[ISN] Microsoft 'Titan' Will Zap 10 Top Worms

InfoSec News isn at c4i.org
Tue Jan 11 01:44:03 EST 2005


By Ryan Naraine 
January 10, 2005 

When the first version of Microsoft Corp.'s new malicious software
removal tool is released on Tuesday, it will be pre-programmed to zap
10 of the most virulent worms and viruses, including Blaster, Sasser,
MyDoom and Nachi.

As previously reported, the tool will be released as a "critical"  
download and updated once a month as part of Microsoft's scheduled
software patch cycle.

According to a note released to Microsoft MVPs (Most Valuable
Professionals), the initial version of the tool, code-named Titan,
will be able to detect and delete the Blaster, Sasser, MyDoom,
DoomJuice, Zindos, Berweb/Download.Ject, Gailbot and Nachi viruses.

In the event of a major worm or virus outbreak, Microsoft will push
out updates for the malicious software removal tool outside of the
monthly cycle, according to Amy Carroll, director of product
management in Microsoft's security business technology unit.

The tool will also be pushed out to Windows users as a download
through the Microsoft Download Center. Customers who have Automatic
Updates turned on will automatically receive the download.

It will also be made available as an ActiveX control on a malware
removal section of Microsoft's home page.

The tool is programmed to scan a PC for infections of known viruses,
but it is not intended as a substitute for full anti-virus protection.  
After a scan is conducted, the Microsoft tool will present color-coded
results: a red 'X' for an infected machine or a green checkbox if
nothing is detected.

Anti-virus vendor McAfee Inc. also provides a similar tool called
Avert Stinger. Stinger, available as a free download, uses scan engine
technology, including process scanning, digitally signed DAT files and
scan performance optimizations, to disinfect systems.

More information about the ISN mailing list