Microsoft AntiSpyware Beta incorrectly identifies AV software |
 |
By Edmund X. DeJesus
13 Feb 2006 | SearchSecurity.com |
|
|
A recent signature file for the beta version of Microsoft Windows AntiSpyware incorrectly identifies a registry key of Symantec antivirus software. Users who remove the identified key render the antivirus software inoperable. Reinstallation of the Symantec software may be necessary.
The Windows AntiSpyware Beta 1 signature 5805, which was released on Thursday, incorrectly flags a Symantec registry key as "belonging to a password stealing malware known as PWS.Bancos.A," according to a Microsoft spokesperson. Windows AntiSpyware prompts the user to remove the key. Removing the key causes the affected Symantec products to stop working correctly. The issue surfaced on a Microsoft discussion board. Microsoft describes the number of affected users as "very limited."
The problem affects users of Symantec Antivirus (SAV) Corporate Edition versions 7, 8, 9 and 10, and Symantec Client Security (SCS) versions 1, 2 and 3. This problem does not affect users of Norton Antivirus and Norton Internet Security. In addition, users of any Symantec products are not affected if they are using Microsoft Windows Defender Beta 2, either in Windows XP or preview versions of Windows Vista.
Microsoft quickly released a new signature set (5807) to remove this incorrect identification. Microsoft has also reminded users that Windows AntiSpyware is beta software, which should not be used in production environments.
Edmund X. DeJesus (dejesus@compuserve.com) is a freelance writer in Norwood, Mass.
 |
 |
| |
RELATED CONTENT
 |
Malware, Viruses, Trojans and Spyware |
|
iPhone worm Rickrolls jailbroken phones
|
|
Israeli Mossad add Trojan Horse to Syrian laptop
|
|
Schneier-Ranum Face-Off: Is antivirus dead?
|
|
Modern malware, stealthy botnets, adapt quickly, expert says
|
|
Computer worm infections up, scareware antivirus down, Microsoft says
|
|
Web-based attacks skyrocket, pirating sites surge, security firms say
|
|
Mini guide: How to remove and prevent Trojans, malware and spyware
|
|
Kaspersky system analyzes malicious URLs on Twitter for malware
|
|
Silon malware intercepts Internet Explorer sessions, steals credentials
|
|
Breach forces payroll service provider PayChoice to shut down again
|
|
|
|
|
|
