Free Republic
Browse · Search
News/Activism
Topics · Post Article

Skip to comments.

Computer worm attacks business PCs (Using Norton Anti-Virus)
Associated Press ^ | December 16, 2006

Posted on 12/18/2006 1:53:03 AM PST by Zakeet

SAN FRANCISCO - A computer worm is attacking some business PCs through a flaw in antivirus software by Symantec Corp., a security company warned Friday.

EEye Digital Security, based in Aliso Viejo, Calif., said the worm, dubbed "Big Yellow," began attacking some computer systems on Thursday — seven months after eEye first discovered the flaw.

Symantec released a patch to address the flaw in May, but it's up to its corporate customers to install it. Officials at the Cupertino, Calif.-based security software company said Friday it had so far received three reports of systems affected by the worm.

"It is definitely a new worm, and it is looking for vulnerable systems, but we're not seeing any evidence of a significant outbreak or infection," said Vincent Weafer, a senior director at Symantec's security response unit.

Big Yellow enters machines through a security hole in the corporate version of Symantec's antivirus software. Once infected with the worm's "bot" program, a hacker can use it as a way to connect with other computers for malicious attacks.

(Excerpt) Read more at news.yahoo.com ...


TOPICS: Business/Economy; News/Current Events
KEYWORDS: malware; symantec; virus; worm
Personally, I think it's real nice of EEye to name the new worm after Bubba Clinton.
1 posted on 12/18/2006 1:53:04 AM PST by Zakeet
[ Post Reply | Private Reply | View Replies]

To: Zakeet
My experiences with Symantec products in the last 18 months are such that I would almost rather have a virus. They are easier to remove. I bought copies for three machines, ended up removing all the programs and tossed the CD's.

SUSE Linux is now running on two of them, Red Hat on another. To hell with it all.

2 posted on 12/18/2006 3:22:58 AM PST by Gorzaloon ("Illegal Immigrant": The Larval form of A Democrat.)
[ Post Reply | Private Reply | To 1 | View Replies]

To: Gorzaloon

I use Avast and Spyware Sweeper and like the job that both of them do.


3 posted on 12/18/2006 3:48:55 AM PST by proudofthesouth (Mao said that power comes at the point of a rifle; I say FREEDOM does.)
[ Post Reply | Private Reply | To 2 | View Replies]

To: Gorzaloon
"My experiences with Symantec products in the last 18 months are such that I would almost rather have a virus.:

For 10 years, I have never understood why anyone would let a piece of Norton junk get anywhere near their computer.
It is probably the worst infection anyone could get.

I also use Avast...It is free, automatic updates each day, and it WORKS.
4 posted on 12/18/2006 3:54:13 AM PST by AlexW (Reporting from Bratislava, Slovakia)
[ Post Reply | Private Reply | To 2 | View Replies]

To: Zakeet
Personally, I think it's real nice of EEye to name the new worm after Bubba Clinton.

Wuh???

5 posted on 12/18/2006 3:59:02 AM PST by Non-Sequitur
[ Post Reply | Private Reply | To 1 | View Replies]

To: AlexW

Not only is Symantec software junk, their user support sucks as well.


6 posted on 12/18/2006 4:09:40 AM PST by Fresh Wind (All we are sa-a-a-ying, is give Beast a chance.)
[ Post Reply | Private Reply | To 4 | View Replies]

To: Gorzaloon

Where do I get these programs? I HATE SYMANTIC!!!


7 posted on 12/18/2006 4:22:41 AM PST by poobear (Political Left, continually accusing their foes of what THEY themselves do every day.)
[ Post Reply | Private Reply | To 2 | View Replies]

To: Fresh Wind
Not only is Symantec software junk, their user support sucks as well.

I finally swore off of Symantec after I tried to renew virus protection for an older Symantec product on a PC at home. Their web site misled me into purchasing the wrong update, and their outsourced support department overseas not only lied to me about canceling that purchase (they said it would not be charged, it was, and I later discovered there was no basis for them to say that), they then sold me ANOTHER incorrect upgrade. I reversed all the charges with my credit card company, and have spent the last three years Symantec-free (and virus free, thanks to better products).
8 posted on 12/18/2006 4:24:47 AM PST by beezdotcom
[ Post Reply | Private Reply | To 6 | View Replies]

To: poobear

"Where do I get these programs? I HATE SYMANTIC!!!"

www.avast.com


9 posted on 12/18/2006 4:43:32 AM PST by AlexW (Reporting from Bratislava, Slovakia)
[ Post Reply | Private Reply | To 7 | View Replies]

To: beezdotcom

They don't pay enough money to keep their good employees. They company turn over rate is large.


10 posted on 12/18/2006 4:48:07 AM PST by bmwcyle (McCain nomination assures a Hillary win)
[ Post Reply | Private Reply | To 8 | View Replies]

To: AlexW

An unscientific observation:

Since removing EVERY vestige of Symantec's Norton Anti Virus from EVERY machine using my home network - the instances of crashes, lock ups and the deadly blue screen of death have STOPPED.

Three years now - and trouble free.
Using ONLY the free McAfee AV provided by my cable ISP, Comcast, with routine sweeps by AdWare and Spybot.

Semper Fi


11 posted on 12/18/2006 4:50:35 AM PST by river rat (You may turn the other cheek, but I prefer to look into my enemy's vacant dead eyes.)
[ Post Reply | Private Reply | To 9 | View Replies]

To: bmwcyle
They don't pay enough money to keep their good employees. They company turn over rate is large.

I think that varies - their local office has actually been able to snare a few of our good employees over the years. That being said, some of them have come back - but not specifically due to salary issues, more for the recent lack of job stability (move to a different location, or be furloughed.)
12 posted on 12/18/2006 5:00:45 AM PST by beezdotcom
[ Post Reply | Private Reply | To 10 | View Replies]

To: AlexW
I just uninstalled Norton and had to go to their website to get the uninstall tool. They really have you by the ...

I'm trusting this avast will not interrupt my small business. Norton was blocking my Contractor Quicken program which is the lifeblood of my bookkeeping. Any help is greatly appreciated. Thank you!
13 posted on 12/18/2006 5:09:11 AM PST by poobear (Political Left, continually accusing their foes of what THEY themselves do every day.)
[ Post Reply | Private Reply | To 9 | View Replies]

To: Gorzaloon
My experiences with Symantec products in the last 18 months are such that I would almost rather have a virus

Same here. I used Norton for several years until I tired of the problems I had with it. I now use AVG and couldn't be happier with its performance.

I wouldn't recommend Norton to anyone.
14 posted on 12/18/2006 5:16:14 AM PST by reagan_fanatic (A liberal is a suicide bomber without the guts)
[ Post Reply | Private Reply | To 2 | View Replies]

To: poobear

"I'm trusting this avast will not interrupt my small business"

I have been using Avast for about 3 years or more...Never had a moments problem.

I hope you were able to get rid of all the Norton garbage...Some say that you almost have to reformat to get it all off of the computer.


15 posted on 12/18/2006 5:30:00 AM PST by AlexW (Reporting from Bratislava, Slovakia)
[ Post Reply | Private Reply | To 13 | View Replies]

To: reagan_fanatic
I'm stuck with Norton Symantic at work it's a POS, but dumped it three years ago
from my home PC, running free version of AVG and Spysweeper.. no problems
16 posted on 12/18/2006 5:30:59 AM PST by Robe (Rome did not create a great empire by talking, they did it by killing all those who opposed them)
[ Post Reply | Private Reply | To 14 | View Replies]

To: beezdotcom
Here is the DC area I work with several who have left. They make more money in defense.
17 posted on 12/18/2006 5:39:02 AM PST by bmwcyle (McCain nomination assures a Hillary win)
[ Post Reply | Private Reply | To 12 | View Replies]

To: AlexW

Thanks, I tried to download from their website. I couldn't finish due to my XP registration problems. Another Norton mess. Will probably have to uninstall XP and pray they will let me use my registration twice when I re-install. What a mess. Thanks for you help though. This all started Friday with Norton auto-updates. Argghh!!!


18 posted on 12/18/2006 5:44:48 AM PST by poobear (Political Left, continually accusing their foes of what THEY themselves do every day.)
[ Post Reply | Private Reply | To 15 | View Replies]

To: Gorzaloon
My experiences with Symantec products in the last 18 months are such that I would almost rather have a virus.

Hear, hear. Viruses tend to be both less troublesome, and easier to remove than Norton. And should you ever have a problem between Nortons A/V and Internet Security suite, break out your system discs, back up your data, and get started on a format and re-load. So many systems are sold with Norton pre-installed, that I've made a pretty good little side business out of removing it and various other pre-loaded crapware and re-loading machines to a raw Windows-only state, then letting the owners load all of their desired apps.

19 posted on 12/18/2006 5:50:34 AM PST by Space Wrangler
[ Post Reply | Private Reply | To 2 | View Replies]

To: beezdotcom

Trying to renew a Symantec subscription online is absolute hell.


20 posted on 12/18/2006 5:52:23 AM PST by 1rudeboy
[ Post Reply | Private Reply | To 8 | View Replies]

To: AlexW

Avast is not free. If you go to their "free" download page you will find that you have to give them your credit card number and sign up for either one, two or three years and are charged for that privilege.


21 posted on 12/18/2006 5:54:31 AM PST by kipj
[ Post Reply | Private Reply | To 9 | View Replies]

To: kipj
"Avast is not free."

I've been utilizing Avast for almost three years and have never had to provide them with a credit card number. Perhaps you were on the trial offer page.

22 posted on 12/18/2006 5:57:11 AM PST by politicalwit (Freedom doesn't mean a Free Pass.)
[ Post Reply | Private Reply | To 21 | View Replies]

To: politicalwit

Free version here http://www.avast.com/eng/download-avast-home.html


23 posted on 12/18/2006 5:59:00 AM PST by politicalwit (Freedom doesn't mean a Free Pass.)
[ Post Reply | Private Reply | To 22 | View Replies]

To: kipj

"Avast is not free."

I have never had to pay for the home version, and I get automatic updates almost every day.

They do have a pro version that they charge for.


24 posted on 12/18/2006 6:01:22 AM PST by AlexW (Reporting from Bratislava, Slovakia)
[ Post Reply | Private Reply | To 21 | View Replies]

To: politicalwit; AlexW
Thanks for the url to the free version. I think I'll give it a try since AVG will be charging for their software beginning next month.
25 posted on 12/18/2006 6:12:09 AM PST by kipj
[ Post Reply | Private Reply | To 23 | View Replies]

To: kipj

"I think I'll give it a try since AVG will be charging for their software beginning next month."

No thet aren't. I just downloaded their new, free version.
The button for the free version is buried down in the product page however.

http://free.grisoft.com/doc/avg-anti-virus-free/lng/us/tpl/v5


26 posted on 12/18/2006 6:15:57 AM PST by HereInTheHeartland (Never bring a knife to a gun fight, or a Democrat to do serious work...)
[ Post Reply | Private Reply | To 25 | View Replies]

To: Zakeet

Can someone else other than Symantec bashers comment on this thread? How does one find out if the "fix" for Norton Anti-virus has been installed? Can you tell from a log file?


27 posted on 12/18/2006 6:16:11 AM PST by montag813
[ Post Reply | Private Reply | To 1 | View Replies]

To: ShadowAce

ping


28 posted on 12/18/2006 6:16:24 AM PST by KoRn
[ Post Reply | Private Reply | To 1 | View Replies]

tag


29 posted on 12/18/2006 6:29:40 AM PST by lrb111 (Minutemen - Doing jobs the White House won't do.)
[ Post Reply | Private Reply | To 1 | View Replies]

To: montag813
Can someone else other than Symantec bashers comment on this thread? How does one find out if the "fix" for Norton Anti-virus has been installed? Can you tell from a log file?

First, all Symantec bashers were Symantec USERS first, and some of us, loyal ones for years. We are not doing it because we hate the product, we are doing it because the product hated us.

Can't you click on the Help/About and get the revision number? Then you can compare it to the current version listed on their site.

30 posted on 12/18/2006 6:35:00 AM PST by Gorzaloon ("Illegal Immigrant": The Larval form of A Democrat.)
[ Post Reply | Private Reply | To 27 | View Replies]

To: Gorzaloon
First, all Symantec bashers were Symantec USERS first, and some of us, loyal ones for years. We are not doing it because we hate the product, we are doing it because the product hated us.

I have used Norton products on both Mac and PC for about 14 years, and never had a problem. I am amazed at the animus against Symantec.

31 posted on 12/18/2006 6:43:21 AM PST by montag813
[ Post Reply | Private Reply | To 30 | View Replies]

To: Space Wrangler

Norton Internet Security:

1200 Registry Entries CAN'T be wrong! /sarc

AVG Free - SpyBot S&D TeaTimer.


32 posted on 12/18/2006 6:49:16 AM PST by four more in O 4 (God Bless America. Let Freedom Reign.)
[ Post Reply | Private Reply | To 19 | View Replies]

To: montag813
I have used Norton products on both Mac and PC for about 14 years, and never had a problem. I am amazed at the animus against Symantec.

So had I. I loved their firewall, for example.

But when it messes up, it does so catastrophically. As a security measure of preventing malware from disabling or uninstalling it, it embeds itself in some way related to the intrinsic machine ID. Should it ever corrupt, there is little chance of saving the system.

There is often mindless animosity in the Windows/Linux or Wintel/Mac threads, but in this case of the Symantec issue, the yelling is coming from betrayed and disillusioned customers who were once happy with the products. From my experience, I believe they kept on adding "features" that no one asked for, no one wanted, etc. just to justify more update sales and annual renewals.

At one time "Norton" was a good word. But when the Symantec Bomb finally goes off in someone's system, the mention of the word produces a Traumatic Stress reaction which lapses immediately into obscenities, and sometimes direct symbolic action, like me taking their CD's to the target range.

33 posted on 12/18/2006 7:00:06 AM PST by Gorzaloon ("Illegal Immigrant": The Larval form of A Democrat.)
[ Post Reply | Private Reply | To 31 | View Replies]

To: Gorzaloon

Wow, the ID embedding does sound like a recipe for trouble. I back up my PC every few days to a full 80-90 GB image, which I heartily recommend. That way, any problem short of hardware failure can be easily rectified.


34 posted on 12/18/2006 7:27:05 AM PST by montag813
[ Post Reply | Private Reply | To 33 | View Replies]

To: montag813
Wow, the ID embedding does sound like a recipe for trouble. I back up my PC every few days to a full 80-90 GB image, which I heartily recommend. That way, any problem short of hardware failure can be easily rectified.

I think that where things fail is the people buy these products for "Peace of Mind".

Now, all is safe and secure and serene, and then they lapse into a happy coma where "Nothing can go wrong", so they fail to do the things they were taught or used to do.(?)

Now, they are truly set up for disaster.

To give all the firewall/security manufacturers a little break in the diatribe, a lot of malware DOES intentionally try to disable or corrupt or defeat security programs. These may be the real cause of the failures in some cases. If a firewall program is crashed, and a dll is put away uncleared, then Bad Things start to happen. In a program as huge and complex as Symantec's Norton, it is an accident waiting to happen. I once saw a trojan/malware attack that brought my company down, and among the programs where disabling attempts were made was Zone Alarm and one of the MacAfee products.

We lost about $50,000 in downtime, and some CNC machines had titanium work in process when they went down. (Yes, I know, what idiot uses a networked Windows PC to run a $500,000 machine!?)

This was all because some idiot (PAST TENSE!) went to a porn site. A banner and popup flood followed, then the trojans all loaded and called other ones, etc...HUNDREDS of programs of malware.

35 posted on 12/18/2006 7:44:50 AM PST by Gorzaloon ("Illegal Immigrant": The Larval form of A Democrat.)
[ Post Reply | Private Reply | To 34 | View Replies]

To: rdb3; chance33_98; Calvinist_Dark_Lord; Bush2000; PenguinWry; GodGunsandGuts; CyberCowboy777; ...

36 posted on 12/18/2006 7:48:50 AM PST by ShadowAce (Linux -- The Ultimate Windows Service Pack)
[ Post Reply | Private Reply | To 1 | View Replies]

To: Zakeet

New Norton/Symantec slogan: "The cure is worse than the disease."

Horrid bloatware that, along with its publisher, has gotten fat & lazy over the years. When FREE software runs rings around your expensive rubbish product it might be time to take stock of your situation.


37 posted on 12/18/2006 7:50:05 AM PST by relictele
[ Post Reply | Private Reply | To 1 | View Replies]

To: montag813
I have used Norton products on both Mac and PC for about 14 years, and never had a problem. I am amazed at the animus against Symantec.

Please post the memory that each Symantec/Norton product is eating up on your machines and we'll post a competing number.

Also, let's do a little performance benchmarking with and without Symantec/Norton. I hate to give the end of the movie away but I'm sure the non-Norton machines will do better.

38 posted on 12/18/2006 7:52:06 AM PST by relictele
[ Post Reply | Private Reply | To 31 | View Replies]

To: Gorzaloon
My experiences with Symantec products in the last 18 months are such that I would almost rather have a virus.

No Kidding

I tested a Norton's anti-virus/PC health program several yrs. ago.
I tried to uninstall it and ran into all kinds of problems.
After searching the registry and other tricks I gave up and formatted the hard drive.

Never, ever again.

39 posted on 12/18/2006 8:00:07 AM PST by Vinnie (You're Nobody 'Til Somebody Jihads You)
[ Post Reply | Private Reply | To 2 | View Replies]

To: relictele
Please post the memory that each Symantec/Norton product is eating up on your machines and we'll post a competing number.

44MB of RAM for ccapp.exe.

What product(s) do as good a job for both virus and firewall, with a smaller footprint?

40 posted on 12/18/2006 9:24:39 AM PST by montag813
[ Post Reply | Private Reply | To 38 | View Replies]

To: montag813

All the AVG-related services are using about 2MB on my machine. Agnitum Outpost Pro firewall is using about 10MB.



41 posted on 12/18/2006 9:36:23 AM PST by relictele
[ Post Reply | Private Reply | To 40 | View Replies]

To: relictele
All the AVG-related services are using about 2MB on my machine. Agnitum Outpost Pro firewall is using about 10MB.

What is AVG?

42 posted on 12/18/2006 12:34:29 PM PST by montag813
[ Post Reply | Private Reply | To 41 | View Replies]

To: montag813

AVG is a great antivirus program. They also recently took over EWIDO, which is one of my favorite anti-spyware and other stuff.

I have the paid versions of both, and worth it, too.

I also have the latest release of Prevx (the paid for version) and Spyware Sweeper (ditto).

Kerio Firewall.

And I run Ad-aware from time to time.

Each catches or works on things the others don't.



Wouldn't give Symantec a piece of my money for anything.


43 posted on 12/18/2006 12:40:31 PM PST by Knitting A Conundrum (Act Justly, Love Mercy, and Walk Humbly With God Micah 6:8)
[ Post Reply | Private Reply | To 42 | View Replies]

To: Fresh Wind

I use "Fix It Utilites". Never had a problem. They update the virus list every day. It fixes a lot of other problems on the computer as well. You can get it for about $30 just about anywhere. Great program!


44 posted on 12/18/2006 12:44:30 PM PST by P-Marlowe (LPFOKETT GAHCOEEP-w/o*)
[ Post Reply | Private Reply | To 6 | View Replies]

To: montag813

Using Kaspersky Internet Security (KIS) 6.0.411 - Antivirus, Firewall and more. Using 7,804kb.

I also am a previous Symantec user with a bad experience.


45 posted on 12/18/2006 12:45:16 PM PST by Chief901 (Joshua said: "Follow me while I follow the Lord", So does President George W. Bush.)
[ Post Reply | Private Reply | To 40 | View Replies]

To: montag813
44MB of RAM for ccapp.exe.

What product(s) do as good a job for both virus and firewall, with a smaller footprint?

Wow. That is a major resource hog. A cursory check of my system processes reveals that both AVG and ZA Pro are using a combined total of 17 MB of RAM. This includes all firewall, email, and virus scanning. Ccapp appears to be the auto-protect and email scanner only as well. A Google of ccapp.exe revealed something that I would have a major problem with had I spent $40 for a years rental on Nortons crapware:

Note: ccapp.exe could also be a process belonging to an advertising program by Symantec Common Client CC App. This process monitors your browsing habits and distributes the data back to the author's servers for analysis. This also prompts advertising popups. This process is a security risk and should be removed from your system.

46 posted on 12/18/2006 3:14:37 PM PST by Space Wrangler
[ Post Reply | Private Reply | To 40 | View Replies]

To: Knitting A Conundrum; Chief901; Space Wrangler; relictele

Thank you all for your advice and feedback.


47 posted on 12/18/2006 4:18:25 PM PST by montag813
[ Post Reply | Private Reply | To 43 | View Replies]

To: All

I just took off Norton on an users computer. It had 71 processes running before, I got it down to 29 and running smoothly. Before, it was dirt slow, with 512 RAM. It seemed like it had 64 RAM....LOL Not anymore!!!!


48 posted on 12/19/2006 7:46:48 PM PST by AJMaXx (ILU Roo.....!)
[ Post Reply | Private Reply | To 47 | View Replies]

To: Zakeet

Is this the virus that comes in an email marked "Invitation"?


49 posted on 01/18/2007 11:08:54 AM PST by Salvation (†With God all things are possible.†)
[ Post Reply | Private Reply | To 1 | View Replies]

Disclaimer: Opinions posted on Free Republic are those of the individual posters and do not necessarily represent the opinion of Free Republic or its management. All materials posted herein are protected by copyright law and the exemption for fair use of copyrighted works.

Free Republic
Browse · Search
News/Activism
Topics · Post Article

FreeRepublic, LLC, PO BOX 9771, FRESNO, CA 93794
FreeRepublic.com is powered by software copyright 2000-2008 John Robinson