Date: 08/25/05 (Computer Geeks)    Keywords: software, virus, antivirus

Hey everyone,

I am doing a bit of research on centralized antivirus solutions for ~10 unit networks with active directory servers.

I am finding it real difficult to find any kind of reviews on the various products out there and was hoping my fellow LJ's could share their opinions and experiences.

I've been testing AVG's network based packages, but I am finding their licensing confusing as well as their install processess.

So I went to look into the granddaddy Symantec and started reading up on their small office AntiVirus 10 groupware packages.

According to the marketing material, it seems ideal for these kind of networks, central installation, licenses based on # of users, client software comes with main package, etc.

But thats all marketing info. Has anyone used this software before? Symantec doesn't provide trials of it.

Source: http://www.livejournal.com/community/computergeeks/757815.html

Date: 08/25/05 (IT Professionals)    Keywords: software, virus, antivirus

Hey everyone,

I am doing a bit of research on centralized antivirus solutions for ~10 unit networks with active directory servers.

I am finding it real difficult to find any kind of reviews on the various products out there and was hoping my fellow LJ's could share their opinions and experiences.

I've been testing AVG's network based packages, but I am finding their licensing confusing as well as their install processess.

So I went to look into the granddaddy Symantec and started reading up on their small office AntiVirus 10 groupware packages.

According to the marketing material, it seems ideal for these kind of networks, central installation, licenses based on # of users, client software comes with main package, etc.

But thats all marketing info. Has anyone used this software before? Symantec doesn't provide trials of it.

Source: http://www.livejournal.com/community/itprofessionals/19791.html

Date: 08/28/05 (Computer Help)    Keywords: security, virus, antivirus, yahoo, google

I cannot check Gmail. When I try to get to the Gmail.com page, Firefox says "The connection was refused while trying to contact www.google.com . But I can get onto Google just fine, I can't get to Gmail. And I can't log onto Google Talk, either.

I can get onto LJ just fine. I can get on AIM. I just can't check my Gmail.

I was online last night and it worked fine, then my sister got online [which is something I say a lot because it's always after she's on that something goes wrong] and she couldn't get to Yahoo Mail because Norton Internet Security launched the Parental Controls and blocked Yahoo, saying "Norton Antivirus blocked the page http://mail.yahoo.com" or something like that. So I went around and reset the accounts to allow Yahoo Mail and it was fine, so I thought. But when I got back on, I couldn't access Gmail. I cleared my cache, cookies, passwords, history, and rebooted. I ran MSCONFIG and set my startup to run all the programs it ran when I bought the computer, because I'd set it yesterday to not run anything it didn't need to. I thought that would make it better, but I didn't notice a change at all. I tried using IE, Mozilla, and Netscape after that. They all said "The connection was refused while trying to contact www.google.com" except for IE which pulled up a "This page could not be displayed" page.

When I got online this morning, my DSL box said that everything was connected and running, but Firefox would not load anything, AIM would not connect, and Google Talk still wasn't working. I restarted again and tried Firefox again and still no Gmail. LJ is fine, AIM is fine, GTalk is still not working.

Scratch that, GTalk just started working right now and told me I have 7 emails. I tried to check them through a link GTalk, but it said "The page you requested is invalid."

I'm completely stumped. I just bought this computer, a Compaq at Circuit City [I don't remember the model, but it was $374 which was all I had enough for] two weeks ago and have had problems with it since I bought it. I have an old eMachines that ran Win95 when I bought it, and even though it was on the fritz all the time, it is running better than this computer is, but it's not connected to the internet, so that might be what's making it go faster.

Does anyone have any idea what could be blocking me from using Gmail?

[Edit: It is now working, after trying for an hour. I've always had a problem on this computer with it not starting Gmail when I first connect. Is that a normal problem or is there any way to fix it?]

Source: http://www.livejournal.com/community/computer_help/476561.html

Date: 09/02/05 (Security)    Keywords: software, security, virus, antivirus

Security software vendor is investigating a report of a weakness in the way its corporate antivirus software stores login credentials.

Source: http://news.zdnet.com/Symantec+probes+report+of+antivirus+product+flaw/2100-1009_22-5845873.html?part=rss&tag=feed&subj=zdnn

Date: 09/02/05 (Computer Help)    Keywords: cms, software, html, java, security, virus, antivirus, web, microsoft, google, ebay

I'm having this wierd problem so I scanned with Hijack This! Here's the log. Which of these shouldn't be there. Please help me!

Logfile of HijackThis v1.99.1
Scan saved at 3:31:07 PM, on 9/2/2005
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Common Files\Symantec Shared\ccApp.exe
C:\Program Files\QuickTime\qttask.exe
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\Program Files\Java\jre1.5.0_04\bin\jusched.exe
C:\WINDOWS\system32\rundll32.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\windows\system32\rlvknlg.exe
C:\Program Files\Messenger\msmsgs.exe
C:\Program Files\MSN Messenger\msnmsgr.exe
C:\Program Files\Google\Google Talk\googletalk.exe
C:\Program Files\Norton AntiVirus\navapsvc.exe
C:\Program Files\Norton AntiVirus\AdvTools\NPROTECT.EXE
C:\Program Files\Common Files\Symantec Shared\Security Center\SymWSC.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\Program Files\Jasc Software Inc\Paint Shop Pro 9\Paint Shop Pro 9.exe
C:\Program Files\iTunes\iTunes.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Documents and Settings\owner\My Documents\My Downloads\HijackThis.exe

R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = proxy1.emirates.net.ae:8080
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx
O2 - BHO: URLLink Class - {4A2AACF3-ADF6-11D5-98A9-00E018981B9E} - C:\Program Files\NewDotNet\newdotnet6_38.dll
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: ST - {9394EDE7-C8B5-483E-8773-474BF36AF6E4} - C:\Program Files\MSN Apps\ST\01.03.0000.1005\en-xu\stmain.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar2.dll
O2 - BHO: MSNToolBandBHO - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Apps\MSN Toolbar\01.02.3000.1001\en-us\msntb.dll
O2 - BHO: NAV Helper - {BDF3E430-B101-42AD-A544-FADC6B084872} - C:\Program Files\Norton AntiVirus\NavShExt.dll
O2 - BHO: (no name) - {D80C4E21-C346-4E21-8E64-20746AA20AEB} - (no file)
O3 - Toolbar: Norton AntiVirus - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - C:\Program Files\Norton AntiVirus\NavShExt.dll
O3 - Toolbar: MSN - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Apps\MSN Toolbar\01.02.3000.1001\en-us\msntb.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar2.dll
O4 - HKLM\..\Run: [ccApp] C:\Program Files\Common Files\Symantec Shared\ccApp.exe
O4 - HKLM\..\Run: [Advanced Tools Check] C:\PROGRA~1\NORTON~1\AdvTools\ADVCHK.EXE
O4 - HKLM\..\Run: [WeatherOnTray] C:\Program Files\Hotbar\bin\4.5.1.0\WeatherOnTray.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_04\bin\jusched.exe
O4 - HKLM\..\Run: [navapp] C:\Program Files\NavExcel\NavHelper\v2.0.4d\navapp.exe
O4 - HKLM\..\Run: [New.net Startup] rundll32 C:\PROGRA~1\NEWDOT~1\NEWDOT~2.DLL,NewDotNetStartup -s
O4 - HKLM\..\Run: [oxmx] C:\WINDOWS\oxmx.exe
O4 - HKLM\..\Run: [Symantec NetDriver Monitor] C:\PROGRA~1\SYMNET~1\SNDMon.exe
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k
O4 - HKLM\..\Run: [OSS] C:\windows\system32\rlvknlg.exe -boot
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\MSN Messenger\msnmsgr.exe" /background
O4 - HKCU\..\Run: [googletalk] "C:\Program Files\Google\Google Talk\googletalk.exe" /autostart
O8 - Extra context menu item: &Google Search - res://c:\program files\google\GoogleToolbar2.dll/cmsearch.html
O8 - Extra context menu item: Backward Links - res://c:\program files\google\GoogleToolbar2.dll/cmbacklinks.html
O8 - Extra context menu item: Cached Snapshot of Page - res://c:\program files\google\GoogleToolbar2.dll/cmcache.html
O8 - Extra context menu item: Similar Pages - res://c:\program files\google\GoogleToolbar2.dll/cmsimilar.html
O8 - Extra context menu item: Translate into English - res://c:\program files\google\GoogleToolbar2.dll/cmtrans.html
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_04\bin\npjpi150_04.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_04\bin\npjpi150_04.dll
O9 - Extra button: eBay - Homepage - {EF79EAC5-3452-4E02-B8BD-BA4C89F1AC7A} - C:\Program Files\IrfanView\Ebay\Ebay.htm
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O10 - Hijacked Internet access by New.Net
O10 - Hijacked Internet access by New.Net
O10 - Hijacked Internet access by New.Net
O10 - Hijacked Internet access by New.Net
O10 - Hijacked Internet access by New.Net
O12 - Plugin for .spop: C:\Program Files\Internet Explorer\Plugins\NPDocBox.dll
O16 - DPF: {00B71CFB-6864-4346-A978-C0A14556272C} (Checkers Class) - http://messenger.zone.msn.com/binary/msgrchkr.cab31267.cab
O16 - DPF: {15AD6789-CDB4-47E1-A9DA-992EE8E6BAD6} - http://static.windupdates.com/cab/MusicAccess/ie/bridge-c8.cab
O16 - DPF: {2917297F-F02B-4B9D-81DF-494B6333150B} (Minesweeper Flags Class) - http://messenger.zone.msn.com/binary/MineSweeper.cab31267.cab
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/muweb_site.cab?1124631707093
O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsClient.cab31267.cab
O16 - DPF: {E154E3CC-0C3A-4101-91D8-6B4876F0FD64} (PrintScreen Class) - http://www.mydisplayimage.com/create/Flash2Image.cab
O16 - DPF: {F6BF0D00-0B2A-4A75-BF7B-F385591623AF} (Solitaire Showdown Class) - http://messenger.zone.msn.com/binary/SolitaireShowdown.cab31267.cab
O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
O23 - Service: iPod Service (iPodService) - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: Norton AntiVirus Auto Protect Service (navapsvc) - Symantec Corporation - C:\Program Files\Norton AntiVirus\navapsvc.exe
O23 - Service: Norton Unerase Protection (NProtectService) - Symantec Corporation - C:\Program Files\Norton AntiVirus\AdvTools\NPROTECT.EXE
O23 - Service: ScriptBlocking Service (SBService) - Symantec Corporation - C:\PROGRA~1\COMMON~1\SYMANT~1\SCRIPT~1\SBServ.exe
O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
O23 - Service: SymWMI Service (SymWSC) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\Security Center\SymWSC.exe

Source: http://www.livejournal.com/community/computer_help/479940.html

Date: 09/21/05 (Security)    Keywords: virus, antivirus, spam

New variants of the veteran pest have been sent out in two waves of spam, an antivirus firm says.

Source: http://news.zdnet.com/Bagle+attack+comes+in+two+waves/2100-1009_22-5875863.html?part=rss&tag=feed&subj=zdnn

Date: 09/27/05 (Security)    Keywords: software, virus, antivirus

Latest network defense tools expand company's relationship with antivirus software maker Trend Micro.

Source: http://news.zdnet.com/Cisco+unveils+new+security+products/2100-1009_22-5883627.html?part=rss&tag=feed&subj=zdnn

Date: 10/04/05 (Security)    Keywords: software, asp, virus, antivirus

A serious flaw could affect a whole range of Kaspersky's antivirus software--including third-party products, a researcher has warned.

Source: http://news.zdnet.com/Flaw+found+in+Kaspersky+antivirus/2100-1009_22-5887857.html?part=rss&tag=feed&subj=zdnn

Date: 10/06/05 (Security)    Keywords: software, virus, antivirus

Flaw in a component of Symantec's enterprise antivirus products could allow remote attackers to take over computers running the software.

Source: http://news.zdnet.com/Bug+spotted+in+Symantec+antivirus/2100-1009_22-5889518.html?part=rss&tag=feed&subj=zdnn

Date: 10/05/05 (Computer Geeks)    Keywords: virus, antivirus

I've been trying to ween away from Symantec products systematically. I find AVG to be a great antivirus program. But now i am looking for a hard drive diagnostic tool that does what NDD does. In particular, checks filesystems and such while the machine is loaded into windows. (I use DFT for pure hardware hard drive diagnostics).

Any suggestions?

Source: http://www.livejournal.com/community/computergeeks/789101.html

Date: 10/09/05 (Computer Geeks)    Keywords: software, security, virus, antivirus, spyware, spam, microsoft

Firstly, I just want this to be known that this isn't an anti-windows rant or anything. There is a question being posed here, I promise :P

With that said, companies like McAfee and Symantec have basically been making a living solely from Microsoft's security oversights. They've been charging people to use their software which protects those people from the vulnerabilities that Microsoft left open. The quality of these programs varies from function to function. Even then, they ignore adware since it's not considered 'malicous'. And even still, they have issues with using the same name for similar viruses. Users are faced with these same problems with any anti-virus/anti-adware/anti-whatever software they use. There is a lot of similar companies, but they don't have a common agreeance on what is and isn't a virus, or if they should detect adware. There's also the issues that come with the firewall program they install. Traffic from the internet isn't always malicious, but those firewalls can't usually tell the difference. Very few of these programs are free. None of these problems actually FIX the problem. They're only removing programs that exploit the initial vulnerabilities, leaving room for reuse value.

As many of you surely know already, Microsoft has recently released a beta version of their anti-crap (to summarize anti-spam, anti-virus, anti-adware, anti-spyware, etc) scanner and removal tool. Before that, they've included a firewall program in XP SP2. Microsoft is not charging anything for either of these programs. At least not as of yet if they ever decide to.

So, my question is this; Do you folks think Microsoft is taking a step in the right direction by adding the firewall and scanner tools? Will they do a better job than the other Antivirus vendors? Do you think maybe they are taking a step in the WRONG direction, like, why aren't they fixing the actual problems instead of covering them up? What do you all think?

Source: http://www.livejournal.com/community/computergeeks/793809.html

Date: 10/12/05 (Security)    Keywords: security, virus, antivirus, microsoft

People now pay more for annual subscription to Norton AntiVirus and other products. Is it a "last hurrah" before Microsoft's security push gets going?

Source: http://news.zdnet.com/Symantec+quietly+hikes+Norton+renewal+prices/2100-1009_22-5894058.html?part=rss&tag=feed&subj=zdnn

Date: 10/19/05 (Computer Geeks)    Keywords: asp, virus, antivirus, web

A worm is being propogated via Instant Messengers (MSN and AOL affected).

I received this message today:
LOL!! http://home.earthlink.net/~xxx/picture007.com
Real link removed for your protection.

I downloaded the file, McAfee VirusScan 9 didn't detect a virus, but it's a good thing I ran it through multiple scanners before I ran it.

Bottom line is, if someone sends you a link to a .exe or .com file, especially if its an unknown contact, you better damn well know what they are sending or else its most surely a virus.

Details @ McAfee - http://vil.nai.com/vil/content/v_136497.htm


This is a report processed by VirusTotal on 10/19/2005 at 01:48:51 (CET) after scanning the file "picture007.com" file.
Antivirus Version Update Result
AntiVir 6.32.0.6 10.18.2005 no virus found
Avast 4.6.695.0 10.18.2005 no virus found
AVG 718 10.18.2005 no virus found
Avira 6.32.0.6 10.18.2005 no virus found
BitDefender 7.2 10.19.2005 no virus found
CAT-QuickHeal 8.00 10.18.2005 (Suspicious) - DNAScan
ClamAV devel-20050917 10.18.2005 no virus found
DrWeb 4.32b 10.18.2005 no virus found
eTrust-Iris 7.1.194.0 10.18.2005 no virus found
eTrust-Vet 11.9.1.0 10.18.2005 no virus found
Fortinet 2.48.0.0 10.18.2005 no virus found
F-Prot 3.16c 10.18.2005 no virus found
Ikarus 0.2.59.0 10.18.2005 IM-Worm.Win32.Kelvir.DT
Kaspersky 4.0.2.24 10.18.2005 no virus found
McAfee 4607 10.18.2005 no virus found
NOD32v2 1.1260 10.18.2005 a variant of Win32/Oscarbot
Norman 5.70.10 10.18.2005 no virus found
Panda 8.02.00 10.18.2005 no virus found
Sophos 3.98.0 10.18.2005 no virus found
Symantec 8.0 10.18.2005 no virus found
TheHacker 5.8.4.125 10.18.2005 no virus found
VBA32 3.10.4 10.18.2005 no virus found



VirusTotal is a free service offered by Hispasec Sistemas. There are no guarantees about the availability and continuity of this service. Although the detection rate afforded by the use of multiple antivirus engines is far superior to that offered by just one product, these results DO NOT guarantee the harmlessness of a file. Currently, there is not any solution that offers a 100% effectiveness rate for detecting viruses and malware.> Go to: Home Contact En español
--------------------------------------------------------------------------------
www.virustotal.com :: @ Hispasec Sistemas 2004 :: e-mail info@virustotal.com


X-posted to chipzone, computergeeks, & computerhelp

Source: http://www.livejournal.com/community/computergeeks/799827.html

Date: 10/22/05 (Computer Help)    Keywords: virus, antivirus

I have a big problem, or rather my brother does. Somehow the administrator account on his laptop got deleted so he can't install this game that he wants to install or run his antivirus program. The only account he has left is still under the administrator's *name* but it's a Limited account now. As far as I know the only messing around with the accounts that he did was changing the password. Anyone know if you can even *delete* an admin account? And everyone knows that you can't make an admin account with a limited account. How would I go about getting an admin account back?

I'm using XP Professional, if that has anything to do with anything.

Source: http://www.livejournal.com/community/computer_help/515263.html

Date: 11/01/05 (Security)    Keywords: security, virus, antivirus

Security researcher says an issue in several antivirus products could let malicious files pass undetected, but some in the industry say it's not a flaw.

Source: http://news.zdnet.com/Evasion+bug+bites+virus+shields/2100-1009_22-5924738.html?part=rss&tag=feed&subj=zdnn

Date: 11/02/05 (Security)    Keywords: virus, antivirus

Facing fears that its piracy-proofed CDs could help virus writers, record label is working closely with antivirus companies to offer patch.

Source: http://news.zdnet.com/Sony+to+patch+copy-protected+CD/2100-1009_22-5928608.html?part=rss&tag=feed&subj=zdnn

Date: 11/11/05 (Security)    Keywords: software, virus, antivirus

Trend Micro initially reported that it spotted a Trojan horse that exploits the latest Windows flaw, but the antivirus software maker isn't sure anymore.

Source: http://news.zdnet.com/New+Windows+Trojan+causes+confusion/2100-1009_22-5945604.html?part=rss&tag=feed&subj=zdnn

Date: 11/11/05 (Computer Help)    Keywords: virus, antivirus, spyware

I was downloading a free trial of Paint Shop Pro, when my computer went crazy!

It said that my computer was infected with spyware, and then it downloaded SuperSpy and it started going..

I exited out of that, and went to my Spyware program, Spy Sweeper, and it said that I had spyware and 3 Trojans..

But when I ran my AntiVirus program, it didn't pick up the Trojans..

How can I get rid of the Trojans?


Also, it changed my background. It says "SPYWARE FOUND." blah blah


I cant delete the account either. When I go to go to User Account page and click on the messed up account.. it just freezes.

What can I do?

Thanks.

Source: http://www.livejournal.com/community/computer_help/528798.html

Date: 12/08/05 (Security)    Keywords: software, security, virus, antivirus

Some 81 percent lack at least one of three critical types of security, but use of firewalls and antivirus software is improving.

Source: http://news.zdnet.com/2100-1009_22-5986344.html

Date: 12/09/05 (Security)    Keywords: virus, antivirus

Will slowly move toward supplying consumer applications, like Norton Antivirus and Norton Utilities, as a service.

Source: http://news.zdnet.com/2100-1009_22-5988162.html