The issue arose last week when Microsoft upgraded Windows AntiSpyware. The new tool flagged registry keys established by Symantec products as programs that specifically steal Bancos passwords.
Windows AntiSpyware issued warnings and urged users to remove these keys. “If removed, all versions of SAV (Symantec AntiVirus) and SCS (Symantec Client Security) will cease to function,” stated both Microsoft and Symantec.
Problems occurred with Windows AntiSpyware Beta 1 and Symantec’s security tools, except for those branded as Norton.
The software corporation led by billionaire Bill Gates announced another upgrade for Windows AntiSpyware to fix this issue. Although still in beta, this program is one of the most widely used software today (with 25 million downloads from Microsoft’s website). Windows AntiSpyware was renamed to Windows Defender last year and will continue under this new name starting with the second beta release.
Additionally, security experts have warned of a drag-and-drop vulnerability in the Internet Explorer browser that could allow hackers to install malware and take full control of the computer.
Microsoft was informed about this vulnerability back in August 2005. Websense, a U.S. company, confirmed yesterday that several websites containing dangerous code could trick users into dragging and dropping files from one window to another. Once the mouse is released in the new window, the code will execute automatically without any intervention.
Microsoft stated that they will not release a patch until the launch of Windows Server 2003 Service Pack 2 and Windows XP Service Pack 3.
The SecuriTeam website has detailed three preventive measures for user systems. As planned, tomorrow Microsoft will release 7 core fixes in Windows Media Player, Microsoft Office, and Windows.