Hello, Vista, have some malware

Sophos PLC has flagged three viruses typically spread through e-mail that can infect Vista customers who use a third-party Web e-mail client. While Vista's e-mail client stops Stratio-Zip, Netsky-D and MyDoom-O, the malware slips past Vista's defenses when users receive infected messages through a Web-based e-mail service, Sophos said.

Stratio-Zip topped Sophos' list of malware affecting computer users in the month of November, accounting for 33.3% of malware in circulation. Combined, the three viruses that can affect Vista users make up 39.7% of all malware in circulation during the month, Sophos said.

However, even if the malware Sophos identified slips through in an e-mail, customers won't necessarily be affected, another researcher said.

Additional Vista security mechanisms should protect users, said Mikko Hyppönen, chief research officer at F-Secure Corp. If a customer opens an infected malware file, Vista would warn and question the user before allowing the malware to wreak havoc. "These particular examples of malware probably wouldn't still be able to successfully infect the machine unless the user specifically allows it," he wrote in an e-mail exchange.

Sophos applauded the security improvements in Vista, saying that the variety of popular third party applications used by consumers inevitably will open doors to hackers.

Other antivirus companies haven't been so kind. McAfee Inc. has been highly critical of changes in the operating system that it says will make Vista less secure than previous versions of Windows. Symantec Corp. said it has discovered vulnerabilities in Vista's networking software which makes it less stable than Windows XP.

Sophos found that overall, the proportion of infected e-mail remained low in November at 0.28% but identified a record number of new threats, 7,612, during the month.