27 May
2020
27 May
'20
9:05 p.m.
On Thu, 21 May 2020 13:30:20 +1200, I wrote:
A researcher investigating Trend Micro’s antimalware software <https://www.theregister.co.uk/2020/05/20/trend_accused_microsoft_cheating/> has discovered a routine in it which appears to be able to tell when the software is running within Microsoft’s WHQL test suite, so the code can behave one way during testing and certification, and a different way while running on ordinary punters’ PCs.
Microsoft seems to have confirmed this, by banning the dodgy driver part of Trend Micro’s Rootkit Buster <https://www.theregister.co.uk/2020/05/27/trend_micro_driver_banned_windows/>. Trend Micro continues to deny any intentional wrongdoing.