At ESET we believe that NOD32 should detect and block bad programs, not detect everything and then make you figure out if the toolbar you want to install is good or bad.

The Win32/Stration family of worms has kept ESET's analysts busy over the last few days; but last night, with close to 50 variants being released in one go, they were able to go home and get some sleep. Why?

There is only one way that software (or hardware with software on it) releases with the wrong data (malware is the wrong data). That is if the company releasing the data doesn't know what they are releasing.

ESET's NOD32 is the first known anti-virus product to detect all known types of VML exploit. This detection and blocking prevents attackers from gaining control of the users PC and then running other malicious software.

ZERT is a group of security researchers who feel that the danger of the vulnerability and lack of an MS patch warrants creating their own temporary patch.

As of this writing we have not seen malicious code exploiting this vulnerability, but that does not mean it will not happen.

Scanners and behavior blockers both attempt to stop viruses, spyware and other bad programs. The approaches used by scanners and behavior blockers are complementary when a skilled user applies them.

Nothing inside the file changed, but the file is no longer "The Anti-virus test file", it is now "The Anti-Virus or Anti-Malware test file". Why the change?