilding

2009-05-01

Abstract

One man's spam (comment); Anti-unpacker tricks - part six (technical feature); Case study: the TDSS rootkit (feature); Comodo Internet Security (product review)


Comment

One man's spam

'The most troublesome category of messages – that requires the most thought – are those that occupy the awkward grey area between ham and spam.' Helen Martin, Virus Bulletin

Helen Martin - Virus Bulletin, UK


News

Russian state award for Kaspersky

Eugene Kaspersky honored with highest Russian state award.

Helen Martin - Virus Bulletin, UK


Trend makes new acquisition

Trend snaps up Third Brigade.

Helen Martin - Virus Bulletin, UK


The early bird

The early bird catches the ... discounted registration rate for VB2009.

Helen Martin - Virus Bulletin, UK


Archive material

Six AV companies suffer archive processing vulnerabilities.

Helen Martin - Virus Bulletin, UK


Malware prevalence report

March 2009

The Virus Bulletin prevalence table is compiled monthly from virus reports received by Virus Bulletin; both directly, and from other companies who pass on their statistics.



Technical feature

Anti-unpacker tricks – part six

New anti-unpacking tricks continue to be developed as the older ones are constantly being defeated. In this series of articles Peter Ferrie describes some tricks that might become common in the future, along with some countermeasures. This article concentrates on anti-debugging tricks that target plug-ins for the OllyDbg debugger.

Peter Ferrie - Microsoft, USA


Feature

Case study: the TDSS rootkit

The TDSS modular downloader is known for its ability to bypass active protection, for its outstanding persistence and its rootkit functions. Alisa Shevchenko presents a detailed case study.

Alisa Shevchenko - eSage Lab, Russia


Product review

Comodo Internet Security

Comodo's Internet Security suite leaves an overall favourable impression on the VB test team.

John Hawes - Virus Bulletin, UK


Calendar

Anti-malware industry events

Must-attend events in the anti-malware industry - dates, locations and further details.



Spam Bulletin

Spam Supplement - May 2009

Anti-spam news; Mail authentication with Domain Keys Identified Mail - part two (feature); Anti-spam comparative review May 2009 (comparative review)



Quick Links



Poll

When do you install software updates?
As soon as they are released
As soon as I have some time
I take my time, but I always install them eventually
Only when I feel it is absolutely necessary
Never
Leave a comment
View 12 comments

Jobs Career Sidebar

Twitter Feed

virusbtn: September VB issue: LNK files, anti-unpacker, sender authentication, VBSpam review and more http://bit.ly/987AOC
4 hours ago


virusbtn: The VBSpam quadrant plots anti-spam products spam catch rates against false positive rates. Latest update at http://bit.ly/a2Ppcs
10 hours ago


Malware Prevalence

Autorun |########|
Conficker/Downadup |######|
VB |#####|
Agent |#####|
FakeAlert/Renos |####|
 View this month's full report
Virus Bulletin currently has 208,638 registered users.