Clarification on Microsoft's definition of malware immunity

Dec 20, 2006 13:15 GMT  ·  By

Windows Vista is neither foolproof nor perfect, and this statement also applies to operating system's security. Jim Allchin, Microsoft Co-President, Platform and Services Division, revealed that the users of Windows Vista are immune to an array of malware instances, including: W32/Stratio-Zip, W32/Netsky-P, W32/Bagle-Zip, W32/Zafi-B, W32/Netsky-D, W32/Nyxem-D, W32/MyDoom-O, W32/Mytob-C, W32/Sality-AA and W32/Zafi-D.

But Allchin correlated this immunity with the usage of Windows Vista and just Windows Vista. In fact, Allchin revealed that introducing third-party software products into the operating system will also transfer the products' inherent vulnerabilities onto Vista. In addition to the vulnerabilities that will be transitioned into Vista by external products, the human element, susceptible of social engineering schemes, is also a vector for attacks.

"One question you may ask is why isn't this kind of malware scanning built into Windows Vista? We do have cleaners that will detect and remove this form of malware that is offered as part of the malicious software removal tool that we distribute each month. However, there is certainly a question about whether we should do even more in the operating system. The recent feedback we received around our decision to continue to include Kernel Patch Protection in the 64-bit versions of Windows Vista (even though we had shipped this protection in 64-bit versions of Windows XP nearly two years ago) was more controversial than we would have expected. It's a complicated world -- that's all I can say," confessed Allchin.

While admitting that Windows Vista is neither foolproof nor perfect, the operating system's protection is left, as was the case with the past versions of the OS, to additional security products.

"Our best advice remains the same: you should 1) stay current with the latest security updates (and in this case I urge you to use the recommended defaults included in Windows Vista); 2) use a firewall (there's a great two-way firewall built into Windows Vista! Or, use a third-party solution that you can buy); and 3) use anti-malware software. I recommend using the combination of Windows Defender and an add-on anti-virus software program such as Windows Live OneCare or one of the many great products available from third parties," added Allchin.