Storm worm disables antivirus software - Windows Watch

Windows Watch Windows Watch Windows Watch Windows Watch
A blog from Computeractive

« Get your bookmarks on the move and the desktop | Main | The benefits of regular Windows reinstall »

Storm worm disables antivirus software

More details are coming out about the actions of the Storm Worm. According to a blog post by Sophos analyst Richard Cohen Storm (they call it Dorf) stops antivirus software from working but fools Windows into thinking that nothing is wrong.

As Lisa Vaas on eweek points out, this is even worse than shutting the antivirus software down because it generates a false sense of security.

What worries me even more is that there is no word of fixes or patches at the moment.

TrackBacks

Listed below are links to blogs that reference this entry: Storm worm disables antivirus software.

TrackBack URL for this entry: http://blogs-1.gos.vnu.net/mt-tb.cgi/81053

Comments

Intrigued and worried by this blog I typed in "Storm Worm botnet" into Google and I got these 2 articles 2 days apart.
Storm Worm Now Just a Squall
The Storm Worm botnet has been shrinking steadily and is about 10 percent of its former size.
Robert McMillan, IDG News Service
Sunday, October 21, 2007 9:00 AM PDT

http://www.pcworld.com/article/id,138721-pg,1/article.html


Storm Worm Botnet Lobotomizing Anti-Virus Programs
By Lisa Vaas
October 23, 2007

New technique leaves AV running but brain-dead; expert says we haven't come close to witnessing Storm's true power.


http://www.eweek.com/article2/0%2C1895%2C2205606%2C00.asp

Just exactly whom do we believe?

posted-by David Elliott | November 5, 2007 7:19 PM

Post a comment







Site credentials: About | Privacy policy | Terms & conditions | Top of the page
© Incisive Media Ltd. 2008
Incisive Media Limited, Haymarket House, 28-29 Haymarket, London SW1Y 4RX, is a company registered in the United Kingdom with company registration number 04038503