MalWhere using AI to fight Malware

[JonPalanis]

While surfing the web I stumbled upon this new utility that promises to help you figure out what is what on your computer and identify malicious processes. The interesting scoop about this little (free) program is that is uses AI to analyze processes that it doesn’t recognize. Let's say you are infected with a new Trojan that the anti-spyware companies haven't heard of yet. MalWhere will query Google with the name of the process and analyze the results to produce a threat factor and a description. The cool part is that it uses the internet community (forums/blogs) to figure out the process nature in real time so there isn’t a problem of not being updated with the latest virus definitions.

Edited June 17, 2005 by JonPalanis

[PsiMoon314]

Hi All,

According to the Rogue/Suspect Anti-Spyware List this application (MalWhere) is itself known to be suspect and to contain adware and trojans.

According to this site: http://netrn.net/spywareblog/archives/2004/09/13/ the items installed include:

BargainBuddy

CommonName

Ie Driver

NetPal

Favoriteman

Promulgate

UrlBlaze

Win32.Wintrim.Trojan.B

On that basis I would avoid installing this application.

Kind Regards

Simon

[JonPalanis]

I installed it and its clean. Maybe the list is not updated?

[Aegis]

If you used MalWhere itself to scan, I seriously doubt that it will report the spyware installed .

[JonPalanis]

lol

Im not THAT clueless. I use Norton AV/Spybot S&D/MS antispyware/Ad-Aware Pro and Webroot Spy Sweeper (my fav). Anyway all of them state its clean.

In my book at least that means an installation is clean.

Other then that, MalWhere is really a program worth having.

[DigeratiPrime]

Hey JonPalanis welcome to MSFN.

Judging by your post count, i would guess you havent been assualted by the Firefox gang yet. Me and many other people now use Firefox (or some other alternative web browser) to surf the internet, malware/adware/spyware is a thing of the past. Try Firefox, I bet you see all this stupid stuff dissapear. You can find firefox quickly by just clicking on the promotional button in my signature.

[edit] I should add that Firefox is free and opensource.

Edited June 18, 2005 by DigeratiPrime

[JonPalanis]

Hey DigeratiPrime,

Thank you for the advice - I do have firefox. I use both FF and IE to surf the web. Each have its advantages and disadvantages

[wizardofwindows]

i use both as well as some webpage are best display on ie.

[Aegis]

Hey JonPalanis welcome to MSFN. 

Judging by your post count, i would guess you havent been assualted by the Firefox  gang yet.    Me and many other people now use Firefox (or some other alternative web browser) to surf the internet, malware/adware/spyware is a thing of the past. Try Firefox, I bet you see all this stupid stuff dissapear.  You can find firefox quickly by just clicking on the promotional button in my signature. 

[edit] I should add that Firefox is free and opensource.

<{POST_SNAPBACK}>

I should mention that many ad and spyware sites are now targetting Firefox users. I've noticed an increase in the number of ads not blocked by Firefox. I haven't got any spyware, but IMO, it's only a matter of time before some spyware does take advantage of the increasing number of vulnerabilities in Firefox. No browser is really safe, just that the niche browsers are targetted less often.

[Lolly]

Same goes with Windows.

It's simply a great target for crapware as it is popular OS. atm.

More ppl, more zombie PCs.

[JonPalanis]

The more popular FF is going to get the more exploits there will be. There are already many exploits out there:

http://www.frsirt.com/exploits/20050521.mfsa200544.php

http://www.frsirt.com/exploits/20050521.firelinking2.php

http://www.frsirt.com/exploits/20050521.fireviewing.php

I wonder how IE7 will improve IE security

[DigeratiPrime]

I really doubt malware is ever going to be a problem with Firefox for alot of reasons. You can get the NoScript extension which really would make an exploit dificult. But thats all i wanted to say, just checking/keeping the awareness up