04-10-2012 04:57 PM
I have 20+ samples
"......................any kind, you are encouraged to submit it to https://submit.symantec.com/websubmit/retail.cgi" I don't ned that link, it is slower.
Quads
04-10-2012 05:07 PM
Contact me privately if you would like to provide samples but don't want to use the provided link. Send me a private message here on the forums and I will get the samples to Security Response.
Thanks,
Ryan
04-11-2012 08:58 PM
04-12-2012 03:15 PM
Ryan,
I've checked for all the signatures you indicated, and have them all except for the OSX.Flashback. I also found out that Deep Sight was not set to block outgoing but I have since changed that.
I have run LiveUpdate every other hour, and I still don't have the signature OSX.Flashback. How (or where) would I get this signature?
I hope this makes sense, as I 'm not too familiar with the terminolgy
but I think you may understand what I'm trying to say.
Thanks.
S.
04-13-2012 04:37 PM
sabatine2004 wrote:Ryan,
I've checked for all the signatures you indicated, and have them all except for the OSX.Flashback. I also found out that Deep Sight was not set to block outgoing but I have since changed that.
I have run LiveUpdate every other hour, and I still don't have the signature OSX.Flashback. How (or where) would I get this signature?
I hope this makes sense, as I 'm not too familiar with the terminolgy
but I think you may understand what I'm trying to say.
Thanks.
S.
The OSX.Flashback detection is a Virus Definition while the others mentioned in Ryan's original post are Vulnerability signatures.
I'm not sure how NAV 12 is set-up, but in NAV 11 the Vulnerability Definitions are in the 'Automatic Protection' pane -> 'Vulnerability Protection' -> 'Configure...' button, while the Virus Definitions are listed in: "Tools -> Virus Definition Information" menu.
04-13-2012 09:17 PM
Hi Timothy,
Thank you very much for the explanation. I was able to locate it.
Cheers,
S.
04-14-2012 05:40 AM
04-15-2012 12:01 AM
Symantec released a Removal Tool Last Week (I believe)
04-19-2012 07:13 PM
"No further action should be necessary unless you are already infected."
Hi Ryan,
Thank you for the helpful information.
My question is how can I determine if I am already infected as you described now that I have just installed the latest updates.
Joseph
04-19-2012 07:21 PM
Read the 2 posts above yours, simple enough I think.
Quads
