Endpoint Protection

 View Only
  • 1.  Not as protected as I thought

    Posted Apr 24, 2009 02:18 PM
    We recently got the Personal Antivirus virus on one of our computers at the office.  We know who the culprit was, but this was a seemingly simple thing and Symantec wasn't finding it.  I had to get a completely different program before I could find it.  When that program was done scanning, not only did it find the Rogue.PersonalAntivirus problems in the computer, but it found other as well, such as Trojan.Vundo.H, Adware.MyWebSearch,Adware.180Solutions, Adware.MyWeb, and Trojan.Agent.  We are always up to date on our virus definition files and for something like the Personal Antivirus problem where I found multiple websites with solutions on how to remove it from your system, it's shocking that Symantec doesn't have any protection against it.  They're supposed to be so great, but I ended using a free... yes, FREE!!... program to eliminate Personal Antivirus.  That's just sad.


  • 2.  RE: Not as protected as I thought

    Posted Apr 24, 2009 02:28 PM
     Well the Anti Virus is just what it says, it detects virus, worms, spyware and adware. Vundo is a trojan that has cert defs going back to 2005. Are you sure your defs are updated. It could be a case of corrupt client too.. You might wanna check on these. If they do not work, you should surely get in touch with tech support. Symantec has easily one of the best detection rates in the industry...


  • 3.  RE: Not as protected as I thought

    Posted Apr 25, 2009 02:25 AM
    Not all AV Systems are 100% foolproof, and so is Symantec 

    We also got the same issue before.
    But the good thing is that majority are detected by SAV10.X.
    SEPMv11 has not given us any problems as of this writing.

    Cheers.


  • 4.  RE: Not as protected as I thought

    Posted Apr 25, 2009 07:23 AM
    Well Well Well!!!
    Again the old story of detection rate!

    See my friend, any kind of malware has a behavior which is detected and related to that specific malware as its signature. Since then, the malware is being detected by comparing the suspicious file with that signature.
    While there are enormous number of badware and malware, it is very probable that a virus or malware is mistaken with another one, or even with a functional and clean file. Here is the point of difference between the Antiviruses!

    It is true that the Antivirus should detect the threats, but it's an important point that the Antivirus detects it accurately. If by any reason a wrong detection occurs, there is a risk that the remediation goes a wrong way and wipes the infection and the footprint inaccurately, and in worst case, the Antivirus captures a systematic file as a bad one and cleans it by delition!!

    Hence, a reputable AV such as Symantec never risks substituting the detection rate wisdom with the accuracy. Note that nowadays there are software that generate virus’ or Trojan horses using an old badware. Therefore there are unlimited viruses with minor differences but variable functionality.

    I advice to locate the virus and submit it to Symantec technicians and acquire a perfect definition with a perfect remediation, instead of trusting a freeware with a risky behavior!


  • 5.  RE: Not as protected as I thought

    Posted Apr 25, 2009 07:36 AM
    I have to agree no AV/AS solution is 100% effective.  Symantec is very good for a corporate solution but will not protect against 100% of everything out there.  They are, in my opinion, conservative in their protection, but if you encounter something not protected and submit samples to Symantec, they will update their derinitions if they find your infection in the submission.  In my experience, this has been very fast and protected further outbreaks.

    If you are willing to abandon SEP/SAV and go with a free solution, more power to you and I truly hope it meets all your computer needs.  I have not found anything that will catch 100% of all infections and if you find a solution, please, by all means let us know.  Everyone is entitled to their opinions and should voice their opinion here.  goldi8472, best of luck to you in the future and I hope you find a product or intervention solution that meets your needs.  Until then, we are here to help you.