The Security Mentor

"Are Security Vendors Tricking XP SP2?", says the headline in PC World's story about XP Service Pack 2 reporting antivirus update status.

Well, not exactly, and it's only an issue when you first install the antivirus software.

Here's the deal. Windows XP SP2, commendably, tries to tell you if your antivirus software needs an update. Virus writers are busy people and release new viruses every day. Antivirus software needs a constantly updated list of known viruses so it can recognize them. A package of antivirus software on a store shelf isn't getting updated, so of course you need to fetch an update first thing after you install it.

That's where the problem comes in. A couple of antivirus vendors decided to make installing their products hassle-free by telling Windows they are up to date even before fetching the first round of updates. It's kind of like writing a check the day before your paycheck arrives.

Can this hurt you? It's hard to see how. The antivirus software still knows that it should update itself. It'll still call home for updates first chance it gets. OK, maybe if your network connection is down so you can't get the updates, and someone hands you a virus on a floppy...

Is fooling Windows a bad idea? I think so. It's good to understand that antivirus software needs updates starting the moment you install it. When antivirus makers suppress the Windows security warning they're hiding information and interfering with understanding. Besides, it just feels wrong. How many industrial accidents have started with someone turning off an alarm because they just knew it was unnecessary?

What does this mean for you? It means don't panic if you install antivirus software and Windows pops up a security warning. That just means everything is working and your antivirus supplier is doing everything right.