Re: A new online scanner from MS

From: David H. Lipman (DLipman~nospam~_at_Verizon.Net)
Date: 11/03/05 

Date: Wed, 2 Nov 2005 23:10:23 -0500

From: "Mike Treit [MSFT]" <mtreit@online.microsoft.com>

| BB:
|
| Well for one thing, posting in the newsgroups is a fine way to give
| feedback. Rest assured that the feedback is appreciated and is being read
| and considered by a variety of people at Microsoft, including those working
| on the Safety Center project and it's various components.
|
| (On a side note, I rather like the idea of using blogs to provide beta
| feedback - usually they are more immediate than filling out a web form or
| emailing some address from which you often never get a response. But that's
| just my personal take.)
|
| Regarding your specific points, remember that this is a V1 beta and
| obviously it is a bit rough around the edges in some areas. I hope you'll
| keep an eye out for the improvements and updates that will be made to the
| scanner in the upcoming months, as feedback from you and other users is
| incorporated.
|
| Thanks again for the excellent feedback. Keep it coming.
|
| -Mike
|

Any anti virus is only as good as its signatures. Those signatures are based upon
submissions. Based upon my simple test I was given an email address to submit those
infectors that AV scanner failed to catch. I did just that. However, I received no email
in reply indicating the receipt of the submission. Maybe I'm spoiled but when I submit
sample infectors I am used to getting a reply email with some form of reference number or
service ticket. This way i can reply to that company with that reference number or service
ticket such that that particular submission can be fully discussed.

If Microsoft is to be in the anti virus market, Microsoft needs to do likewise. I want a
reply email indicating the submission was received with some reference number. I also want
a subsequent reply email indicating what the submission was found to be (name of infector)
and when I could expect signatures to be deployed for it/them. I am glad to see that
Microsoft is allied with the Ati Phishing Working Group {
http://www.antiphishing.org/index.html } so I hope Microsoft will have signatures for
Phishing emails like I know McAfee has.

I hope that Microsoft will become a partner with the US CERT and MITRE and the Common
Malware Enumeration project. { http://cme.mitre.org/data/list.html }

Microsoft should work with Virus Total { http://www.virustotal.com } such that Microsoft can
receive submissions from Hispasec Sistemas. Thus joining its anti virus peers...

AVIRA (AVIRA Desktop)
Cat Computer Services (Quick Heal)
ClamAV (ClamWin)
Computer Associates (Iris, Vet)
Doctor Web, Ltd. (DrWeb)
Eset Software (NOD32)
Fortinet (Fortinet)
FRISK Software (F-Prot)
Grisoft (AVG)
H+BEDV (AntiVir)
Hacksoft (The Hacker)
Ikarus Software (Ikarus)
Kaspersky Lab (AVP)
McAfee (VirusScan)
Norman (Norman Antivirus)
Panda Software (Panda Platinum)
Softwin (BitDefender)
Sophos (SAV)
Sybari (Antigen)
Symantec (Norton Antivirus)
VirusBlokAda (VBA32)

Finally, I received the following feedback in a post I made in; alt.comp.anti-virus ...

"I thoroughly tested the bugger against a batch of 500 verified 2005 viruses
and trojans and spywares this morning. 314 detections. 186 misses. And a
system freeze and reboot like Arts. (XPPro SP2.)

Trend and Panda detected 492 each. McAfee and Norton detected 498 each.
NOD32 and Kaspersky detected all 500. Those guys do not have much to fear
from Microsoft at present." 

-- 
Dave
http://www.claymania.com/removal-trojan-adware.html
http://www.ik-cs.com/got-a-virus.htm

Relevant Pages

  • Re: rtlcopybytes and rtlcopymemory both generate same code
    ... The feedback link in the *installable* version of the library ... The contents are displayed in English. ... Microsoft's web pages are sending some Japanese to Microsoft without even ... Please do not send e-mail directly to this alias. ...
    (microsoft.public.development.device.drivers)
  • Re: rtlcopybytes and rtlcopymemory both generate same code
    ... When I click on a feedback link at the bottom of a page, Internet Explorer opens a new window. ... The contents are displayed in English. ... The address which I type is the one which is linked to my MSDN id, do you suppose that maybe this is the problem? ... From this I can figure out that, while Microsoft's web pages are displaying English to me, Microsoft's web pages are sending some Japanese to Microsoft without even showing it to me. ...
    (microsoft.public.development.device.drivers)
  • Re: 12.2.0 will not install
    ... They do read feedback. ... Are you suggesting that Microsoft cares about the feedback it receives? ... through with bugs. ... but it certainly wasn't due to incompetence or nonchalant cavalier ...
    (microsoft.public.mac.office)
  • Re: Whats New in Snow Leopard
    ... of feedback on in-development code from ordinary users." ... you get what Jobs and Apple think you should get. ... Oh, you mean how Microsoft does things with, um, Vista? ... " Microsoft releases the public betas in order to get feedback and telemetry ...
    (comp.sys.mac.advocacy)
  • Re: Whats New in Snow Leopard
    ... of feedback on in-development code from ordinary users." ... you get what Jobs and Apple think you should get. ... Oh, you mean how Microsoft does things with, um, Vista? ... " Microsoft releases the public betas in order to get feedback and telemetry ...
    (comp.sys.mac.advocacy)
Quantcast