Security Community Blog

Dinesh Theerthagiri | 17 Nov 2011 | 0 comments

This article presents information on manual unpacking of protected malicious Windows executables using the OllyDbg debugger. It also involve in fully rebuild the import table so the file can be restored to its original state and executed. Many anti-virus vendors categorized UPX, NsPack, ASpack and many other PE packers as malicious software.

Packers ???

A 'Packer' is a compression routine that squeezes an executable file. These programs created to reduce disk space and make downloads faster. It makes difficult to understand the original file and make it tricky to match the file signature of a compressed file. Packers initially send PE internal structures and then it identifies PE header, Export table, and import table in new structures & attaches code segment before OEP, called as STUB .i.e. the compressed executable is shifted to data section of newly created file. PE header & section header is no more useful since data is compressed means...

Symantec Cybercrime Index Portal...

SecuredThatToo | 17 Feb 2011 | 1 comment

Symantec just announced a pretty cool, interactive, free tool to help stay abreast of security trends and activities. It even has historical data! There’s an online version, a installable Windows gadget and you can access it via your mobile phone! It's pretty slick!

Online Web Portal:
http://www.nortoncybercrimeindex.com

Windows Gadget Download:
http://www.norton.com/ProtectYourself

Mobile:
http://www.nortoncybercrimeindex.mobi

Check it out!!!

Thanks,
Min Ju

Your opportunity to provide usability feedback about security products

UCD4me | 05 Jan 2011 | 0 comments

The User Centered Design (UCD) team here at Symantec exists to help make customer experiences easier, more efficient and more useful for you. Right now, we're ramping up several research projects where we are looking for those in security and compliance with a manger, director or CISO role to give us feedback in the form of short user stories. This should require only a 30-45 minute commitment on the phone to share experiences and points of pain, and this effort is "product agnostic" so as long as you are involved with security, regardless of products used, we'd like to hear from you!

If you are interested, please email Kellie Mecham at kellie_mecham@symantec.com to arrange a date and time for the phone interview.

We look forward to hearing from you!

Best wishes,

Kellie

Denver UG Symantec Workflow Solution demo

PaulB | 03 Dec 2010 | 0 comments

We had an excellent presentation by Jason Short on the Symantec Workflow Solution with a demonstration of the template capabilities and what can be done. This was a very interactive meeting with a lot of questions asked and answers given.

The demonstration is available for download at the following link:

http://files.me.com/jason.short/ycf0c0

Another URL was also offered as a great informative resource: www.workflowswat.com

Chris Sandalcidi also did a brief presentation on PCI security issues and shared an industry report which is posted and available below.

All in all, it was a very successful User Group meeting and I am looking forward to our next one!

Security Solutions Contest - Be King For a Week!

Hear4U | 08 Sep 2010 | 0 comments

Here's your chance to be "King for a Week" with our new Security Solutions Contest!

What Is the Security Solutions Contest?
It's all about solving end user questions in the forums area. We created this contest to help increase the total number of solutions on the Security Community. We are going to select threads we'd like you to solve, and give you an opportunity to win a weekly prize. Yes, I said "weekly!" Keep reading to find out more about the prize!

How Do I Participate?
First, if you want to play, pull out your dust-ridden, coffee stained endpoint protection & related security product manuals, re-read all the latest and greatest knowledge base articles, and put your thinking-caps on!

Why? Because to be the "King for a Week" in this contest, you need to be able to solve popular forum threads that will be hand...

Microsoft Patch Tuesday – August 2010

Aniket Amdekar | 11 Aug 2010 | 0 comments

MS10-049 – Vulnerabilities in SChannel Could Allow Remote Code Execution (980436)

Analysis
This patch addresses 1 remote code execution vulnerability and 1 spoofing vulnerability within the SChannel security package in Windows. Attackers will attempt to lure victims to view an attacker-controlled site, which will execute remote arbitrary code on the victim’s machine.

Recommendations
Administrators are urged to patch all affected systems as soon as possible. There is currently no workaround for the remote code execution vulnerability described in this bulletin. Until patches are complete, a workaround for the spoofing vulnerability can be made. Require mutual authentication on IIS servers.

MS10-051 – Vulnerability in Microsoft XML Core Services Could Allow Remote Code Execution (2079403)...

Open Invitation - What Videos Would Be Most Helpful To You?

Hear4U | 05 Jun 2010 | 1 comment

We want to hear from you! What videos can we produce that will help you setup, configure, troubleshoot your SEP installation(s)? We plan on reviewing every submission, so please take some time to detail exactly what you'd like to see. Give votes to those you agree with, and we'll put our team to work and provide the videos within the next several weeks (read: before the end of June)!

Let the submissions begin!

Eric

How To Log On To Windows Server 2008

hecongyan | 06 May 2010 | 0 comments

You have just completed installing Windows Server 2008, and you click the CTRL + ALT + DELETE keys and then you were lost, what username should you log on with, what password should you use ? Especially that you did not create any during the installation process ! In this article, I will show you how to successfully log on to Windows Server 2008.

With Windows Server 2008 RC0 and the Beta builds of Windows Server 2008, you were automatically logged on after the successful completion of Windows Server 2008 installation, and then creating the administrator user account password was the first option inside the Initial Configuration Tasks. ...

How to Change your Password in Windows 7

hecongyan | 06 May 2010 | 0 comments

Part of any good computer security strategy is changing computer password on a regular basis. A strong password is the first line of defense against those who wish to get access to our computers and the important data they contain.
In this article We will learn how you can easily change your password in Windows 7.

Difficulty: Easy

Things You'll Need:

Windows 7

Instructions

Step 1
...

The Top 500 Worst Passwords of All Time

riva11 | 13 Apr 2010 | 1 comment

Do you think your password is unique in the world ? Please take some minutes to read the The Top 500 Worst Passwords of All Time .
Many interesting information are shown in this article, for example do you know that the all time most used password is 123456 ? and the second is (of course) password ?

Here an extract: :

Lists the top 500 worst passwords

NO	Top 1-100	Top 101–200	Top 201–300	Top 301–400	Top 401–500
1	123456	porsche	firebird	prince	rosebud
2	password...

Security Community Blog

Links

About Security Community Blog

Filter by:

Blog Tags

Technical Support

Symantec.com

Store

Community Stats