Microsoft's Windows Vista operating system has been released
already for businesses (and beta testers who got a free copy of Vista
Ultimate/Business), but the rest of us will have to wait until January 30, 2007 to get our
retail copies. Within the next year, Microsoft is projected to ship roughly 90 million copies of Vista
within the first year alone.
In the mean time, Microsoft has been testing Vista's
defenses to the top malware threats as reported
by Sophos on November 30. The results from Microsoft's internal testing
were quite
promising according to Jim Allchin.
Testing showed that when using a clean install of Windows
Vista with no third-party security applications installed, Vista was immune to
all ten of the malware threats.
When using Outlook or third-party email applications which prevent users from running executables known to be malware
threats, Vista was protected eight out of ten times. Bagle-Zip and Mydoom-O
were the culprits in this test. Microsoft contends that it's not the fault of
the Windows Vista operating system, but rather a function of the email program
and users who open up suspicious .ZIP files and then run the executables found
within.
It's interesting to note that Windows Mail, which
comes standard with Vista, blocks .ZIP attachments. Microsoft's Outlook
client does not do the same. Microsoft does note, however, that email clients
can support .ZIP blocking via its Attachment Manager API.
Jim Allchin in closing gives these tips for users to abide
by when it comes to Windows Vista: 1)
stay on top of security updates, 2) use a firewall and 3) use anti-virus
software. All of these are pretty much common sense -- however, if common sense
was employed more often in computing, we wouldn't have large malware breakouts
via email in the first place.