Reply
Bot Obliterator
Quads
Posts: 13,248
Registered: ‎07-21-2008

Re: Java vulnerability, Flashback Trojan and Norton

I have 20+ samples

 

"......................any kind, you are encouraged to submit it to https://submit.symantec.com/websubmit/retail.cgi"    I don't ned that link,   it is slower.

 

Quads

Symantec Employee
ryan_mcgann
Posts: 852
Registered: ‎01-10-2009

Re: Java vulnerability, Flashback Trojan and Norton

Contact me privately if you would like to provide samples but don't want to use the provided link. Send me a private message here on the forums and I will get the samples to Security Response.

 

Thanks,

Ryan

Ryan McGann
Principal Software Engineer
Macintosh Products & Solutions
Symantec
Bot Obliterator
Quads
Posts: 13,248
Registered: ‎07-21-2008

Re: Java vulnerability, Flashback Trojan and Norton

Regular Visitor
sabatine2004
Posts: 8
Registered: ‎04-01-2012

Re: Java vulnerability, Flashback Trojan and Norton

Ryan,

 

I've checked for all the signatures you indicated, and have them all except for the OSX.Flashback.  I also found out that Deep Sight was not set to block outgoing but I have since changed that.

 

I have run LiveUpdate every other hour, and I still don't have the signature OSX.Flashback.  How (or where) would I get this signature?

 

I hope this makes sense, as I 'm not too familiar with the terminolgy  :smileyfrustrated: but I think you may understand what I'm trying to say.

 

Thanks.

S.

Contributor
Timothy
Posts: 86
Registered: ‎09-26-2008

Re: Java vulnerability, Flashback Trojan and Norton


sabatine2004 wrote:

Ryan,

 

I've checked for all the signatures you indicated, and have them all except for the OSX.Flashback.  I also found out that Deep Sight was not set to block outgoing but I have since changed that.

 

I have run LiveUpdate every other hour, and I still don't have the signature OSX.Flashback.  How (or where) would I get this signature?

 

I hope this makes sense, as I 'm not too familiar with the terminolgy  :smileyfrustrated: but I think you may understand what I'm trying to say.

 

Thanks.

S.


 

The OSX.Flashback detection is a Virus Definition while the others mentioned in Ryan's original post are Vulnerability signatures.

I'm not sure how NAV 12 is set-up, but in NAV 11 the Vulnerability Definitions are in the 'Automatic Protection' pane -> 'Vulnerability Protection' -> 'Configure...' button, while the Virus Definitions are listed in: "Tools -> Virus Definition Information" menu.

Regular Visitor
sabatine2004
Posts: 8
Registered: ‎04-01-2012

Re: Java vulnerability, Flashback Trojan and Norton

Hi Timothy,

 

Thank you very much for the explanation.  I was able to locate it.  

 

Cheers,

S.

Bot Obliterator
Quads
Posts: 13,248
Registered: ‎07-21-2008

Re: Java vulnerability, Flashback Trojan and Norton

Apple have released a removal tool also http://support.apple.com/kb/DL1517

 

Quads

SUBASH_PRABU
Posts: 2,076
Kudos: 252
Solutions: 90
Registered: ‎05-31-2011

Re: Java vulnerability, Flashback Trojan and Norton

Symantec released a Removal Tool Last Week (I believe)

Newbie
jlaronge
Posts: 2
Registered: ‎04-19-2012

Re: Java vulnerability, Flashback Trojan and Norton

"No further action should be necessary unless you are already infected."

 

Hi Ryan,

Thank you for the helpful information.

 

My question is how can I determine if I am already infected as you described now that I have just installed the latest updates.

 

Joseph

Bot Obliterator
Quads
Posts: 13,248
Registered: ‎07-21-2008

Re: Java vulnerability, Flashback Trojan and Norton

Read the 2 posts above yours, simple enough I think.

 

Quads