You Don't Want This Windows Update
|
News Commentary. Today, I got an e-mail warning of a new Windows virus and where to get the update to protect against it. Oh, those wicked phishers. |
I was immediately suspicious of the e-mail. What surprised me: how much useful information Outlook 2007 offered and how little Windows Live Mail offered.
Some quick background: I had been using Windows Live Mail full-time, but switched to Outlook on Saturday. Five weeks was enough for me. The newer Live Mail version is just as clunky as the old one. It's finicky and bothersome. Not that I like Outlook much better. I still resent that the program killed nearly all competition for e-mail, contact and calendaring. There's some revival, because of cell phones and Web services from companies like Google. But nowhere near enough.
Griping aside, I'm finding Outlook on Windows 7 provides an almost acceptable user experience. The software runs faster and doesn't hog all the system resources, as it has in my testing on Windows XP and Vista. Today's phishing e-mail gave me a reason to actually appreciate Outlook.
The screenshot below is from Outlook 2007:
Here's a screenshot of the same message in Windows Live Mail (build 14.0.8064.0206):
Both e-mail programs put the message in Junk Mail and blocked images. Even the images could be dangerous in a message like this one, if for nothing more than acting as a Web beacon validating the e-mail address. But Outlook did more, by showing the URL to the images and behind the link text. The link leads to an executable and, whoa, that ain't no Microsoft Web address.
According to Sophos, ldr.exe is a Trojan that changes the registry to load the executable on start-up. The payload also drops two other pieces of malware and can download more via backdoor operations.
The executable isn't exactly new, but there are plenty of unprotected systems out there for infections to spread to. That's all under the guise of updating Windows against a new virus threat.
But my bigger concern here is the difference in how Outlook 2007 and Windows Live Mail handle phishing e-mails. I'm quite impressed with Outlook and nervously looking over my shoulder after using Windows Live Mail. The consumer product doesn't provide enough information. I think that too many consumers could click through to the link. Live Mail does show the real URL at the bottom of the message when the mouse passes over the link. Is that security enough? I don't think so. What do you think? Please share in comments or by e-mail.
[Please send your tips or rumors to watchtips at live.com.]
Comments (17)
The funny thing is that it is not a phishing attempt. It is a trojan.
I wouldn't worry too much about the security side, it looks like they are just looking for links to IP addresses which try to display as a normal URL. I suspect if the 'phisher' had tried to get you to download an exe from nastysite.com then it wouldn't have alerted you.
Thunderbird has had this for a few years now, it can actually tell between a phishing scam, a virus and a piece of spam. It also has a much more user friendly UI.
It just says 'Thunderbird thinks this message might be an email scam'. Outlook's message is way too wordy and technical (yet getting the technicalities wrong).
Posted by billybob | February 19, 2009 4:20 PM
"The newer Live Mail version is just as clunky as the old one."
Heck, it IS the old one. They didn't do much more than dress up Outlook Express.
But wait. Didn't you get the memo? Microsoft Live Essenetails is "awesome" and "excellent"! Paul Thurrott said so himself. He gave 'em all 4 stars (except video maker, shich is still beta).
Posted by Tom | February 19, 2009 5:31 PM
Its commendable that Outlook 2007 warns the user in a clear and safe way. At the same time its sad that after years of virus attacks we find such obvious and simple functionality to be worthy of note.
Posted by Phil | February 19, 2009 6:13 PM
After years of bashing on Windows XP , Vista and the rest of the Microsoft product , I am surprised that you are still sticking to Windows
Shouldn't you swicth to Linux desktop..
Then , your praise on Linux and Open source are probably crap..
Posted by John Lee | February 19, 2009 9:15 PM
I use Outlook 2007 too, and it's a Good Thing. (grin)
Posted by JohnJ | February 19, 2009 11:03 PM
John Lee real men use BSD :D
Posted by not John Lee | February 20, 2009 8:03 AM
BTW, does Internet Explorer's Phishing Filter protect against this particular link?
(I use Norton's.)
Posted by JohnJ | February 20, 2009 9:37 AM
I use a Mac; I gave up on WinBloatWare a few years ago after WinBloatOutlook locked up too many times.
I use Apple Mail which has been so boringly reliable that I have almost forgotten how much I hate the Redmond BloatFarm and its featureitis stuffed and stupid software.
As for trojans and worms, these are an integral part of the WinBloat ecosystem. Buy Window, get trojans and worms. Period, end of story.
I did not like the end of the story even with Norton with daily updates, etc.
Why bother with all the BloatFarm Bloat, the silly overhead and the abstruse and obtuse "features?" There are better ways. They may cost a slight bit more but if you pay yourself above minimum wage while at a computer, you cannot justify using a BloatFarm computer.
Posted by Jeremy w | February 20, 2009 11:18 AM
On the subject of updating Windows, the following link shows that we can all be friends no matter if you use Windows or Linux. Linux to the rescue of Windows!
-
http://blogs.computerworld.com/linux_comes_to_windows_users_rescue
Posted by Goblin | February 20, 2009 4:06 PM
Thanks, Goblin! A very useful link indeed!!!
It's just more evidence that most of the open source world values freedom and loves to share and make the world better.
Freedom is only viewed as a crime by totalitarian governments and crumbling monopolies.
Posted by Philosopher | February 20, 2009 5:25 PM
Since I have NOT used Windows 7, it would be unfair of me to say how good it actually is (since Im going off others comments)
-
Below is a link to a review of the Windows 7 beta by a Linux user, the thing is, he seems to echo much of what has already been said by Windows users, however in his case (and unlike the many Win 7 reviews we see) hes actually used an alternative as well so is in a position to point out things that someone who has only used Microsoft products has no experience of.
-
Before I link, heres one of his comments, which I dont think you could say were "anti-microsoft" or "windows hater":
-
"There still isn't much in the way of applications included but some of the existing ones have improved. Some that were in Vista have been removed and others added in. This is not a criticism of the lack of bundled applications but when you compare it to Ubuntu and the relative installation sizes you wonder what's using up all the space."
-
http://jhansonxi.blogspot.com/2009/02/linux-users-review-of-windows-7-beta.html
Posted by Goblin | February 22, 2009 4:02 AM
Is Windows coded to remove a Linux partition? A very interesting and possibly sinister story over on:
-
http://boycottnovell.com/2009/02/21/vista-7-mbr-sabotage-more/
-
If the allegation is true, I cant see the EU taking very kindly to this one either.
Posted by Goblin | February 22, 2009 5:50 AM
Re: "Is Windows coded to remove a Linux partition?"
It wouldn't surprise me. The only question is, is it malice or stupidity?
Whether out of malice, or just out of quick-and-dirty short-cut coding practices (aka stupidity), I don't know. After all, the chorus from the Windows faithful constantly reminds us that Linux holds only an 0.83% of the market. So unless they are lying en masse, I must vote for stupidity and not malice.
And does a reinstallation of grub fix the problem and allow both operating systems to boot? If that's the case, then leaving the ext3 partitions intact further supports the stupidity theory rather than the malice theory.
Posted by Philosopher | February 22, 2009 1:43 PM
Hi Philosopher!
Quote "The only question is, is it malice or stupidity?"
-
If its stupidity, its a great silly mistake for Microsoft and if its intentional, it would be the first piece of effective code (IMO) that Ive seen coming from Redmond!
-
Talking of Grub and other issues, Ive been asked to do a guest article on Windows7center.com, which of course Ive accepted (I picked up a conversation on twitter with one of the reporters) I hope Joe wont mind if I link it here when its up.
-
Keeping on the subject of proprietary and alternatives, I think the signs of a change in opinion was present a few years ago (except nobody really noticed) take a look at DivX/Xvid.
there was a great article I read on the future of software, and I think we are rapidly approaching a world where its proprietary that is a "niche" market.
Posted by Goblin | February 22, 2009 2:04 PM
Well people, Windows is getting chewed on, As linux people know Drivers are a big issue with linux but guess what, the Atheros project is finally paying dividends as my HP Box that up until now could not use wireless has just gotten wireless support in Ubuntu 9.04 Alpha.
Posting here now from my old HP box with and Atheros RX5214 Wireless card. Watch out Microsoft driver support issues are becoming a thing of the past.
Im so happy my desktop box is now a full time linux box and i can relax in front of the TV and use my Nasm assembler. No more having to use my laptops to do work with. Cool Ubuntu 9.04 you go. lol.
Posted by kitkat | February 23, 2009 5:45 AM
A good link, full of controversy but interesting nonetheless:
www.netbookdigest.com/2009/02/20/the-linux-netbook-nightmare435-million-in-vaporized-2008-profits-continued/
But as some point out, don't count Microsoft out just yet. Their purchase of great influence in the US Government, including the newly elected Chicago mob, is evident in having convinced it that Google is a monopoly but little ol' Microsoft is just another struggling face in the crowd.
Posted by Philosopher | February 23, 2009 10:52 AM
Microsoft Windows is not the safest or most secure Operating Systems, but it works and is reliable for the end-user. It has it's problems or issues, but mainly it works for the majority of us. In order to fix, adjust or develop the operating system, there have been also created and developed some series of programs or applications. One example may be the jv16 PowerTools 2009 program brought on the public market by the Macecraft Company. This software is made to optimize the Microsoft Windows, clean in a proper way the registry and back-up files and settings. This is an example, and i really say it is great and it works for everyone.
Posted by macejv | February 27, 2009 3:28 PM