Domain: symantec.com
Stories and comments across the archive that link to symantec.com.
Comments · 1,115
-
Re:It could be worse
I'm not surprised. Norton makes an anti-virus/anti-worm/anti-spyware product.
Not a general anti-malware/anti-adware product.The sad thing is that this is about Norton 360:
Comprehensive, automated anti virus and anti spyware protection
-
Re:Uhm...?
Here's a response from 2005 that was NOT cut and pasted:
The original URL was https://forums.symantec.com/syment/board/message?board.id=103&message.id=17080, but they removed it. However, Google cache reveals all:
(Post from was Bob Sanford)
Attached is the final email received from the Backline Support Engineer from Symantec. For all interested in purchasing this product... think twice.
Our problem was scheduled reports fail and no email attachment is generated.
The software performs correctly in demo mode but does not work once we enter the serial number.
I guess buyer beware!
Here is the message:
Chris / Bob,
I left voicemail for each of you explaining the present status of this case?s issues. This email will give further details. The first issue where scheduled report jobs could not be run with SBS licensing will be addressed in an upcoming HotFix. I do not know the exact release date of the HotFix. The Second issue regarding Report Job email notification not attaching a report when configured will not be addressed at this time. This was looked at by engineering and was determined to be in a different area of code from the scheduled job issue and since yours is the only case we have received related to this particular issue, the priority is not sufficient for developing an immediate patch. Since this case was opened through Dell, I have notified our internal Dell representative about the issue and status. From a Tech Support, we have done all we can do. Bob, since this issue is obviously of great importance to you, I would recommend working through Dell to engage engineering or sales to raise the priority / visibility of this issue. If you have any questions, please let me know. The link below is for the TechNote released to cover the issue:
http://support.veritas.com/docs/281743
Regards,
Russ Perry
Backline Support Engineer
Symantec Corporation
www.symantec.com
Office: 407-357-7237
russell_perry@symantec.com
-
Re:Unbalanced?
Please provide one example of a worm that spreads automatically on OS X.
OK. Because of people like you, anti-virus vendors have created a worm for OS X (I believe there are other examples):
http://www.symantec.com/security_response/writeup.jsp?docid=2006-021715-3051-99
It's not a commercial worm, but this sort of worm is possible on OS X, just more difficult. You talk as if this sort of exploit is impossible somehow on OS X, it is not.
Quite apart from that, you were wrong to say it has not been owned remotely - it has on multiple occasions had remote exploits via the browser. These require the user to visit a page with malicious javascript, that is all. Then a remote exploit commences. They do not require local access to the computer. Some have been patched, some are still open. Other browsers have similar exploits.
To quote your initial incorrect statement
:It's a lot more important to be secure from the 35 million people out on the internet than from the 2 that have an account on your computer.
The exploits I listed are not ones which require a local log in by the hacker, and this competition will specifically be testing browsers too.
Now you can play semantics, and try to twist remote to mean 'remote with no user action' but that's not what you said initially, it would not be a real world test, and that's not what the later stages of this contest test - last year I think they progressed from default locked down config, to services on, to visiting a web page. Last year the macbook was hacked via visiting a web page. A fair test given that most users don't leave their machine with no services on and never visiting web pages.
Vulnerabilities in web browsers certainly should not be dismissed as 'local' exploits - they only require minimal user intervention (clicking a link), and if that can lead to the system being compromised, it should be considered insecure. Indeed, after one initial infection, a worm could easily spread this way by emailing/iming contacts with a URL.
PS I run OS X, and don't run a virus scanner due to the lack of worms/viruses, but I don't view it as invulnerable, and neither should you. Your munition/shoe analogy doesn't make any sense, and implies that you really think that using OS X makes you somehow invulnerable to any exploits - it really doesn't.
-
Re:FireFox is right.
In any case, this isn't like 1994 when people did not know how to download software. Right now, people download stuff all the time, from chat programs to games and utilities, and wallpapers, songs, and more. None of that is bundled, but people manage fine. Same thing with browsers.
No, users do not know how to download software, any more than they did in 1994. Most of those things you listed are available in a web-based form (e.g. chat, games, virus scan, radio, etc. etc.) and people are accustomed to jumping through the extra hoops you have to jump through to avoid downloading and installing new applications (e.g. using a web-based e-mail service instead of setting up a POP3/IMAP client).
I mean, Paint is bundled with Windows, but that hasn't stopped anyone from making their own paint programs, now has it?
How many can you name, that an average user has heard of? Paint Shop Pro is the only one I can think of, other than Photoshop and GIMP.
-
Re:See to believe....
It reeks of FUD.
Absolutely.
And all the security articles online have a dog in the fight, from Semantic's report earlier this year to the January edition of Linux Journal. It's all opinion or studies by partisans.
In debate, the reasons why FOSS projects should be secure -- many eyes, many hands, short development cycle, etc. -- they convincing. Something firmer than theory would be nice, though. More positive data, standards to help analyze and compare, would be good and healthy. We all know that bugs and design flaws can persist in open source.
Maybe the security criticism is an opportunity to examine more closely.
-whew first post out of the way- -
Re:Windows 7 == Financial Calamity
Once the millions hear that they can get $50 back from Microsoft by refusing the EULA click-through, AND they can get an OS that doesn't need an anti-virus program, AND that most of their existing software, including games, will still work, they'll switch.
Saving $50 when a computer cost $5,000 didn't make sense. Saving $50 and getting rid of the virus problem (and its' associated costs) when a computer costs $250 makes a LOT of sense.
conflicker/downadup, antivirus2009.exe, coolwebsearch, etc., will keep on giving people incentives to switch.
-
Re:lame
Symantec produces software that slows down your computer, makes your other software stop working, and makes itself difficult to uninstall. Pretty much the same as a virus.
As a long term victim of Symantec software you are absolutely right.
Though their anti virus software does work, it out competes any malware completely leaving no room for them to run, or anything else.
Symantec Endpoint Protection sucks, just view the Symantec forums for ample evidence. -
Re:Symmantec out for the count
What's your point?
:grin: -
Re:Could it be hijacked...
Their might be built-in functionality in the virus itself for such operations, but I'd think that would increase the size of the binary too much.
In this day and age? Hardly. Not when the virus writer got around a blocking attempt by including a 75k data file right in the virus itself.
-
Re:Could it be hijacked...
According to this analysis, the writers anticipated the daily domain-generation algorithm it uses to check for updates being reverse engineered, and they put in additional protection so that it would only download code from the original authors - presumably using some kind of key signing.
-
Technical examination
There's a more technical examination of the virus at https://forums.symantec.com/t5/Malicious-Code/Downadup-Small-Improvements-Yield-Big-Returns/ba-p/381717
-
Re:ease of deployment
Right now, ghost is still the most efficient way for us and our number of users, but I can see that changing.
And yet another corner of the mighty IT Ecosystem gets pulled under the Microsoft umbrella, with predictable results for competing platforms. It's a good thing there are open source solutions Microsoft can't kill.
They're after Adobe, too. All you Photoshop fans should be really nervous.
-
Re:so what?
it's not like automatic virus removal hasn't been done before (remember the W32.Welchia family?)
;) -
It's called software streaming.
Software streaming is nothing new. Altiris, Citrix, and Microsft all offer solutions.
Microsoft's application streaming is the best of the three (in my opinion, from demoing each of them). They acquired it from another company, and the technology was formerly called SoftGrid.
It allows amazing flexibility, because all you really need to do is "sequence" the app, and it creates a file called Feature Block 1, which contains only the portions of the program required for initial launch. The rest of it is streamed on-demand as other parts of the app are accessed, and also in the background at all times.
You deploy apps by associating them with security or distribution groups, and as long as the client machine has the app-v client, you're set.
I've used it to sequence apps like Quake 3, Counter-Strike, and Warcraft 3 for my home network. -
Re:Wrong, and bad summary, as usual
Nice post, but you have one MAJOR fallacy included.
Wrong. Totally wrong. Mac antivirus software ONLY scans for W32 viruses as those are the only payloads that there are definitions for.
Wrong. Totally wrong.
http://www.symantec.com/security_response/threatexplorer/azlisting.jsp?azid=O
Yes, there are fewer than a dozen OSX.* malware variatns for which definitions exist, and most of them are essentially never seen in the wild...but that's infintely more than none.
-
Re:Wrong, and bad summary, as usual
E.g.:
-
Re:its about the dominant os
Where did you get that statistic, Apple website? Or are you just simply confused about the defenition of "the wild"?
http://www.symantec.com/security_response/writeup.jsp?docid=2006-063013-2645-99
http://www.symantec.com/security_response/writeup.jsp?docid=2001-060806-1018-99
http://www.symantec.com/security_response/writeup.jsp?docid=2006-060110-4631-99
http://www.symantec.com/security_response/writeup.jsp?docid=2006-021715-3051-99
http://www.symantec.com/security_response/writeup.jsp?docid=2006-031413-1704-99
http://www.symantec.com/security_response/writeup.jsp?docid=2008-062513-3120-99
http://www.symantec.com/security_response/writeup.jsp?docid=2008-111315-1230-99
http://www.symantec.com/security_response/writeup.jsp?docid=2006-021614-4006-99
http://www.symantec.com/security_response/writeup.jsp?docid=2006-110217-1331-99
http://www.symantec.com/security_response/writeup.jsp?docid=2007-110101-2320-99
http://www.symantec.com/security_response/writeup.jsp?docid=2008-062404-1222-99 -
Re:its about the dominant os
Where did you get that statistic, Apple website? Or are you just simply confused about the defenition of "the wild"?
http://www.symantec.com/security_response/writeup.jsp?docid=2006-063013-2645-99
http://www.symantec.com/security_response/writeup.jsp?docid=2001-060806-1018-99
http://www.symantec.com/security_response/writeup.jsp?docid=2006-060110-4631-99
http://www.symantec.com/security_response/writeup.jsp?docid=2006-021715-3051-99
http://www.symantec.com/security_response/writeup.jsp?docid=2006-031413-1704-99
http://www.symantec.com/security_response/writeup.jsp?docid=2008-062513-3120-99
http://www.symantec.com/security_response/writeup.jsp?docid=2008-111315-1230-99
http://www.symantec.com/security_response/writeup.jsp?docid=2006-021614-4006-99
http://www.symantec.com/security_response/writeup.jsp?docid=2006-110217-1331-99
http://www.symantec.com/security_response/writeup.jsp?docid=2007-110101-2320-99
http://www.symantec.com/security_response/writeup.jsp?docid=2008-062404-1222-99 -
Re:its about the dominant os
Where did you get that statistic, Apple website? Or are you just simply confused about the defenition of "the wild"?
http://www.symantec.com/security_response/writeup.jsp?docid=2006-063013-2645-99
http://www.symantec.com/security_response/writeup.jsp?docid=2001-060806-1018-99
http://www.symantec.com/security_response/writeup.jsp?docid=2006-060110-4631-99
http://www.symantec.com/security_response/writeup.jsp?docid=2006-021715-3051-99
http://www.symantec.com/security_response/writeup.jsp?docid=2006-031413-1704-99
http://www.symantec.com/security_response/writeup.jsp?docid=2008-062513-3120-99
http://www.symantec.com/security_response/writeup.jsp?docid=2008-111315-1230-99
http://www.symantec.com/security_response/writeup.jsp?docid=2006-021614-4006-99
http://www.symantec.com/security_response/writeup.jsp?docid=2006-110217-1331-99
http://www.symantec.com/security_response/writeup.jsp?docid=2007-110101-2320-99
http://www.symantec.com/security_response/writeup.jsp?docid=2008-062404-1222-99 -
Re:its about the dominant os
Where did you get that statistic, Apple website? Or are you just simply confused about the defenition of "the wild"?
http://www.symantec.com/security_response/writeup.jsp?docid=2006-063013-2645-99
http://www.symantec.com/security_response/writeup.jsp?docid=2001-060806-1018-99
http://www.symantec.com/security_response/writeup.jsp?docid=2006-060110-4631-99
http://www.symantec.com/security_response/writeup.jsp?docid=2006-021715-3051-99
http://www.symantec.com/security_response/writeup.jsp?docid=2006-031413-1704-99
http://www.symantec.com/security_response/writeup.jsp?docid=2008-062513-3120-99
http://www.symantec.com/security_response/writeup.jsp?docid=2008-111315-1230-99
http://www.symantec.com/security_response/writeup.jsp?docid=2006-021614-4006-99
http://www.symantec.com/security_response/writeup.jsp?docid=2006-110217-1331-99
http://www.symantec.com/security_response/writeup.jsp?docid=2007-110101-2320-99
http://www.symantec.com/security_response/writeup.jsp?docid=2008-062404-1222-99 -
Re:its about the dominant os
Where did you get that statistic, Apple website? Or are you just simply confused about the defenition of "the wild"?
http://www.symantec.com/security_response/writeup.jsp?docid=2006-063013-2645-99
http://www.symantec.com/security_response/writeup.jsp?docid=2001-060806-1018-99
http://www.symantec.com/security_response/writeup.jsp?docid=2006-060110-4631-99
http://www.symantec.com/security_response/writeup.jsp?docid=2006-021715-3051-99
http://www.symantec.com/security_response/writeup.jsp?docid=2006-031413-1704-99
http://www.symantec.com/security_response/writeup.jsp?docid=2008-062513-3120-99
http://www.symantec.com/security_response/writeup.jsp?docid=2008-111315-1230-99
http://www.symantec.com/security_response/writeup.jsp?docid=2006-021614-4006-99
http://www.symantec.com/security_response/writeup.jsp?docid=2006-110217-1331-99
http://www.symantec.com/security_response/writeup.jsp?docid=2007-110101-2320-99
http://www.symantec.com/security_response/writeup.jsp?docid=2008-062404-1222-99 -
Re:its about the dominant os
Where did you get that statistic, Apple website? Or are you just simply confused about the defenition of "the wild"?
http://www.symantec.com/security_response/writeup.jsp?docid=2006-063013-2645-99
http://www.symantec.com/security_response/writeup.jsp?docid=2001-060806-1018-99
http://www.symantec.com/security_response/writeup.jsp?docid=2006-060110-4631-99
http://www.symantec.com/security_response/writeup.jsp?docid=2006-021715-3051-99
http://www.symantec.com/security_response/writeup.jsp?docid=2006-031413-1704-99
http://www.symantec.com/security_response/writeup.jsp?docid=2008-062513-3120-99
http://www.symantec.com/security_response/writeup.jsp?docid=2008-111315-1230-99
http://www.symantec.com/security_response/writeup.jsp?docid=2006-021614-4006-99
http://www.symantec.com/security_response/writeup.jsp?docid=2006-110217-1331-99
http://www.symantec.com/security_response/writeup.jsp?docid=2007-110101-2320-99
http://www.symantec.com/security_response/writeup.jsp?docid=2008-062404-1222-99 -
Re:its about the dominant os
Where did you get that statistic, Apple website? Or are you just simply confused about the defenition of "the wild"?
http://www.symantec.com/security_response/writeup.jsp?docid=2006-063013-2645-99
http://www.symantec.com/security_response/writeup.jsp?docid=2001-060806-1018-99
http://www.symantec.com/security_response/writeup.jsp?docid=2006-060110-4631-99
http://www.symantec.com/security_response/writeup.jsp?docid=2006-021715-3051-99
http://www.symantec.com/security_response/writeup.jsp?docid=2006-031413-1704-99
http://www.symantec.com/security_response/writeup.jsp?docid=2008-062513-3120-99
http://www.symantec.com/security_response/writeup.jsp?docid=2008-111315-1230-99
http://www.symantec.com/security_response/writeup.jsp?docid=2006-021614-4006-99
http://www.symantec.com/security_response/writeup.jsp?docid=2006-110217-1331-99
http://www.symantec.com/security_response/writeup.jsp?docid=2007-110101-2320-99
http://www.symantec.com/security_response/writeup.jsp?docid=2008-062404-1222-99 -
Re:its about the dominant os
Where did you get that statistic, Apple website? Or are you just simply confused about the defenition of "the wild"?
http://www.symantec.com/security_response/writeup.jsp?docid=2006-063013-2645-99
http://www.symantec.com/security_response/writeup.jsp?docid=2001-060806-1018-99
http://www.symantec.com/security_response/writeup.jsp?docid=2006-060110-4631-99
http://www.symantec.com/security_response/writeup.jsp?docid=2006-021715-3051-99
http://www.symantec.com/security_response/writeup.jsp?docid=2006-031413-1704-99
http://www.symantec.com/security_response/writeup.jsp?docid=2008-062513-3120-99
http://www.symantec.com/security_response/writeup.jsp?docid=2008-111315-1230-99
http://www.symantec.com/security_response/writeup.jsp?docid=2006-021614-4006-99
http://www.symantec.com/security_response/writeup.jsp?docid=2006-110217-1331-99
http://www.symantec.com/security_response/writeup.jsp?docid=2007-110101-2320-99
http://www.symantec.com/security_response/writeup.jsp?docid=2008-062404-1222-99 -
Re:its about the dominant os
Where did you get that statistic, Apple website? Or are you just simply confused about the defenition of "the wild"?
http://www.symantec.com/security_response/writeup.jsp?docid=2006-063013-2645-99
http://www.symantec.com/security_response/writeup.jsp?docid=2001-060806-1018-99
http://www.symantec.com/security_response/writeup.jsp?docid=2006-060110-4631-99
http://www.symantec.com/security_response/writeup.jsp?docid=2006-021715-3051-99
http://www.symantec.com/security_response/writeup.jsp?docid=2006-031413-1704-99
http://www.symantec.com/security_response/writeup.jsp?docid=2008-062513-3120-99
http://www.symantec.com/security_response/writeup.jsp?docid=2008-111315-1230-99
http://www.symantec.com/security_response/writeup.jsp?docid=2006-021614-4006-99
http://www.symantec.com/security_response/writeup.jsp?docid=2006-110217-1331-99
http://www.symantec.com/security_response/writeup.jsp?docid=2007-110101-2320-99
http://www.symantec.com/security_response/writeup.jsp?docid=2008-062404-1222-99 -
Re:its about the dominant os
Where did you get that statistic, Apple website? Or are you just simply confused about the defenition of "the wild"?
http://www.symantec.com/security_response/writeup.jsp?docid=2006-063013-2645-99
http://www.symantec.com/security_response/writeup.jsp?docid=2001-060806-1018-99
http://www.symantec.com/security_response/writeup.jsp?docid=2006-060110-4631-99
http://www.symantec.com/security_response/writeup.jsp?docid=2006-021715-3051-99
http://www.symantec.com/security_response/writeup.jsp?docid=2006-031413-1704-99
http://www.symantec.com/security_response/writeup.jsp?docid=2008-062513-3120-99
http://www.symantec.com/security_response/writeup.jsp?docid=2008-111315-1230-99
http://www.symantec.com/security_response/writeup.jsp?docid=2006-021614-4006-99
http://www.symantec.com/security_response/writeup.jsp?docid=2006-110217-1331-99
http://www.symantec.com/security_response/writeup.jsp?docid=2007-110101-2320-99
http://www.symantec.com/security_response/writeup.jsp?docid=2008-062404-1222-99 -
Re:its about the dominant os
Where did you get that statistic, Apple website? Or are you just simply confused about the defenition of "the wild"?
http://www.symantec.com/security_response/writeup.jsp?docid=2006-063013-2645-99
http://www.symantec.com/security_response/writeup.jsp?docid=2001-060806-1018-99
http://www.symantec.com/security_response/writeup.jsp?docid=2006-060110-4631-99
http://www.symantec.com/security_response/writeup.jsp?docid=2006-021715-3051-99
http://www.symantec.com/security_response/writeup.jsp?docid=2006-031413-1704-99
http://www.symantec.com/security_response/writeup.jsp?docid=2008-062513-3120-99
http://www.symantec.com/security_response/writeup.jsp?docid=2008-111315-1230-99
http://www.symantec.com/security_response/writeup.jsp?docid=2006-021614-4006-99
http://www.symantec.com/security_response/writeup.jsp?docid=2006-110217-1331-99
http://www.symantec.com/security_response/writeup.jsp?docid=2007-110101-2320-99
http://www.symantec.com/security_response/writeup.jsp?docid=2008-062404-1222-99 -
Re:Oh Shit
-
Re:Boring Slashvertisement
Actually, the story I submitted was around their detection of spam levels coming back up to the pre-McColo shutdown. I commented on this one since it seemed that someone thought that Symantec was trying to "look better" than their competitors.
Statistics has taught me one thing: Having a larger sample set gives you better results.
My source for numbers in my comment: http://www.symantec.com/about/profile/technology.jsp
"The Symantec Global Intelligence Network encompasses worldwide security intelligence data gathered from a wide range of sources, including more than 40,000 sensors monitoring networks in more than 180 countries through Symantec products and services such as Symantec DeepSightâ Threat Management System and Symantec Managed Security Services, and from other third-party sources."
Further down in that link, lets see...
Malicious Code Reports from over 120 million clients, 25,000 vulnerabilities from over 20 years affecting 55,000 different technologies, from 8,000 vendors. Oh yea, they also operate BugTraq.
How does this compare to Arbor?
Oh that's right, they didn't state their capabilities in the article or on their website that I could see. -
Re:No more....
Or you could just use their removal tool which is much faster than a normal uninstall and removes all products in one fell swoop so there is no more removing their AV, then firewall, then antispyware etc
http://service1.symantec.com/Support/tsgeninfo.nsf/docid/2005033108162039 -
Re:No more....
Norton Removal Tool has worked very well in my opinion.
-
Re:No more....
May I recommend the Norton Removal Tool
It shouldn't need to exist in the first place, of course - the uninstall should work - but IME it works pretty well.
-
Re:Flawed methodology
Norton actually has a "Removal Tool" for peeling their crap off a system.
http://service1.symantec.com/Support/tsgeninfo.nsf/docid/2005033108162039
It knows about all the regkeys, services, and files their various products employ. Might be worth a shot.
-
Balls
Actually, the person who created this: http://www.symantec.com/security_response/writeup.jsp?docid=2007-042705-0108-99&tabid=2 has some nerve.
-
Computer Virus .. ?
Come on slashdot, don't be twee, what Operating System does this 'computer virus' need to run on
.. Systems Affected: Windows 2000, Windows 95, Windows 98, Windows Me, Windows NT, Windows Server 2003, Windows XP .. -
Wow, 6 out of 9 traits...
apply to this jackass.
-
Lots of not true here
How many OSS webpages don't even EXPLAIN WHAT THE PRODUCT IS, much less document it, on their website?
Let me introduce you to Symantec. They make an application called "Ghostcast server", which is used to clone PCs in bulk. Your mission, should you choose to accept it, is to find out which product they offer contains this application, how much it costs and how it works. Give it a shot. It's like Where's Waldo for geeks.
Even when OSS project show some potential, they inevitably fork over some bullshit tussle between developers.
Like X? That was over quickly. Imagine what would happen if Microsoft decided to change their windowing environment and its terms, and it was so hated nobody would want it. Wait -- you don't have to pretend.
-
Updated info re this sploit...ShadowServer has updated information on this here.
See also Symantec Threatcon here
So it looks as if you have the latest flash plugin (9.0.124) you may be ok.
Andy
-
Re:Not one of those is a virus...
There has never been a Mac OS X virus. Ever. Period.
Incorrect--look up OSX.Macarena -
I'm a little surprised it took this long.I recall a while back there was this little boot-sector virus which contained code to modify a motherboard's CMOS data, potentially causing a milder version of "Phlashing." However, that portion of the virus had a bug which made it almost impossible for the payload to be executed.
http://www.symantec.com/security_response/writeup.jsp?docid=2000-121916-0457-99&tabid=2
This virus was first found over 14 years ago, so the idea of remotely causing hardware failure isn't new. However no one has tried to implement it on a serious scale since. Given that so many modern-day devices and software are able to automatically flash/patch, this is something which, if done right, could adversely affect a significant number of systems.
-
Re:Norton Products...
"I'm really hoping Backup Exec and Netbackup don't go the same way."
Too late. We just rolled back to an older version of Backup Exec because of constant crashing in the latest version, along with horrid performance, and overall unreliability. Symantec support is useless. The new version runs dead slow on a fairly powerful machine as well. If anyone can recommend some software that works with a tandberg storage loader, let me know.
The best user quote from the symantec forum (one of many)......."Unfortunately, I've rebuilt the server because 11d pretty much ruined my life." Congrats Kevin K. -
Re:Print Version (and my Apple woes)
Removing Norton is simple, it just takes few steps.
Just open Start->Settings->Control Panel->Add or remove programs and uninstall it. Reboot.
If the install asks for password, the password is symantec.
After reboot uninstall Live-Update, also from control panel. Reboot.
Then download norton removal tool and run it to make sure it's gone. -
Re:Inject a vaccine?
You would have to be careful not to repeat the mistakes of the Welchia worm. This is a worm destroying worm which attempts to remove the MS Blaster worm and download and install the patch for the vulnerability which MS Blaster (and Welchia itself) uses to infect computers. The problem is that Welchia disrupted network activity and caused PCs to reboot a unexpected times to complete instillation of the security patch. It is, therefore, considered to be malware and is removed by all the major antivirus products.
-
Re:Cut of the source
The solution? CutePuppies.exe is not executable. End of discussion.
What fantasy land do you live in? http://www.symantec.com/avcenter/attack_sigs/s22902.html
http://www.securityfocus.com/news/11511 Concerning the Flash Vuln
http://www.securityfocus.com/news/11512 How fully patched Vista box owned due to the flash vuln, with little to no user interaction.
When an attack exploits a weakness in something running on the system then in essence CutePuppies.exe may not run without interaction, but CutePuppies.sfw will. -
Re:Simple business model
Can you tell me the secret to getting Norton off a Windows computer?
Maybe use the Norton Removal Tool?
Shockingly enough, if you type "Norton Uninstall" into Google and click "I feel lucky" this is what you get. -
Re:Humourous call
-
Re:It's nice to share.Ideally I would run the scan by unplugging the network cable and booting from directly the malware-scanner CD. Unfortunately nobody makes such a thing -- it's like the "antivirus" companies don't really care about reliability. Symantec disagrees
Mcafee disagrees.
AVG disagrees.
Or... if you don't want those, you can just make a "live cd" using any of the countless utilities out there for it.
Or if you're feeling crazy, toss vmware onto a knoppix dvd and boot windows from either an image on the dvd or boot it straight from the drive, isolated in vmware. I really don't mean to nitpick. I fully agree running an Antivirus on a compromised system is definitely not to be trusted. Even if the virus doesn't interfere or play with the results, Windows probably won't let you clean it if it is in memory. Symantec disagrees Says it doesn't support NTFS. Mcafee disagrees. Says it doesn't support NTFS. AVG disagrees. Runs Windows PE (Pre-installation Environment?). I assume this means it'll do NTFS, but I can't say anything here.
I remember a few years back (pre-Windows 98) a bunch of friends and I had a boot sector virus. I don't recall what it was called, but it transmitted itself by floppy disk. If you simply accessed the disk you became infected. We all had AV software, even if it wasn't 100% up to date, it was harder to do since none of us had the internet at the time.
We knew about the virus, but we couldn't do a damn thing about it because when we had AV software to clean it, it would not go away since it was already in memory!
The fix was when one went out an bought a new copy of McAfee which included a system boot floppy to scan at boot time. Cleaned it up in a jiffy. Passed this around (with the write protect tab switched to On) to clean up. Once we had it off the hard disk, cleaning the infected floppies was done by the resident scanner whenever it encountered one. -
Re:It's nice to share.Ideally I would run the scan by unplugging the network cable and booting from directly the malware-scanner CD. Unfortunately nobody makes such a thing -- it's like the "antivirus" companies don't really care about reliability. Symantec disagrees
Mcafee disagrees.
AVG disagrees.
Or... if you don't want those, you can just make a "live cd" using any of the countless utilities out there for it.
Or if you're feeling crazy, toss vmware onto a knoppix dvd and boot windows from either an image on the dvd or boot it straight from the drive, isolated in vmware. I really don't mean to nitpick. I fully agree running an Antivirus on a compromised system is definitely not to be trusted. Even if the virus doesn't interfere or play with the results, Windows probably won't let you clean it if it is in memory. Symantec disagrees Says it doesn't support NTFS. Mcafee disagrees. Says it doesn't support NTFS. AVG disagrees. Runs Windows PE (Pre-installation Environment?). I assume this means it'll do NTFS, but I can't say anything here.
I remember a few years back (pre-Windows 98) a bunch of friends and I had a boot sector virus. I don't recall what it was called, but it transmitted itself by floppy disk. If you simply accessed the disk you became infected. We all had AV software, even if it wasn't 100% up to date, it was harder to do since none of us had the internet at the time.
We knew about the virus, but we couldn't do a damn thing about it because when we had AV software to clean it, it would not go away since it was already in memory!
The fix was when one went out an bought a new copy of McAfee which included a system boot floppy to scan at boot time. Cleaned it up in a jiffy. Passed this around (with the write protect tab switched to On) to clean up. Once we had it off the hard disk, cleaning the infected floppies was done by the resident scanner whenever it encountered one. -
Re:It's nice to share.Ideally I would run the scan by unplugging the network cable and booting from directly the malware-scanner CD. Unfortunately nobody makes such a thing -- it's like the "antivirus" companies don't really care about reliability. Symantec disagrees
Mcafee disagrees.
AVG disagrees.
Or... if you don't want those, you can just make a "live cd" using any of the countless utilities out there for it.
Or if you're feeling crazy, toss vmware onto a knoppix dvd and boot windows from either an image on the dvd or boot it straight from the drive, isolated in vmware. -
Re:No
http://www.symantec.com/security_response/writeup.jsp?docid=2006-110217-1331-99
Now that you have been proven wrong, you may proceed to explain why that one doesn't count.