McAfee sees 400,000 virus definitions by 2008

McAfee now has 200,000 definitions in its antivirus database. It expects this number to double in two years.

Although widespread virus outbreaks may be a thing of the past, the total amount of malicious software being written is on the rise, according to McAfee.

On Tuesday, McAfee vendor added the 200,000th definition to its threat database, and the security vendor expects the total number of identified threats to double in another two years. McAfee's antivirus products use these definitions as digital fingerprints to determine which software should not be allowed to run on a user's PC.

After a bit of a lull in their efforts, virus writers have spent the past few years creating more of this software than ever before, said Jimmy Kuo, a research fellow with McAfee's Avert Labs.

Between 1999 and 2002, when McAfee's database held steady at around 50,000 definitions, but since then, the number of different worms and viruses being created has jumped, he said.

At the same time, the number of serious outbreaks has dropped dramatically. In 2004, McAfee counted 48 virus outbreaks of at least medium severity. In 2005, that number dropped to 12. This year there haven't been any.

These trends reflect the growth and increasing professionalization of hacker culture that no longer seeks the fame that accompanies a worldwide virus outbreak. Instead of fame, hackers want money, Kuo said.

"There are now hackers for hire in spamming and phishing campaigns and they're in it to work," he said. "When you create a big incident... the police react and they go searching for you," he added. "So the bad guys don't create these incidents anymore."

McAfee may be bragging that it has discovered a large number of virus definitions, but there's a down side to all of this good work: sluggish computers.

There are now more antivirus signatures than there are files on a typical PC, according to Andrew Jaquith, a senior analyst at the Yankee Group. "Collectively the industry is creaking under the load of all of it," he said.

With its 200,000 definitions, McAfee's software is going to cause some trouble on some PCs, Kuo admitted. "For those companies that still have really old machines, they basically stop updating their dat [virus definition] files after a while," he said. "If you run it on a 1998-style machine, it's not going to run very well at all."

But even if newer "behavior-based" antivirus techniques begin to take a front seat in identifying viruses, definitions will not go away because they serve an important role in cleaning up systems that have already been compromised, Kuo said. "In terms of preventing you might lean more upon behavior-based [techniques]" he said. "But after you've been hit by something you're going to want to go to definitions."

Kuo's blog posting on the 200,000th virus definition can be found here: http://www.avertlabs.com/research/blog/?p=49

Join the newsletter!

Error: Please check your email address.
Rocket to Success - Your 10 Tips for Smarter ERP System Selection
Keep up with the latest tech news, reviews and previews by subscribing to the Good Gear Guide newsletter.

Robert McMillan

IDG News Service
Show Comments

Cool Tech

Breitling Superocean Heritage Chronographe 44

Learn more >

SanDisk MicroSDXC™ for Nintendo® Switch™

Learn more >

Toys for Boys

Family Friendly

Panasonic 4K UHD Blu-Ray Player and Full HD Recorder with Netflix - UBT1GL-K

Learn more >

Stocking Stuffer

Razer DeathAdder Expert Ergonomic Gaming Mouse

Learn more >

Christmas Gift Guide

Click for more ›

Most Popular Reviews

Latest Articles

Resources

PCW Evaluation Team

Walid Mikhael

Brother QL-820NWB Professional Label Printer

It’s easy to set up, it’s compact and quiet when printing and to top if off, the print quality is excellent. This is hands down the best printer I’ve used for printing labels.

Ben Ramsden

Sharp PN-40TC1 Huddle Board

Brainstorming, innovation, problem solving, and negotiation have all become much more productive and valuable if people can easily collaborate in real time with minimal friction.

Sarah Ieroianni

Brother QL-820NWB Professional Label Printer

The print quality also does not disappoint, it’s clear, bold, doesn’t smudge and the text is perfectly sized.

Ratchada Dunn

Sharp PN-40TC1 Huddle Board

The Huddle Board’s built in program; Sharp Touch Viewing software allows us to easily manipulate and edit our documents (jpegs and PDFs) all at the same time on the dashboard.

George Khoury

Sharp PN-40TC1 Huddle Board

The biggest perks for me would be that it comes with easy to use and comprehensive programs that make the collaboration process a whole lot more intuitive and organic

David Coyle

Brother PocketJet PJ-773 A4 Portable Thermal Printer

I rate the printer as a 5 out of 5 stars as it has been able to fit seamlessly into my busy and mobile lifestyle.

Featured Content

Product Launch Showcase

Latest Jobs

Don’t have an account? Sign up here

Don't have an account? Sign up now

Forgot password?