80 percent of viruses love Windows 7
By Davey Winder in Editorial
Posted in Blog, Wireless, Security, Microsoft on
According to one leading security research lab, Windows 7 is vulnerable to an astonishing 8 out of 10 viruses it was exposed to during testing. But wait a minute, just how astonishing is this, really?
Sophos loaded a retail release copy of Windows 7 onto a clean PC, configured it to the system default as far as the User Account Control process was concerned, and failed to install any anti-virus software. OK, so this might be a little unfair you would think, but it does represent the actions of many a person new to the new OS. Microsoft insists it is the most secure version of Windows yet, and ‘ordinary users’ will take the company at its word.
What Sophos did next was less typical, instead of connecting the machine to the Internet and clicking every link under the sun until it was infected up the wazoo, it instead “grabbed the next 10 unique samples that arrived in the SophosLabs feed to see how well the newer, more secure version of Windows and UAC held up” says researcher Chet Wisniewski.
Unsurprisingly, Windows 7 didn’t do too well in fighting off these new threats. Indeed, it only managed to prevent 2 out of those 10 from operating correctly. Wisniewski insists that this just goes to show that his pre-launch warning that the UAC is not fit to protect a PC from malware was indeed correct. While I actually agree with him on this point I’d also argue that any machine that is not running an up to date anti-virus solution is asking for trouble no matter what version of Windows is installed.
I’d be more interested to see that same test performed on the same Windows 7 PC but running different AV solutions, including the new and free Microsoft Security Essentials to be honest. I wonder how far and how many of those 10 viruses would get then?
I wonder if Microsoft will come out fighting against Sophos this time, like it did when XP Mode security came under attack in the summer?
Pingback by - November 3, 2009 on 1:54 pm
[…] 7 is the most secure version out there, however according to Sophos, a Security Research lab: “Windows 7 is vulnerable to 80% existing viruses.” Now this may be blown out of proportion as they only tested 10 viruses; however Sophos has a […]
Pingback by - November 3, 2009 on 4:47 pm
[…] 80 percent of viruses love Windows 7 - IT ProAccording to one leading security research lab, Windows 7 is vulnerable to an astonishing 8 out of 10 viruses it was exposed to during testing. But wait a minute, just how astonishing is this, really? Sophos loaded a retail release copy of Windows 7 […]
Comment by - November 3, 2009 on 5:32 pm
I think it more likely that MS will argue that since these are new virii that they are specifically targeted at the new OS.
On the other hand, MS does have a long history of trying to stand on both sides of the fence, by saying that “this is the most secure OS ever” and then complaining when it is tested without any additional protection. A bit like selling a bullet-proof vest, and complaining that no-one puts a car-door in front before testing.
Comment by - November 3, 2009 on 5:45 pm
@Dave - while Microsoft could argue that this new malware is ‘targeting’ the new OS, it is important to note that the new malware is what people need to protect against every day. At Sophos, we see over 40,000 new malicious samples EVERY DAY submitted to our Labs - the criminals are out there writing new stuff at a truly outstanding pace.
Michael Argast, Security Analyst, Sophos
Comment by Nonya - November 3, 2009 on 6:15 pm
And just how does a person get anti-virus software, and security updates? Most likely from the internet. I read recently that most Windows PCs are compromised within 15-30 minutes of their first connection to the internet.
Comment by ricegf - November 3, 2009 on 6:21 pm
@Nonya - We use a Linux LiveCD such as Ubuntu 9.10 to connect to the Internet and download all the protections that Windows requires to a clean flash drive, then bring up the Windows PC off-line and load it up. Only after it’s well-armored do we allow it to connect to the network.
Comment by mahesh - November 3, 2009 on 6:23 pm
All that Microsoft has to do is to never let users access the internet with their administrator privileges.
I have being using windows without any kind of Antivirus installed. All I do is I make sure that I always connect to internet with my standard user account without any root privileges .
This is the same strategy that Linux operates on (also Mac which is a flavour of unix).
Comment by Fred - November 3, 2009 on 7:14 pm
Bur viri can not attack Windows 7 it does not have a big enough market share yet.
I wonder how many of these would affect Ubuntu!
Comment by Daniel Hedblom - November 3, 2009 on 7:27 pm
The problem isnt that the computer was ran without Antivirus. The real problem is that the Windows operating system is so utterly broken that it demands antivirus by default. Antivirus should be ADDED security, not the only security.
Comment by Cubert - November 3, 2009 on 7:35 pm
I’d like to see the same test done with OS X - with no anti-virus software. Oh, wait - we all know how that would turn out.
Comment by Anton - November 3, 2009 on 7:37 pm
It’s wellknown that Windows was never made for internet world, it’s was made just an stand-alone-computer OS.
People have to understand that only Linux and BSD are secure enough for internet users.
Comment by Elder Norm - November 3, 2009 on 9:35 pm
Ok, so I am assuming that these were not trogans that were used but regular style viruses that do not require user action to acquire the virus.
OK so this is the best Microsoft has to offer. Hmmmm…… and it still only uses 3 gig of memory and the 64 bit version is separate, and you need a computer with a fair bit of punch to really use it, Like Vista.
Hmmmmm, think I will stay with my old MacBook.
Just a thought,
en
Pingback by - November 3, 2009 on 10:17 pm
[…] against Sophos this time, like it did when XP Mode security came under attack in the summer? Article. __________________ Members don’t see ads in threads. Register your free account […]
Pingback by - November 3, 2009 on 10:50 pm
[…] Despite touting Microsoft’s new OS as being much more secure, IT Pro is reporting that Windows 7 is vulnerable to 8 out of 10 viruses that it was exposed to right out of the box without anti-virus. This test was conducted by AV […]
Pingback by - November 3, 2009 on 10:53 pm
[…] Unsurprisingly, Windows 7 didn’t do too well in fighting off these new threats. Indeed, it only managed to prevent 2 out of those 10 from operating correctly. Wisniewski insists that this just goes to show that his pre-launch warning that the UAC is not fit to protect a PC from malware was indeed correct. While I actually agree with him on this point I’d also argue that any machine that is not running an up to date anti-virus solution is asking for trouble no matter what version of Windows is installed. via itpro.co.uk […]
Comment by beavis - November 3, 2009 on 11:55 pm
mahesh,
That is very dangerous. The user system in Linux is considerably different than in any Windows.
Privilege escalation in windows in much easier than in Linux. Just because you are running as a user doesn’t mean you can’t get owned by a injection that gets admin privileges.
Comment by slappy - November 4, 2009 on 12:44 am
Figures. Same old Windows.
Pingback by - November 4, 2009 on 12:47 am
[…] version of Windows and UAC held up” says researcher Chet Wisniewski……. Full article: IT PRO: Blogs: Davey Winder: 80 percent of viruses love Windows 7 my […]
Comment by James - November 4, 2009 on 4:15 am
The Microsoft Tax
Comment by - November 4, 2009 on 6:48 am
It doesn’t sound good, nor is it a good reflection on Window 7 and its manufacturer.
Very disappointing…it should be possible to offer a higher level of security…
Pingback by - November 4, 2009 on 8:51 am
[…] his pre-launch warning that the UAC is not fit to protect a PC from malware was indeed correct. IT PRO: Blogs: Davey Winder: 80 percent of viruses love Windows 7 The Windows Club | […]
Comment by - November 4, 2009 on 9:44 am
It’s only because Windows has the largest user base and thus, the largest effect should a virus, worm or Trojan horse get through and activate. Windows 7 is the latest offering from Microsoft.
Comment by - November 4, 2009 on 9:54 am
It doesn’t sound good, nor is it a good reflection on Window 7 and its manufacturer.
Comment by Stephen Barash - November 4, 2009 on 5:22 pm
Stupid test. I’d like to see how OSX or Linux would do if you directly executed the latest OSX and Linux viruses on those respective systems. This is just a knee jerk reaction to try to prevent revenue loss to Microsoft’s free Security Essential antivirus software. Try it with that installed and see how these virus’ do. Better yet, do a realistic test where the virus has to actually enter the environment though non-artificial means - like through the network or email client.
Pingback by - November 4, 2009 on 6:21 pm
[…] Via ITPRO […]
Comment by RU Kidding - November 4, 2009 on 10:41 pm
@Stephen Barash–Wake up!! There are no OS X viruses or virii. Sorry!
Comment by Dave - November 4, 2009 on 11:55 pm
who cares? windows security essentials is available for free just google it and this issue becomes a lot less relevant.
Pingback by - November 5, 2009 on 10:13 am
[…] percent of viruses love Windows 7″ says another headline. According to one leading security research lab, Windows 7 is vulnerable to an astonishing 8 out […]
Pingback by - November 10, 2009 on 12:46 am
[…] Windows has slimmed down some and is "snappier" does not soon remind one it is Windows: viruses Objective vs view __________________ I may not agree with what you have to say but I’ll defend […]
Comment by Syndicate - November 26, 2009 on 10:08 am
It’s the only OS in which such mass infections exist.
Make a comment
Tag cloud
Archives
- June 2010
- May 2010
- April 2010
- March 2010
- February 2010
- January 2010
- December 2009
- November 2009
- October 2009
- September 2009
- August 2009
- July 2009
- June 2009
- May 2009
- April 2009
- March 2009
- February 2009
- January 2009
- December 2008
- November 2008
- October 2008
- September 2008
- August 2008
- July 2008
- June 2008
- May 2008
- April 2008
- March 2008
- February 2008
- January 2008
- December 2007
- November 2007
- October 2007
- September 2007
- August 2007
- July 2007
- June 2007
- May 2007
- April 2007
- March 2007
- February 2007
- January 2007
- December 2006
- November 2006
- October 2006
- September 2006
- August 2006
Most commented posts
- Has Microsoft gone mental?
81 comments
- Cuil frozen out: market share drops to next to nothing
- Xbox 360 FAIL
- 80 percent of viruses love Windows 7
- The 24GB RAM Desktop is born
- Microsoft reveals time-based licensing model
- Use old version of Windows instead of Linux, says teacher
- Google to buy Twitter?
- Has the US Army declared war on Windows 7?
- Windows XP: the invincible OS
Highest Rated Blog Posts
- Why ecommerce fails (100%)
- Google Chrome stands alone at PWN2OWN (100%)
- Betting on Hubdub technology (100%)
- Has Google gone insane as GMail goes back to beta? (100%)
- Chinese whispers as government implicated in UK hack attacks (100%)
- Crimeware toolkit targets 10,000 trusted sites (100%)
- Black Hat risk to migrating VMs (100%)
- Tough on cyber crime, tough on the causes of cyber crime (100%)
- Firefox 3, Beta 4, Enhancements 900, Tested 5 (100%)
- Has the US Army declared war on Windows 7? (100%)



