03 Apr 2006
Alerts generated by antivirus software are as bad as the spam advertising messages that clog up users' email accounts, according to an industry analyst.
"Many email security products or services will warn you if they detect a virus in an incoming message. The problem is that these days, most virus-infected email is sent not by users, but by other viruses," said Richi Jennings, an analyst at Ferris Research.
"It's effectively spam. The viruses will often use the same lists of recipients as spammers do and there's no point in contacting the 'sender' of the message because it's probably forged."
Nick Bowman, a spokesman at antivirus vendor McAfee, said: "He's right in that an antivirus product that notifies the sender or recipient of infection would indeed be creating extra traffic, and he's right that many viruses use spoofing with the same net effect."
However, Bowman explained that any good security vendor would not automatically forward notifications to cut down on the amount of traffic.
"Antivirus products can be configured to notify senders and recipients if they want, but it's not something that McAfee recommends," he said.
"What Richi's talking about has been highlighted and addressed at least two to three years ago. It hasn't been an issue for some time."
Latest stories from Security
Related articles
Related jobs
Poll
What is the most important IT priority for your company this year?
Sneak peek at the forthcoming glass-based machine
Connect with V3.co.uk
This paper focuses on a series of best practices and techniques for development teams looking to improve their software development processes
Why good data management at all levels is essential in the modern business (video, 6mins)
A Workflow Development Team Leader with a good knowledge...
Senior SQL Developer Investment Banking SSIS SSRS T-SQL...
Business Analyst Financial Services, SQL (Business analysis...
Junior/Graduate IT Support, Financial Services (Networks...
Keep up to date with the latest products, services and technologies from the world's leading IT companies. IThound.com brings you over 2,000 white papers, case studies and analyst reports.
Do you agree?
LameAV - your solution against antivirus spam
I believe that LameAV DNSBLs are the best solution for administrators, who do not know how to configure their antivirus products. LameAV DNSBLs are used by more and more servers for protection, and they hold IP addresses of servers, which send AV announcements to faked addresses. Besides, I believe there should be NO notification whatsoever implemented in AV products, because I am yet to see a virus which uses a true return address. Notifications are COMPLETELY useless.
Posted by: Tomasz Andrzej Nidecki 03 Apr 2006