Re: [Full-disclosure] Re: Microsoft AntiSpyware attacks Norton AV?

2006-02-12 Thread Bipin Gautam
On 2/13/06, Dave Korn <[EMAIL PROTECTED]> wrote:
> "Joel R. Helgeson" [EMAIL PROTECTED] wrote in message
> news:[EMAIL PROTECTED]
> > Is anyone else seeing/experiencing this?
>
> > When it scanned each system it found a Trojan called PWS.Bancos.A
> > (Password Stealer) - Level: Severe
>
> > When it quarantined the bug, it also rendered the Symantec Anti-Virus
> > helpless.
>
> > Symantec Antivirus is corrupt and not usable.
>

Any security product for windows that depends on the windows registry
and IE/windows components s much to a point small malfunction
on those will seriously affect its normal working, eats lots of system
resources, has a VERY BAD uninstaller, has big bulky updates deserves
to be flushed out of your PC. hey, NAV qualifies on all these
criterias.   (o;

-bipin
___
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/

RE: [Full-disclosure] Re: Microsoft AntiSpyware attacks Norton AV?

2006-02-12 Thread Nick Hyatt
I disagree.

In our troubleshooting environment, we use 4 applications to remove spyware
/ malware / virus infections from customer systems - AVG, MS Antispyware,
Ad-Aware PE and Spybot S&D. We've found that it takes 4+ applications plus
some manual digging with Hijack This and RegscrubXP to get rid of the most
serious infections.

As far as Norton goes, totally and fully agree - get rid of it.

Nick Hyatt
[EMAIL PROTECTED]

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Nancy Kramer
Sent: Sunday, February 12, 2006 7:48 PM
To: Dave Korn; full-disclosure@lists.grok.org.uk
Subject: Re: [Full-disclosure] Re: Microsoft AntiSpyware attacks Norton AV?

At 07:05 PM 2/12/2006, Dave Korn wrote:

>   No, let me correct that.  You need to fully uninstall it then throw 
>it in the bin and get something better[*].  Oh, and don't let MS beta 
>software run on any of your machines.


I concur.  Been there done that got the viruses.  If it weren't for AVG I
would probably have had to format my hard drive.

MS software doesn't work all that well in production versions.  Don't put
their beta's on any machine that is anything else but a test machine.

Regards,

Nancy Kramer
Webmaster http://www.americandreamcars.com Free Color Picture Ads for
Collector Cars One of the Ten Best Places To Buy or Sell a Collector Car on
the Web 


--
No virus found in this outgoing message.
Checked by AVG Anti-Virus.
Version: 7.1.375 / Virus Database: 267.15.4/255 - Release Date: 2/9/2006


___
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/

___
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/


Re: [Full-disclosure] Re: Microsoft AntiSpyware attacks Norton AV?

2006-02-12 Thread Nancy Kramer

At 07:05 PM 2/12/2006, Dave Korn wrote:


  No, let me correct that.  You need to fully uninstall it then throw it in
the bin and get something better[*].  Oh, and don't let MS beta software run
on any of your machines.



I concur.  Been there done that got the viruses.  If it weren't for AVG I 
would probably have had to format my hard drive.


MS software doesn't work all that well in production versions.  Don't put 
their beta's on any machine that is anything else but a test machine.


Regards,

Nancy Kramer
Webmaster http://www.americandreamcars.com
Free Color Picture Ads for Collector Cars
One of the Ten Best Places To Buy or Sell a Collector Car on the Web 



--
No virus found in this outgoing message.
Checked by AVG Anti-Virus.
Version: 7.1.375 / Virus Database: 267.15.4/255 - Release Date: 2/9/2006


___
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/


[Full-disclosure] Re: Microsoft AntiSpyware attacks Norton AV?

2006-02-12 Thread Dave Korn
"Joel R. Helgeson" [EMAIL PROTECTED] wrote in message 
news:[EMAIL PROTECTED]
> Is anyone else seeing/experiencing this?

> When it scanned each system it found a Trojan called PWS.Bancos.A 
> (Password Stealer) - Level: Severe

> When it quarantined the bug, it also rendered the Symantec Anti-Virus 
> helpless.

> Symantec Antivirus is corrupt and not usable.

>My take on what has happened:
> 

> Microsoft very quickly released signature version 5807 to correct the 
> mistake.

  It's no longer speculation.
http://blog.washingtonpost.com/securityfix/2006/02/microsoft_antispyware_deleting_1.html

See also slashdot.

> Anyone else seeing this?

  It's just that, a false positive.  Hits NAV pretty bad, you need to fully 
uninstall and reinstall it.

  No, let me correct that.  You need to fully uninstall it then throw it in 
the bin and get something better[*].  Oh, and don't let MS beta software run 
on any of your machines.


cheers,
  DaveK

[*] - Personal opinion.
-- 
Can't think of a witty .sigline today



___
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/