From: Duncan Kennedy on
Pd <peterd.news(a)gmail.invalid> wrote:

> Jim <jim(a)magrathea.plus.com> wrote:
>
> > On 2010-04-23, Chris Ridd <chrisridd(a)mac.com> wrote:
> > >
> > >> 2. Your anti-virus software might introduce security holes in your
> > >> system.
> > >
> > > True.
> >
> > Or, as with McAfee earlier this week, it might inaccurately identify a key
> > and perfectly legit piece of your system as Naughty and nuke it, leading to
> > Endless Reboot Rage.
> >
> > (it identified svchost.exe as malware. Fun for all concerned)
>
> Following Microsoft's logic, McAfee should have identified that there
> was a "virus" on the system, and simply refused to run. Or even deleted
> itself. After all, a virus-infected system is preferable to a
> non-bootable system, apparently.

Unfortunately the idiot who wrote the update didn't seem to realise that
there could be several different instances of svchost.exe running at any
one time and, for some stupid reason, decided to wipe them all. In fact
it seems that it deleted them all even if none were infected.

I once had an infected svhchost file on a very old XP box - I gave up
trying to clean it as it was installed by a file that kept changing its
name. Strangely enough it came from runnng a Live Linux distro,
completely forgetting what I was doing and downloading a phoney Flash
upgrade and coming straight out of Linux - it infected Win XP before the
anti-virus loaded - Linux users refuse to believe that is possible but I
actually watched it happen - the infecting application must have been
downloaded to the XP drive.

--
duncank
From: Rowland McDonnell on
Peter James <pfjames2000(a)googlemail.com> wrote:

> My Bank is offering all of its on-line banking customers the Kaspersky
> anti-virus for Windows and Mac for free.
> Is this offer worth taking up?
> I'm running OS X 10.6.3. My inclination is to say no. The only problem
> is when and if my account is hacked I'm told I have no comeback because
> I'm not running anti-virus software.

1) Can't be valid unless the hacking is done via your PC. Complain to
the banking ombudsman...

2) ClamXAV is worth a look - free.

Rowland.

--
Remove the animal for email address: rowland.mcdonnell(a)dog.physics.org
Sorry - the spam got to me
http://www.mag-uk.org http://www.bmf.co.uk
UK biker? Join MAG and the BMF and stop the Eurocrats banning biking
From: Rowland McDonnell on
Duncan Kennedy <nospam(a)nospamottersonbg.couk> wrote:

> Gavin Lawrie <gavin.lawrie(a)2gc.co.uk> wrote:
>
> > It probably won't do any harm, but probably won't do any good either.
> > Not looked at the Kapersky mac software,
>
> I've used Kaspersky ful jternet suite (including 2-way firewall) for
> many years on many Windows boxes. The company support is excellent. I
> use Wirus Barrier on my Macs - OK I *know but I don't want to be the
> first to be screwed by the first Mac virus in the wild and that is
> coming one day soon.

There are plenty of Mac viruses out there. Lots and lots.

But they all broke when MacOS X came out and none of the successes of
the pre OS X viruses has been repeated.

Thing is, there are no viruses for MacOS X. And there probably won't
be, because that mode of infection is so very hard to exploit on a
reasonably secure OS like Unix that it's much more sensible to think
about other methods of infecting the machine in question - basically,
it's all done with Trojans and social engineering these days.

So relax, your MacOS X Mac will never catch a virus[1]. It'll just get
ill another way when the malware strikes.

Don't forget, there is plenty of MacOS X malware out there, so be
careful what you install.

[snip]

Rowland.

[1] Maybe.

--
Remove the animal for email address: rowland.mcdonnell(a)dog.physics.org
Sorry - the spam got to me
http://www.mag-uk.org http://www.bmf.co.uk
UK biker? Join MAG and the BMF and stop the Eurocrats banning biking
From: Chris Ridd on
On 2010-04-22 23:23:39 +0100, Bruce Horrocks said:

> On 22/04/2010 16:59, Chris Ridd wrote:
>> I was trying to find the post from Bruce that proposed asking the banks
>> to get the security software properly certified (CC) first. Why would
>> you trust something *claiming* to be secure?
>
> It was me. The relevant bit was:
>
>> Anyone wishing to stall their bank could write and ask why Trusteer
>> Rapport doesn't appear to have a CESG Claims Tested Mark nor a Common
>> Criteria certification.
>> <http://www.cctmark.gov.uk/>
>> <http://www.commoncriteriaportal.org/>

Ta. Google *still* can't find it :-(
--
Chris

From: J. J. Lodder on
Duncan Kennedy <nospam(a)nospamottersonbg.couk> wrote:

> Gavin Lawrie <gavin.lawrie(a)2gc.co.uk> wrote:
>
> > It probably won't do any harm, but probably won't do any good either.
> > Not looked at the Kapersky mac software,
>
> I've used Kaspersky ful jternet suite (including 2-way firewall) for
> many years on many Windows boxes. The company support is excellent. I
> use Wirus Barrier on my Macs - OK I *know but I don't want to be the
> first to be screwed by the first Mac virus in the wild and that is
> coming one day soon.

It doesn't work that way.
First *you must get screwed,
then all others will profit
from the anti-virus software
that is developed from the remains
of your screwed system.

You are wasting money and time anyway,

Jan