Microsoft Gives MVP Honors To Adware Spreader - InformationWeek
IoT
IoT
News
News
10/6/2006
01:33 PM
50%
50%
RELATED EVENTS
The Real Impact of a Data Security Breach
Aug 02, 2017
In this webcast, experts discuss the real losses associated with a breach, both in the data center ...Read More>>

Microsoft Gives MVP Honors To Adware Spreader

Microsoft gave an award to a vendor whose software is labeled as a threat by Microsoft's own security scanner, security pros say.

A developer who was recently awarded Microsoft's MVP status distributes adware with the software he creates, security professionals said Friday. Microsoft's own malware scanner pegs the MVP's software as a threat.

Cyril Paciullo, the creator of Messenger Plus -- an add-on to Microsoft's Windows Messenger/Windows Live IM client -- announced in a blog entry Thursday that he'd been given an MVP Award (Most Valuable Professional). Microsoft's MVP program honors developers and others who Microsoft believes made significant contributions to users in the past year.

But according to Chris Boyd, the director of malware research at FaceTime Communications, and Alex Eckelberry, chief executive of Sunbelt Software, Paciullo's Messenger Plus also installs LOP, an adware program that changes IE and Firefox settings, and produce pop-ups on users' desktops.

Fellow-MVP Boyd took exception to Microsoft crowning an adware distributor. "Microsoft is rewarding someone that has an active involvement with one of the most maligned names in PC hijacking. If that isn't booberific, I don't know what is," Boyd wrote on his blog. He hasn't decided whether to ask Microsoft to take him off the MVP list. "As for my own MVP status, my first knee jerk reaction is telling me to tell [Microsoft] to shove it. My second knee jerk reaction [to] jumping ship is [that would] basically give the boobs of the world a green-light to hijack the program."

Boyd also posted a screenshot of the results of several scanning engines that sniffed for Messenger Plus. Microsoft's own engine pegged the program as a threat.

Nor did Eckelberry pull punches. After noticing that Messenger Plus' installation process dropped several new icons on the desktop, including one labeled "My Antivirus Update," he said "What a misleading icon, because this crap is what you actually get: A fake McAfee-looking page doing the age-old scam of 'click here to test your CD-ROM Drive'."

Paciullo did not reply to an e-mailed request for comment.

Comment  | 
Print  | 
More Insights
Comments
Newest First  |  Oldest First  |  Threaded View
How Enterprises Are Attacking the IT Security Enterprise
How Enterprises Are Attacking the IT Security Enterprise
To learn more about what organizations are doing to tackle attacks and threats we surveyed a group of 300 IT and infosec professionals to find out what their biggest IT security challenges are and what they're doing to defend against today's threats. Download the report to see what they're saying.
Register for InformationWeek Newsletters
White Papers
Current Issue
IT Strategies to Conquer the Cloud
Chances are your organization is adopting cloud computing in one way or another -- or in multiple ways. Understanding the skills you need and how cloud affects IT operations and networking will help you adapt.
Video
Slideshows
Twitter Feed
Sponsored Live Streaming Video
Everything You've Been Told About Mobility Is Wrong
Attend this video symposium with Sean Wisdom, Global Director of Mobility Solutions, and learn about how you can harness powerful new products to mobilize your business potential.
Flash Poll