Hi All-- I have four entries in my risk log for Symantec. One each of Log Only and Quarantine for bc.exe and awk.exe. All four are classed as "Suspicious Emit" as defined here:
http://securityresponse.symantec.com/security_response/writeup.jsp?docid=2010-042920-5108-99&vid=42286 The Log Only warnings happened at 24 May 0218, and the Quarantine happened the same day at 1205. Thanks, Ivan On Thu, Jun 2, 2011 at 7:31 PM, Ivan Van Laningham <[email protected]>wrote: > I did get messages telling me which executables were problematic when I > logged in that day, but I didn't think to look in the logs. I'll check > tomorrow when I'm at work. > > Thanks. > > Metta, > Ivan > > > On Thu, Jun 2, 2011 at 5:38 PM, Glenn Fowler <[email protected]> wrote: > >> >> any symantec log messages corresponding to the quarantine? >> >> On Thu, 2 Jun 2011 17:29:03 -0600 Ivan Van Laningham wrote: >> > Symantec enterprise suddenly started classifying these two executables, >> > unchanged for months, as virus threats and quarantined them. Scanning >> the >> > Uwin installer exe does not yield results, but as soon as the installer >> is >> > run, awk and bc are removed as threats. telnet.exe is also missing, but >> I >> > never received a notice that it was a threat. >> >> > This began happening on either Monday, 23 May or Tuesday, 24 May. I >> believe >> > there was a Symantec virus definition update around that time. >> >> > This is fairly irritating, as corporate security is unwilling to >> question >> > the word of Symantec. "Ticket: closed. Resolution: Please find an >> > alternate implementation." >> >> > I'm not the only one on the network to suffer this problem. Are others >> out >> > there experiencing this? How about home users of Symantec AV? >> >> > > > -- > Ivan Van Laningham > God N Locomotive Works > http://www.pauahtun.org/ > > http://www.python.org/workshops/1998-11/proceedings/papers/laningham/laningham.html > Army Signal Corps: Cu Chi, Class of '70 > Author: Teach Yourself Python in 24 Hours > -- Ivan Van Laningham God N Locomotive Works http://www.pauahtun.org/ http://www.python.org/workshops/1998-11/proceedings/papers/laningham/laningham.html Army Signal Corps: Cu Chi, Class of '70 Author: Teach Yourself Python in 24 Hours
_______________________________________________ uwin-users mailing list [email protected] https://mailman.research.att.com/mailman/listinfo/uwin-users
