Your name or email adress:
Do you already have an account?
Forgot your password?
  • Log in or Sign up


    Results 1 to 10 of 10
    1. #1
      IfasehunReincarnated's Avatar
      IfasehunReincarnated is offline Never Let Them Disrespect the Ancestors

      Join Date
      Jan 2004
      Location
      Sirius & Onile Simultaneously
      Posts
      6,006
      Thumbs Up/Down
      Received: 11/0
      Given: 0/0
      Rep Power
      436

      Symantec AntiVirus Worm Hole Puts Millions at Risk


      0 Not allowed! Not allowed!
      Ryan Naraine - eWEEK
      Thu May 25, 2:19 PM ET

      A gaping security flaw in the latest versions of Symantec's anti-virus software suite could put millions of users at risk of a debilitating worm attack, Internet security experts warned May 25.

      Researchers at eEye Digital Security, the company that discovered the flaw, said it could be exploited by remote hackers to take complete control of the target machine "without any user action."

      "This is definitely wormable. Once exploited, you get a command shell that gives you complete access to the machine. You can remove, edit or destroy files at will," said eEye Digital Security spokesperson Mike Puterbaugh.

      Click here to read about Symantec's use of a rootkit-type feature in its Norton SystemWorks.

      "We have confirmed that an attacker can execute code without the user clicking or opening anything," Puterbaugh said.

      eEye, based in Aliso Viejo, Calif., posted a brief advisory to raise the alarm about the bug, which can allow the execution of malicious code with system-level access. The flaw carries a "high risk" rating because of the potential for serious damage, Puterbaugh said.

      Symantec, of Cupertino, Calif., confirmed receipt of eEye's warning and said an investigation was underway.

      "[Our] product security team has been notified of a suspected issue in Symantec AntiVirus 10.x. [We] are evaluating the issue now and, if necessary, will provide a prompt response and solution," a Symantec spokesperson said in a statement sent to eWEEK.

      Symantec's anti-virus software is deployed on more than 200 million systems in both the enterprise and consumer markets, and the threat of a network worm attack is very real. However, eEye's Puterbaugh said there are no publicly shared proof-of-concept exploits or other information to suggest an attack is imminent.

      But, he said, "there's nothing to say that someone hasn't found this and is already using it for nefarious activities. … It's quite possible that we weren't the only ones to find this. Who knows if it's already being used in targeted attacks that we'll never hear about."

      To read about Symantec patches for a DNS cache-poisoning and redirection vulnerability in several of its products, click here.

      Internet security experts have long warned that flaws in anti-virus products will become a big target for malicious hackers. During the last 18 months, some of the biggest names in the anti-virus business have shipped critical software updates to cover code execution holes, prompting speculation among industry watchers that it's only a matter of time before a malicious hacker is motivated to create a devastating network worm using security software flaws as the attack vector.

      "The big surprise is we haven't seen one yet," said Johannes Ullrich, chief technology officer at the SANS ISC (Internet Storm Center), of Bethesda, Md., in a recent eWEEK interview.

      In March 2004, the fast-moving Witty worm exploited a zero-day buffer overflow in security products sold by Internet Security Systems. Unlike most self-propagating worms, Witty was capable of corrupting the hard drives of infected machines, preventing normal operation of the PC and eventually causing it to crash.

      "This could be Symantec's Witty," Puterbaugh warned.

      The vulnerable Symantec 10.x application promises real-time detection and repairs for spyware, adware, viruses and other malicious intrusions. It is used by many of the world's largest corporate customers and U.S. government agencies.

      Check out eWEEK.com's Security Center for the latest security news, reviews and analysis. And for insights on security coverage around the Web, take a look at eWEEK.com Security Center Editor Larry Seltzer's Weblog.
      All is Well. Workin' Hard - Tryin' to Save Time for Fam. Check in Periodically.

    2. #2
      Pain's Avatar
      Pain is offline Warrior

      Join Date
      Apr 2006
      Location
      Krakkaville, USA
      Posts
      312
      Thumbs Up/Down
      Received: 2/0
      Given: 0/0
      Rep Power
      129

      0 Not allowed! Not allowed!
      Glad I stopped using them.
      Bockra si mi gun but ing cyaa run
      awl fly chu im bak, ed drop a grung
      eye an brain mi nuh si weh dat tun
      wi bun dem wid tya dem find dem inna drum
      shoot dem a farrin, kill dem a Kingston
      any weh wi fyne dem, dem life aguh done

    3. #3
      jamal-s's Avatar
      jamal-s is offline Warrior

      Join Date
      Dec 2007
      Location
      Prairie View, TX
      Posts
      163
      Blog Entries
      7
      Thumbs Up/Down
      Received: 1/0
      Given: 0/0
      Rep Power
      92

      0 Not allowed! Not allowed!
      I never registered my Norton software, so I stopped recieveing virus updates. But I downloaded ClamWin (found it in the free software thread) and while I was running a scan it said that one of the files in Norton was infected. I didn't want to let ClamWin delete the file, just in case it had a bad affect on the whole Norton program. So do I leave it in quarantine, or go ahead and delete it?
      So if I should ever fall and get caught in a hustle
      Let em know that I died while I fought in a struggle
      From the hoodrats to rich kids lost in a bubble
      Spray paint it on the streets and in the subway tunnels
      Write it down and remember, that we never gave in
      The Mind of a Child is where the Revolution Begins
      So if the solution has never been to look in yourself,
      How is it that you expect to find it anywhere else?

      - Immortal Technique

      BLACK MINDS DEVELOPMENT (BMD)

    4. #4
      Jahness's Avatar
      Jahness is offline OniOni Warrior

      Join Date
      Mar 2005
      Location
      In amerikkka! Stolen from Afrika!
      Posts
      6,827
      Thumbs Up/Down
      Received: 1/0
      Given: 18/0
      Rep Power
      616

      Arrow


      0 Not allowed! Not allowed!
      Quote Originally Posted by jamal-s View Post
      I never registered my Norton software, so I stopped recieveing virus updates. But I downloaded ClamWin (found it in the free software thread) and while I was running a scan it said that one of the files in Norton was infected. I didn't want to let ClamWin delete the file, just in case it had a bad affect on the whole Norton program. So do I leave it in quarantine, or go ahead and delete it?
      Greetings jamal-s!

      Since we are not sure exactly what file it is you can leave the file in quarantine.
      The file being in quarantine can't cause any more trouble.

      Peace!
      Posted In The Spirit of Learning & Sharing
      One Love & Respect Always

      ***************************************
      The Quest for knowledge stops at the grave.
      HIM Emperor Haile Selassie I.


      If you fail to prepare,
      you are preparing to fail!


      Mind what you want, because someone wants your mind.

      Working together, the ants ate the elephant.


    5. #5
      jamal-s's Avatar
      jamal-s is offline Warrior

      Join Date
      Dec 2007
      Location
      Prairie View, TX
      Posts
      163
      Blog Entries
      7
      Thumbs Up/Down
      Received: 1/0
      Given: 0/0
      Rep Power
      92

      0 Not allowed! Not allowed!
      I can't remember what the name of the whole file was when it was attached to Norton, but it had Exploit.JS.CVE-2005-1790.A attached to it.

      At first I had it sent to quarantine, and then I went ahead and had it deleted. It doesn't seem to have done anything. I might just uninstall Norton since I can't get updates on it, and I have ClamWin now.

      Thanks.
      So if I should ever fall and get caught in a hustle
      Let em know that I died while I fought in a struggle
      From the hoodrats to rich kids lost in a bubble
      Spray paint it on the streets and in the subway tunnels
      Write it down and remember, that we never gave in
      The Mind of a Child is where the Revolution Begins
      So if the solution has never been to look in yourself,
      How is it that you expect to find it anywhere else?

      - Immortal Technique

      BLACK MINDS DEVELOPMENT (BMD)

    6. #6
      Jahness's Avatar
      Jahness is offline OniOni Warrior

      Join Date
      Mar 2005
      Location
      In amerikkka! Stolen from Afrika!
      Posts
      6,827
      Thumbs Up/Down
      Received: 1/0
      Given: 18/0
      Rep Power
      616

      Arrow


      0 Not allowed! Not allowed!
      Quote Originally Posted by jamal-s View Post
      I can't remember what the name of the whole file was when it was attached to Norton, but it had Exploit.JS.CVE-2005-1790.A attached to it.

      At first I had it sent to quarantine, and then I went ahead and had it deleted. It doesn't seem to have done anything. I might just uninstall Norton since I can't get updates on it, and I have ClamWin now.

      Thanks.

      Greetings jamal-s!

      It's always good to use caution when deleting any file, the way you did. When in doubt as to exactly what the file is, you can always do an internet search with the file name. Happy to know things worked out when you deleted the file.

      Much appreciation to you for taking the time to share your experiences. When you share it gives others a chance to learn as well.

      Peace & Blessings!
      Posted In The Spirit of Learning & Sharing
      One Love & Respect Always

      ***************************************
      The Quest for knowledge stops at the grave.
      HIM Emperor Haile Selassie I.


      If you fail to prepare,
      you are preparing to fail!


      Mind what you want, because someone wants your mind.

      Working together, the ants ate the elephant.


    7. #7
      jamal-s's Avatar
      jamal-s is offline Warrior

      Join Date
      Dec 2007
      Location
      Prairie View, TX
      Posts
      163
      Blog Entries
      7
      Thumbs Up/Down
      Received: 1/0
      Given: 0/0
      Rep Power
      92

      0 Not allowed! Not allowed!
      It's still saying that the same files are infected. When I run ClamWin the first time I have it quarantine the file. Then I run the program a second time so it can delete the file, and it says it does. But if I run ClamWin set to remove the file first, it says that the file can't be removed. Could it be cloning itself, because the same file comes back after it's been removed? When I scan the computer with Windows Defender or Norton itself I don't get either of those reports. Should I try uninstalling the Symantec program? Now it's saying that the anti-virus programs don't have permission to access the file, and I can't get access to the file myself when I try to delete it manually.
      So if I should ever fall and get caught in a hustle
      Let em know that I died while I fought in a struggle
      From the hoodrats to rich kids lost in a bubble
      Spray paint it on the streets and in the subway tunnels
      Write it down and remember, that we never gave in
      The Mind of a Child is where the Revolution Begins
      So if the solution has never been to look in yourself,
      How is it that you expect to find it anywhere else?

      - Immortal Technique

      BLACK MINDS DEVELOPMENT (BMD)

    8. #8
      Jahness's Avatar
      Jahness is offline OniOni Warrior

      Join Date
      Mar 2005
      Location
      In amerikkka! Stolen from Afrika!
      Posts
      6,827
      Thumbs Up/Down
      Received: 1/0
      Given: 18/0
      Rep Power
      616

      Arrow


      0 Not allowed! Not allowed!
      Quote Originally Posted by jamal-s View Post
      It's still saying that the same files are infected. When I run ClamWin the first time I have it quarantine the file. Then I run the program a second time so it can delete the file, and it says it does. But if I run ClamWin set to remove the file first, it says that the file can't be removed. Could it be cloning itself, because the same file comes back after it's been removed? When I scan the computer with Windows Defender or Norton itself I don't get either of those reports. Should I try uninstalling the Symantec program? Now it's saying that the anti-virus programs don't have permission to access the file, and I can't get access to the file myself when I try to delete it manually.

      Greetings jamal-s!

      Sometimes some of these infected files can clone themselves. Try just uninstalling Norton completely. Sometimes these files can be very stubborn. You may have to delete the infected file multiple times. After deleting the file shut down and then restart the computer.

      If that doesn't work then check this post How to Completely Remove Norton From A Machinefor more options of how to remove norton completely off your computer.

      Peace!
      Posted In The Spirit of Learning & Sharing
      One Love & Respect Always

      ***************************************
      The Quest for knowledge stops at the grave.
      HIM Emperor Haile Selassie I.


      If you fail to prepare,
      you are preparing to fail!


      Mind what you want, because someone wants your mind.

      Working together, the ants ate the elephant.


    9. #9
      jamal-s's Avatar
      jamal-s is offline Warrior

      Join Date
      Dec 2007
      Location
      Prairie View, TX
      Posts
      163
      Blog Entries
      7
      Thumbs Up/Down
      Received: 1/0
      Given: 0/0
      Rep Power
      92

      0 Not allowed! Not allowed!
      I ended up logging into the computer in safe mode with the command prompt, and mannually deleted the file. Then logged back in in normal mode and when I ran the scanner, it came up clean, and searched for the file myself, I didn't see it. So hopefully that did the trick.
      So if I should ever fall and get caught in a hustle
      Let em know that I died while I fought in a struggle
      From the hoodrats to rich kids lost in a bubble
      Spray paint it on the streets and in the subway tunnels
      Write it down and remember, that we never gave in
      The Mind of a Child is where the Revolution Begins
      So if the solution has never been to look in yourself,
      How is it that you expect to find it anywhere else?

      - Immortal Technique

      BLACK MINDS DEVELOPMENT (BMD)

    10. #10
      Jahness's Avatar
      Jahness is offline OniOni Warrior

      Join Date
      Mar 2005
      Location
      In amerikkka! Stolen from Afrika!
      Posts
      6,827
      Thumbs Up/Down
      Received: 1/0
      Given: 18/0
      Rep Power
      616

      Arrow


      0 Not allowed! Not allowed!
      Quote Originally Posted by jamal-s View Post
      I ended up logging into the computer in safe mode with the command prompt, and mannually deleted the file. Then logged back in in normal mode and when I ran the scanner, it came up clean, and searched for the file myself, I didn't see it. So hopefully that did the trick.
      Greetings jamal-s!

      Doing it manually is one of the best ways to delete the infected file. Great to know you got rid of it.

      Peace!
      Posted In The Spirit of Learning & Sharing
      One Love & Respect Always

      ***************************************
      The Quest for knowledge stops at the grave.
      HIM Emperor Haile Selassie I.


      If you fail to prepare,
      you are preparing to fail!


      Mind what you want, because someone wants your mind.

      Working together, the ants ate the elephant.


    Thread Information

    Users Browsing this Thread

    There are currently 1 users browsing this thread. (0 members and 1 guests)

    Similar Threads

    1. Mali: Conflict Puts Over 250,000 Orphans At Risk
      By TTDC Bot in forum Afrikan News RSS Feed
      Replies: 0
      Last Post: 06-13-2016, 01:01 AM
    2. Malawi: Sex Initiation Puts Girls At Risk for HIV
      By TTDC Bot in forum Afrikan News RSS Feed
      Replies: 0
      Last Post: 07-20-2014, 01:00 AM
    3. Flaw Found in Symantec Corporate Antivirus
      By Jahness in forum P C Tech Advice & Technology
      Replies: 0
      Last Post: 05-27-2006, 05:29 PM
    4. Black Hole Puts Dent In Space-time
      By rebelAfrika in forum Spirituality: Connect with your Center
      Replies: 1
      Last Post: 01-25-2006, 03:11 AM
    5. Fighting in southwestern Somalia puts new government at risk
      By XXPANTHAXX in forum Afrikan World News
      Replies: 0
      Last Post: 03-27-2005, 04:45 AM

    Thread Participants: 3

    Posting Permissions

    • You may not post new threads
    • You may not post replies
    • You may not post attachments
    • You may not edit your posts
    •  


    About

      Assata Shakur Speaks is an Forum Devoted To Assata Shakur And All Political Prisoners Around The World.
      Assata Shakur Speaks Is An Oasis Of Pan African Information Geared Towards The Liberation Of Afrikan People.

    Follow Us On

    Twitter Facebook youtube Flickr DavianArt Dribbble RSS Feed



    BACK TO TOP