Gpack exploit detected by Norton Internet Security?

Duis mollis, est non commodo luctus, nisi erat porttitor ligula, eget lacinia odio sem nec elit. Sed posuere consectetur est at lobortis. Vestibulum id ligula porta felis euismod semper. Donec ullamcorper nulla non metus auctor fringilla. Aenean lacinia bibendum nulla sed consectetur. Cras justo odio, dapibus ac facilisis in, egestas eget quam. Cras mattis consectetur purus sit amet fermentum. Morbi leo risus, porta ac consectetur ac, vestibulum at eros. Sed posuere consectetur est at lobortis. Etiam porta sem malesuada magna mollis euismod. Cum sociis natoque penatibus et magnis dis parturient montes, nascetur ridiculus mus. Duis mollis, est non commodo luctus, nisi erat porttitor ligula, eget lacinia odio sem nec elit. Cras justo odio, dapibus ac facilisis in, egestas eget quam. Aenean eu leo quam. Pellentesque ornare sem lacinia quam venenatis vestibulum. Curabitur blandit tempus porttitor. Sed posuere consectetur est at lobortis.

With today's Threats, you need to be doing Full System Scans at least twice-a-week.

 

The Trojan will most-likely be Detected; the Vulnerability will probably be Detected; to be honest, they should be Detected, but it depends on how often you Update your Product via LiveUpdate; you should Run LiveUpdate every two hours; however, one of the symantec Staff should be able to Confirm this.

 

Why not Upgarde to N.I.S. 2008/2009* as it is better - obviously - than N.I.S. 2007 when your Subscription Runs Out?

 

* - Released roughly September 2008 

Message Edited by Floating_Red on 06-11-2008 11:24 PM
Message Edited by Floating_Red on 06-11-2008 11:26 PM

Update--Nothing was detected in the full scan. (I do run update everyday, and will upgrading to 2008/209 now as soon as it is available--just about the time I am due to renew.)

 

I have a hard time believing I was not infected without a peep from NIS. In browsing the internet I find that an application named AVG has been reported to detect the problem but Norton reportedly did not, but frankly I did not see enough information out there to decide how significant this is.

 

There is a lot about "MPack" out there, even on the Symantec website, and I suspect "gpack" is a variant of the same kit. In the meantime, I will stay with my crash course in MPack et. al.

 

Thank You

 

P.S. Regrets about posting too much of the bad IP address in my original post.

 

Message Edited by glewen on 06-11-2008 08:12 PM

You should Update every day because, if a Virus or other Interet Threats gets on to your computer, it will not be symatec’s fault - it will be your fault because you do not Update every day when you should be; just a bit of advice, but I suppose it is up to yourself how often you Update.

Updating every day (which I do) is certainly good advice.  In one case I had literally just run the update before connecting--during the probable period the index file was hacked, I connected several times because I had set it as my browser's home page(!)

 

I don't intend to blame Symantec if it turns out I have a problem.  I would just like to know how to be sure if I even have a problem, especially since I am not sure I was infected in the first place.  I am now checking the source code on my site daily, but there are plenty of other hacked sites out there and with the MPack et. al. developers reportedly releasing new exploits on a regular basis, this seems like a persistent threat.  

 

Next step--not waiting for renewal but immediately replacing my NIS with the latest version.  Hopefully that will be good for now.  I don't want to make this complicated.  If daily updates are not enough then I will update more often.  It's not that hard to do.

 

Again, thanks for the reply.

 

When does your Subscription Expire for N.I.S. 2007?  If it Expire around September, then I would wait for N.I.S. 2009 to be Released; if you want to Upgrade to N.I.S. 2008 just now and want to Upgrade to N.I.S. 2009 upon Release - which is roughly September 2008 - then I would see Post Going From N.I.S. 2008 to N.I.S. 2009.  You should always Upgrade to the Newest Product upon Release because the Newly-Released Product will be more advanced at Protecting you.

 

As well as Updating your Product Daily - every few hours advised - you should Run a Full System Scan at least twice-a-week.  What do you plan to do if Updating your Product Daily does not work?

 

Viruses, Trojans, e.t.c., are changing Daily; Vulnerabilties are roughtly changing every-two-days.

Message Edited by Floating_Red on 06-12-2008 09:35 PM
1 Like

Floating_Red wrote:

When does your Subscription Expire for N.I.S. 2007?  If it Expire around September, then I would wait for N.I.S. 2009 to be Released; if you want to Upgrade to N.I.S. 2008 just now and want to Upgrade to N.I.S. 2009 upon Release - which is roughly September 2008 - then I would see Post Going From N.I.S. 2008 to N.I.S. 2009.  You should always Upgrade to the Newest Product upon Release because the Newly-Released Product will be more advanced at Protecting you.


To clarify Floating_Red's points, I've posted a thread here regarding subscriptions and upgrades:

 

http://community.norton.com/norton/board/message?board.id=nis_feedback&thread.id=2267

 

I would recommend to upgrade to NIS 2008 sooner rather than later, since your current vlaid subscription entitles you to receive the free upgrade. Once your suscription expires, you can just renew the subscription. With a valid subscription, you are then eligible for any new upgrades that are available, including NIS 2009. Thanks!

Tony_Weiss writes


I would recommend to upgrade to NIS 2008 sooner rather than later, since your current vlaid subscription entitles you to receive the free upgrade. Once your suscription expires, you can just renew the subscription. With a valid subscription, you are then eligible for any new upgrades that are available, including NIS 2009. Thanks!


 This is good advice, and I will take it.  

 

In the meantime, I find I have a process running called C:\SystemRoot\System32\smss.exe.   No % around SystemRoot, etc.  and I have no C:\SystemRoot folder.

 

Any advice?  I am taking my computer off-line until I 'cess this thing out.

 

 


glewen wrote:

 

In the meantime, I find I have a process running called C:\SystemRoot\System32\smss.exe.   No % around SystemRoot, etc.  and I have no C:\SystemRoot folder.

 

Any advice?  I am taking my computer off-line until I 'cess this thing out.

 

 


Please post this portion again in a new thread.   I can't split a post in half or I would do it for you, I either have to move it or leave it here.   This will get the best attention if you start a new thread with a new topic.

 

[Edit: the new thread can be found here

Message Edited by Allen_K on 06-12-2008 11:12 PM