About Us

The Immunet Blog is maintained by the Immunet team as a forum for discussing news and issues related to AntiVirus, security and cloud technology.

Search

Entries from February 1, 2010 - March 1, 2010

Thursday
Feb252010

New Immunet Protect Beta 1.0.26 Posted 

The updater files for migration to Immunet Protect Beta 1.0.26 are now posted.  Migration can be done from any Immunet build from 1.0.14 up to current (1.0.25). You will be prompted for a reboot as we are replacing drivers with this install. Windows XP SP2 is not supported, only XP SP3 and up. Vista SP1 + and Windows 7 are also supported.

The primary changes in 1.0.26 are:

  •  Fixed an installer issue where some driver failures were occurring on Windows XP SP3 systems.  
  •  Changed our installation process to ensure cleaner removal and installation of drivers.
  •  Changed our internal logging to add additional wide character support.
  •  Addressed 54 additional issues reported in field from previous builds.
  •  Added additional conviction logic into our back office.
  • Rounded out support for OEM functionality.

If you are not currently having problems with your installation there is no reason to upgrade. If you are in doubt about whether to upgrade or not please mail Support and ask, we are happy to help.

 

Monday
Feb222010

Are Social Media Portals Creating a False Sense of Security? 

The core theme for viruses is trickery. Fool a person into clicking on a link they think is accessing something they want and the infection spreads (Twitter viruses, Facebook viruses, etc). Viruses spread really fast with this approach – look at the recent Gmail worm the New York Times wrote about. Social media has proved to be a hotbed for this deception and people are getting wise to it. That’s good.

What’s bad? Aggregating all your social media ‘stuff’ in one location, like the recent Microsoft Outlook 2010 Social Connector, Meebo and Snaptu (for phones). As a consumer, surfing Twitter, Facebook and the rest comes with a known risk – watch out for links. Do such ‘street-smarts’ erode if all your activity is accessible from a trusted application, such as Outlook or another? The links are still suspect but our keen eye might dim a bit.

Real-time antivirus protection becomes even more important with the adoption of these social media portals. Yet another reason that Immunet Protect’s “Collective Immunity” against viruses deserves a look as a means to protect you and your community. Once a virus is detected, all users are instantly protected against that virus, rather than having to wait days to update software.

Think about that for a minute. If you have 200 Facebook friends, 1,000 Twitter followers and share files with 50 people and any one of them gets a virus, Immunet Protect kicks in and everyone is instantly protected – you’re all safe! Now, look at this example with traditional, clunky antivirus applications, where there may be 15 different programs running across your 1,250 connections. It might take days to update each program’s database. How many times will you interact, click on and forward links and files among the group in a few days, potentially infecting thousands of your friends and followers!? Scary, right!

Wednesday
Feb172010

The Immunet Protect ETHOS Engine, A Week In the Life...

Earlier in this month the Immunet team shipped and enabled a new engine to our Immunet Protect Beta. This Anti-Virus engine, titled ETHOS, is focused on helping us leverage our community to help protect our community. Essentially the engine looks for threats (heuristically) on the desktops of our community. If it finds a suspected threat it remediates it and then communicates about it (and sometimes the file itself) to our Cloud so the rest of the Immunet Community is protected from it instantly.

It's long been our opinion that the most dangerous malware our community faces is malware which is making the rounds in the 'here and now' . This 'active malware' is what we all need to be worried about. This is the stuff that you and those around you are most likely to encounter. Sounds like common sense right? It is, but the vast  amount of Anti-Virus signatures (well over 97%) created for most Anti-Virus products are created from traded malware collections (which are tired and old) or collected/crawled from malware web sites which are often fallow and no longer active. This results in most Anti-Virus products downloading millions of largely useless definitions a year. We believe it's the small minority of threats which are live and on the move which need your attention.

So with the small minority in mind we built ETHOS. I am going to present some data here for you put context around our findings.

General Threat Data (Based off the last 7 days)

  • Every 24 hours we block 1910 (on average, outliers removed) threats
  • We process (create cloud definitions) for 17,500 files a day. This malware comes from crawling and malware collections which we trade. We will refer to this as 'Cloud Processed' malware.
  • We separately collect and process 50 threats a day (on average) from our ETHOS engine. This engine is only active on 7,120 users in our community this is about 10% of the whole user base.

So with these numbers in mind here is the story so far, of the 1910 threats we stop each day, 382 or 20% come from ETHOS.  So to put this into perspective graphically our overall processing looks like this:

Now, if we look at what our actual user base is seeing for 'in-field' protections it looks like this:

 

What you should take away from this is that ETHOS is contributing a wildly disproportionate amount of protection to our Community when compared to our other protection generation. This is with only 10% of the Immunet Community running ETHOS right now. As we grow ETHOS will see wider deployment and these numbers should become even more compelling.  

 

 

Tuesday
Feb092010

Get FREE Antivirus Protection AND a FREE Google Nexus One phone

Starting today, February 9th, you can enter to win a FREE Google Nexus One phone when you download our free antivirus product, Immunet Protect, register an account and invite just one of your friends to try it out. When your friend registers, you'll be eligible for the prize. Act quick, we’re only offering the phone sweepstakes for 14 days.

Why is Immunet Protect ideal for your community? With the explosion of social applications like Facebook and Twitter, it is no longer enough to protect your own computer alone. You need to protect your social network, protect your community from threats, viruses and other malware.

Immunet Protect is the first security application focused on protecting your community. It’s lightweight (under 5 megs), comprehensive (6.8 million threats blocked … and growing by the minute!) and non-invasive (no software conflicts or issues with existing programs).

Check out what the media is saying about Immunet Protect: Mashable. CNET. Technology Review. About.com, TechiBuzz.  

Hurry up, the Google Nexus One phone offer is only good until February 22nd.

Sunday
Feb072010

Immunet Protect earns a Techie Buzz Rating: 4/5 (Excellent)!


Clif Sipe over at Techie Buzz just gave Immunet Protect 1.0.25 a very thorough review that is worth a read. You can find the review here. The upshot is that we recieved a 4/5 rating from Clif who has been watching the product for a few months now.

 

Thursday
Feb042010

RE: US Branded Dirtiest Web Hosting Nation (SC Magazine)

Today, the fine reporters of SC Magazine ran a bit of research from Sophos about the US being branded “the dirty man of the web world”. Infected websites, malware and malicious software abound.

We already know Twitter viruses, Facebook viruses and the host of other social networking attacks are an issue. Now, the trustworthiness of legit websites is an increasing concern and time is an issue - time, in the sense that antivirus protection follows the identification of a threat. This could take days for traditional software. There are plenty of examples around the forums

This is precisely the reason overlaying existing antivirus software with Immunet Protect is beneficial. Immunet’s community focus plus the Collective Immunity protection feature means if anyone using Immunet Protect registers a virus, all users are instantly protected against that virus. To better illustrate this point, have a look over the actual numbers:

 

 

Traditional

Immunet

Sample Collection

1 Day – 1 Month

Real-time

Sample Processing

1 Day – 2 Weeks

Real-time

Publishing

1 Hour – 1 Day

Real-time

Footprint

28 – 352 MB

10MB

Detection Technology

File Based, Signature Focused

Data Mining, Network Centric

 

Tuesday
Feb022010

Immunet beats out Microsoft Security Essentials and Avira in MRG Rogue AV Test!

Immunet Protect Beta 1.0.24 was recently put through its paces by the folks over at Malware Research Group (MRG). MRG is doing a well thought out monthly review of 30 anti-malware products to see how well they detect fresh, real world, active Rogue Anti-Virus programs.  The report titled “Rogue Software Infection Prevention Test, Januaryshowed Immunet Protect Beta performed quite handily. In fact, we beat out both Microsoft Security Essentials and Avira  at detecting these in-field threats. It’s great vindication for our community (and the development team of course..), particularly given we are in beta with some ways to go before all of our detection engines are deployed!

Tuesday
Feb022010

1.0.25 Updaters Posted

All,

The updater files for migration to 1.0.25 are now posted. The updaters will install the new product, uninstall old product if you have it and then load your new drivers. Migration can be done from any Immunet build from 1.0.14 up to current (1.0.24). You will be prompted for a reboot as we are replacing drivers with this install. Windows XP SP2 is not supported, only XP SP3 and up. Vista SP1 + and Windows 7 are also supported.

The primary changes in 1.0.25 are:

  • Fixed an installer issue where some driver failures were occurring on non-native English OS installs.
  • Fixed an 'Offline Mode' issue related to DNS under certain platforms.
  • Increased efficacy of the ETHOS engine and reduced it's memory footprint.
  • Fixed an issue with the local system cache which causes some look-ups to fail.


The Immunet Protect Beta 1.0.25 32 bit Updater is:Here
The Immunet Protect Beta 1.0.25 64 bit Updater is:Here

Our intention is for this to be our last update for the product until our April release.