Trojan Tragedy - Targeting Norton?

join the gin and rummy club.

i just bought a new computer. when the new one goes, i'll get a new one again. or give up computers.

bump

My bet is your #1 option there, bunny. I'm also gonna guess your problem was related to your browser and/or email client security settings.

The rest of the article I will leave to Timber, Monger et al, to understand, for as far as I am concerned, it could have been written in ancient Sanskrit!


http://software.silicon.com/security/0,39024655,39127781,00.htm

From what I gather, NAV's LiveUpdate shoulda updated your Norton to correct that particular issue on Feb 9th, so I dunno. I know mine did - 70209af (extended version 2/9/2005 rev. 32). I sorta doubt your problem was related to that particular exploit. Coulda been, of course, but it seems more likely, to me anyhow, that the sorta problem you describe would be related to your Internet Security Settings.

Details from Symantec Security Bulletin: Feb 8 2005

Timber- I have Norton "Live Update". I am getting so paranoid about viruses though, that sometimes I will just run it manually when I first open the computer, just for the hell of it. It only takes a few seconds, and then I feel better! :wink:

New LiveUpdate definitions are available every Wednesday. If ya wanna be a little more up-to-date, there's IntelligentUpdate , which is more frequently updated ... ya hafta manually install the updates, but the instructions are clear and simple. The most current LiveUpdate file is the one for Feb 9 (the normal Wednesday update), the most current Intelligent update file, which contains about 16 additional items over the Feb 9 version, is dated Feb 13. I generally check Intelligent update on Mondays and Fridays - or when there's word of a new baddie out there in the wild - as well as havin' LiveUpdate enabled for its regular Wednesday update.

My Norton was updating itself almost every day.

Any comments about security settings other than they are prolly what did it, Timber?

Opinions vary on what's best for security settings, but this is what I'd recommend for ya:

Tools>Internet Options>Security - click ""Custom Level" -

Under ".NET Framework-reliant components";

Run components not signed with Authenticode - set to "Disable" for highest security, but less functionality, "Prompt" if you think it wise to make the choices yourself

Binary and script behaviors" - set to "Prompt"

Download unsigned ActiveX controls - set to "Prompt" or "Disable"

Initialize and script ActiveX controls not marked as safe - set to "Prompt" or "Disable"

Run ActiveX controls and plugins - set to "Prompt"

Under "Miscellaneous";

Access data across domains - set to "Prompt"

Allow web pages to use restricted protocols for active content - set to "Prompt"

Display mixed content - set to "Prompt"

Software channel permissions - sit to "High" for greatest security, "Mediun" for more functionality

Submit nonencrypted form data - set to "Prompt"

Use Pop-up blocker - set to "Enable" if its not already set

Websites in less privileged web content zone can navigate into this zone - set to "Prompt"

Under "Scripting"

Active scripting - set to "Prompt"

Everything else can be left at default setting - usually "Enable", Then go to the "Advanced" tab.

Under "Browsing", uncheck both instances of "Install On Demand". Under "Security", make sure everything EXCEPT "Allow software to run or install even if signature is invalid" and "Do not save encrypted pages to disk" is checked. Click "OK", exit to your desktop, and reboot.


If you still have Microsoft's "Virtual Machine",

Uninstall it ,

then get

Sun Java



You'll get nagged some as you browse, but you'll be aware of and hafta think about what ya allow. There's some other stuff (like addin' specific known sites to your "Trusted" zone, settin' up exceptions for the way cookies from some sites are handled, and turnin' off some 3rd party auto updates), but that's plenty for now.

I'd also recommend anyone interested in computer privacy and security take a good look around Eric Howes' excellent website

Thankee!

I should mention those are settings for the "Internet Zone" - leave the other zones alone for now.

Lol! I GOT no damn zones Timber!!!

Putie is still in the shop.

I will look close at the zone stuff when it is returned.