[OT] Microsoft Security Essentials SEO Poisoning

[Randy Knobloch]

"SEO Poisoning" is infecting search engine queries with fake results often resulting in Malware results.

More >
<http://securitylabs.websense.com/content/Alerts/3485.aspx>

Go to the Source *do not Google for MSE at this time*.
*<http://www.microsoft.com/security_essentials/>*

Ed Bott has written a piece on MSE >
http://blogs.zdnet.com/Bott/?p=1067
And has the Register >
http://www.theregister.co.uk/2009/09/30/microsoft_security_essentials_analysis/

 

[Bill Sanderson]

Indeed--this underscores the issue that was mentioned with regard to the
beta version of Microsoft Security Essentials: Should I download this from
a non-Microsoft site?

Although the links posted here were, I believe, harmless, and the folks
posting them definitely not meaning any harm---the habit of finding
Microsoft software somewhere other than at Microsoft.com can be hazardous to
your binary health.

 

[1PW]

Indeed--this underscores the issue that was mentioned with regard to the
beta version of Microsoft Security Essentials: Should I download this
from a non-Microsoft site?

Although the links posted here were, I believe, harmless, and the folks
posting them definitely not meaning any harm---the habit of finding
Microsoft software somewhere other than at Microsoft.com can be
hazardous to your binary health.

Hello Bill:

Please make no mistake. I /do/ agree with you. However, occasionally
I will bleat in similar newsgroups that a download, accompanied by a
set of MD5 and SHA-1 hashes (or with the SHA-2 family), can remove all
but the most infinitesimal doubt.

Right now, the Microsoft servers are performing with merit and the 8.8
MB XP downloads seem snappy enough in the U.S.A. It's probably the
inevitable and unfortunate few that won't receive timely definition
updates or their systems will show no updates for an extended period
is where multiple download sources in various countries might prove
their worth. I need not point out the useful manual update
arrangements for Windows Defender but now extended to include multiple
dispersed global servers.

MSE is only going to be as good as its regular & frequent updates.
Microsoft has resisted supplementary validation hashes since day 1.
Given the steep learning curve for some users, this is not surprising.
Reasonably, a highly integrated and automated upgrade version of
"Microsoft File Checksum Integrity Verifier" could be coupled with
downloads from unofficial definition sources as long as appropriate
verification steps can be made within MSE and further.

My $0.02USD.