Norton Internet Security / Norton AntiVirus

[mijcar]

I think this may be indirectly related.

Yesterday, in the SafeWeb forum, siliconman drew our attention to the following:  If you entered "Combofix.exe" in a Google search in either Firefox or IE, the browser would crash if SafeWeb was active.  This morning's update from Microsoft fixed that issue; but whatever it changed must have also led to this new interception by Norton.

[TomiRed]

It seems it has just been fixed with the IPS engine update. Click Live Update and surf on!

This was a bit funny. And Community Watch servers have really had their fill today. 

Message Edited by TomiRed on 12-10-2008 07:29 PM

[anotherbostongu]

With over 5 pages of reports of this problem, I'm quite certain Symantec is working on the problem.

Just remember though that they're like a 90 year old man picking his nose... they do it slowly and carefully.

[hooterville]

I hope they start picking faster.

[VikingBob]

It appears TomiRed is correct - just ran LiveUpdate, and there was a fresh Intrusion Prevention update that seems to have resolved the issue.

Nice work!

[Zana]

Hi Phil_D

Phil - This is addressed to you...

Simply because it was you that brought up the subject of the - Windows Update

However!

Symantec Staff may also find what I'm about to say - Useful 

I live in the - UK

Here in the UK .. We always get our Big - Windows Updates - On.. Wednesday

Rather Than - Tuesday

This morning I had a large batch of.. 13 - Windows Updates

I also had a few problems after the updates

My Biggest Problem... No Sound

Well Actually!

I did have sound  but it wasn't normal

The Mute Button on my laptop was permanently - Red

And when I looked in - Sound

Something to do with a HDMI ... Something! ... Was saying - Unpluged

Anyway!

I did manage to fix that problem

My other problem was more of an observation than a problem.

After Shutting down .. And starting up again ... To try and get my sound back

I Noticed Something!

I have Adobe 9 ... And all the junk that came with it.

Including an Adobe Folder on my Desktop

It's a normal looking folder with a - Sharing Symbol On It ( Two - Bodies )

The Folder Icon...

Has an Adobe File showing sticking out.

This Morning...

That File Disappeared for a few minutes.. Then Came Back!

Not the - Folder ... Just the - File

Now!

Was it just the icon - Refreshing

Was it caused by the - Windows updates

Was it caused by an update to - NIS 09

Just Seems Strange...

Some Of The Norton Alerts .. Are About - Acrobat PDF

Just thought it might be worth mentioning.

You Never Know!

Message Edited by Zana on 12-10-2008 06:36 PM

[orla_cox · Accepted solution]

Hello

I can confirm that the issues you've been seeing, where NIS erroneously triggers the detection "HTTP Acrobat PDF Suspicious File Download" on some legitimate websites, have been resolved. Corrected signatures have been created and are now available for download via LiveUpdate.

We'd like to apologise for any inconvenience this may have caused. We take false detections such as this very seriously and will be taking corrective measures to ensure a situation such as this does not happen in future.

Regards

Orla
Symantec Security Response

[Phil_D]

Thanks Orla,

I can confirm that a Live Update corrects that problem.

Good Work on the intrusion issue!

However, the virus defs failed.

Message Edited by Phil_D on 12-10-2008 02:11 PM

[VikingBob]

Thanks, Orla and crew!

I hope anyone that used the temporary workaround I posted previously in this thead (top of page 4) has undone that change and put things back to normal.

[dgsmoot]

I am having the same problem. NIS 2009 is now blocking eBay. The pages will load if refreshed. Is include.ebaystatic.com legitimate or not?

The attacker URL is the same as mickeyfansfla, namely

The attacker URL: include.ebaystatic.com/v4js/en_US/e589/SYS_vjo_e5897557881_1_en_US.js

The application path is the same.

The Source Address is include.ebaystatic.com. Thank you in advance for your help.