Viruses which attempt to disable Microsoft Antispyware (updated)

[Bill Sanderson]

The list has grown by one:

http://securityresponse.symantec.com/avcenter/venc/data/pwsteal.bankash.a.html

(Febuary 10th, 2005)

http://securityresponse.symantec.com/avcenter/venc/data/pwsteal.bankash.b.html

(March 3rd, 2005)

http://securityresponse.symantec.com/avcenter/venc/data/trojan.bankash.c.html
(March 4th, 2005)

http://www.sarc.com/avcenter/venc/data/trojan.killav.e.html (February 15,
2005)

If this list is new to you, be reassured that these trojans do not "infect"
Microsoft Antispyware, nor does having Microsoft Antispyware make you more
likely to find this trojan in your mailbox than any other user. These
trojans simply contain code which attempts to disable Microsoft Antispyware,
to prevent detection, as a number of other trojans and viruses have
targetted popular antivirus applications for years.

 

[Rob]

"These trojans simply contain code which attempts to disable Microsoft Antispyware,
to prevent detection....."

Oh good, if these cretins are doing that then they must feel that MSAS is a threat to
their existence.

 

[Bill Sanderson]

Yes - I take it as a complement. A bit of a pain, and initially, because of
popular press reports, a source of confusion, though.