funsec mailing list archives

RE: [stuff] happens, et tu, AVG? was Re: Kaspersky strikes again


From: "Young, Keith" <Keith.Young () montgomerycountymd gov>
Date: Fri, 21 Dec 2007 17:39:46 -0500

A faulty signature update from Kaspersky Lab on Wednesday 

flagged up Windows Explorer (explorer.exe) as infected with a 

low-risk virus, Huhk-C. As a result the core Windows component was quarantined or worse.


AVG did something similar a few days ago, but not windows core, at least.
 
And, given the recent report posted today on the list, (if it is close to accurate) the AV vendors will feel tremendous 
pressure to develop other solutions (whitelisting-like) or expand the signature/heuristics detection. The former will 
cause consumer users to decrease security by allowing everything and the latter will cause computers to have issues due 
to over-detection. Neither sounds like a good solution.
 
Grannyx anyone?
 
--Keith

Keith Young, Security Official 
Department of Technology Services 
Montgomery County, Maryland 
phone - (240) 777-2955 


_______________________________________________
Fun and Misc security discussion for OT posts.
https://linuxbox.org/cgi-bin/mailman/listinfo/funsec
Note: funsec is a public and open mailing list.


Current thread: