Symantec Client Security - Security Update 252

Description

LiveUpdate Defs ID

Security Update 252 adds coverage for the following vulnerabilities and threats:

Name	Severity	BID
HTTP Unique Pack Toolkit Activity	High
HTTP Malicious File Download Request 2	High
TCP Shellcode Download Activity 1	High
HTTP FakeAV Redirect Request 3	High
HTTP Koobface Redirect Request	High
HTTP CrimePack Toolkit Java Class Download	High
HTTP W32.Unruy Activity	High
HTTP Peacomm File Download Request	High
IRC W32 Yimfoca Activity	High
HTTP Phoenix Toolkit Java Class Activity	High

Security Update 252 provides updated coverage for the following vulnerabilities and threats:

Name	Severity	BID
HTTP PHPBB URL Decode SQL Injection	High	10701, 11672
NetBIOS MS PnP QueryResConflist BO	High	14513
HTTP Firefox Favicon Link Tag Code Exec	High	13216
HTTP MSIE CreateTextRange Code Exec	High	17196
MSRPC SrvSvc NetApi Buffer Overflow (2)	High	19409
HTTP MS Unsafe ActiveX Obj Instantiation	High	17462, 20843
HTTP Leadtools Raster Dialog ActiveX BO	High	24153
HTTP DXMedia SDK Flashpix ActiveX BO	High	25279
HTTP HP Digital Imaging HPQVWOCX ActiveX Overwrite	High	24793
HTTP NCTAudio2 Studio ActiveX File Overwrite	High	24656
HTTP Adobe Acrobat Mailto PDF Cmd Exec	Medium	25748
HTTP Suspicious Executable Image Download	High
HTTP RealPlayer rmoc BO	High	28157
HTTP IDAutomation ActiveX File Overwrite	High	29204
HTTP Misleading Application Detection	High
HTTP Malicious Toolkit Download Activity	High	35759
HTTP Malicious Toolkit Variant Activity	High	35759
HTTP SoftArtiSans XFile FileMgr ActiveX BO	High	30826
HTTP Chilkat XML ActiveX Unsafe Method	High	31332
HTTP Geovision LiveX ActiveX File Overwrite	High	33782
HTTP Malicious Toolkit Variant Activity 7	High	35759
HTTP Misleading Application File Download	High
HTTP Zbot Malicious File Download	High
HTTP Neosploit Activity 2	High
HTTP Misleading Application Download Request	High
HTTP Fake Codec Request Generic	High
HTTP Fake AV Redirect Request 1	High
HTTP Eleonore Executable Download	High
HTTP Fake Antivirus Webpage Request	High
HTTP Fragus Toolkit Activity 2	High
HTTP Fake Antivirus WebPage Request 2	High
HTTP Fake Scan Webpage 5	High
HTTP Neosploit Toolkit Activity	High	35759
HTTP Fake Codec Download Webpage 2	High
HTTP Gumblar Request	High
HTTP Tidserv Download Request 2	High
HTTP FakeAV Webpage Request	High
HTTP MS TDCCTL Control ActiveX BO	High
HTTP Phoenix Toolkit Executable Download	High
HTTP Java Deployment Toolkit Input Invalidation	High

Security Update 252 removes coverage for the following vulnerabilities and threats:

Name	Severity	BID
BugBear B Worm SMTP Propagation	High
HTTP MS FrontPage Remote Debug BO	High	9007
R(X)BOT Videocapture Commands	High
R(X)BOT Advanced-Scan Commands	High
R(X)Bot DDOS Commands	High
SpyBot Keylogger Commands	High
Gaobot P2P Listener Hello	High
MXTarget Information Upload	High
HTTP BetterInternet Info Upload	High
HTTP BetterInternet Install Activity	High
180Solutions Requesting Keywords	Medium
180Solutions Requesting Ads	Medium
180Solutions Requesting Action URL	Medium
HTTP Euniverse FlowGoBar Config Request	High
Euniverse Flowgo Ping Request	High
HTTP Euniverse KeenValue Info Transfer	High
HTTP Euniverse Keenvalue PopUp Request	High
Euniverse Thunderdownload Installation	High
NetOptimizer Agent Upload	Medium
HTTP Cydoor Media Files Request	Medium
Delfin Definition File Request	High
HTTP Avres Activity	High
Ezula Upgrade and Version Check	Medium
AdDestroyer Activity	Medium
HTTP Apropos Installation Activity	High
HTTP Apropos Ad Activity	High
BargainBuddy Adv Activity	Medium
CometCursor Plus Download	Medium
CometCursor Logging Information	Medium
IEPlugin DLL Download Request	High
IEPlugin Activity	High
Instafinder Reporting Mistyped URL	Medium
Instafinder Requesting Configuration	Medium
HTTP Dealhelper Downloading Data	Medium
LOP Toolbar Update	High
PurityScan Notification Activity	Medium
PurityScan InfoTransfer Activity	Medium
Slagent Registry CLSID	High
HTTP SurfSideKick Installation Activity	High
VirtualBouncer Update Activity	Medium
VirtualBouncer Installation Activity	Medium
Envolo AutoUpdate Activity	Medium
HTTP ShopNav Uploading Reg Info	High
HTTP BookedSpace Activity	High
BookedSpace Downloading Files	High
IPInsight StubSentry Activity	Medium
IPInsight StubConscorr Activity	Medium
HTTP IEDriver Popup Activity	High
BargainBuddy Installation Activity	Medium
IEFeats Data Transfer	High
CWSIEFEATS Data Transfer	High
HTTP Quadro Data Transfer	High
HTTP CoolWebSearch Activity	High
SafeSearch Redirection Attempt	High
StatBlaster Update	Medium
BlazeFind SetupFile Request	High
Look2ME Updates	High
Favoriteman Activity	Medium
HTTP Begin2Search Activity	High
LinkMaker Activity	Medium
HTTP QuickSearch Activity	High
HTTP TargetSaver Update Activity	Medium
Adlogix SetupFile Request	High
HTTP IGetNet Activity	High
WildMedia WinFetch Activity	Medium
Dotcomtoolbar Installation Files Request	High
HTTP EasyWWW Install File Request	High
2020Search Installation File Request	High
Tafbar Install File Request	High
HTTP SearchPounder Info Request	High
HTTP ZSearch Installation File Request	High
HTTP MatrixSearch Installation Request	High
HTTP MatrixSearch Activity	High
Adroar Install Request	High
007SPY Install Request	High
Adbars Install Request	Medium
HTTP Adultlinks Install Request	High
HTTP Zeropopup Install Request	Medium
HTTP TAFbar Install Request	High
HTTP FreeScratchWin Activity	High
HTTP MessStopper Activity	High
HTTP Shorty Activity	High
HTTP BBSee Activity	High
HTTP IEHlpr SmartAllyes Update Activity	High
HTTP IEHlpr CCNNLC Update Activity	High
HTTP IEHlpr Register Activity	High
HTTP IEHlpr Info Download Activity	High
HTTP MoneyGainer Download Activity	High
HTTP SmartDove Download Request	High
HTTP Director Download Activity	High
HTTP SystemProcess Activity	High
HTTP Ezula Activity	Medium
HTTP FastSeek Download Activity	High
HTTP DollarRevenue Download Activity	High
HTTP SmartSearch Activity	High
HTTP CasinoClient Install Request	High
HTTP DialPlatform Activity	High
HTTP WinBo Activity	High
HTTP Eziin Activity	High
HTTP FastFind Activity	High
HTTP RCPrograms Activity	High
HTTP Surfsidkick Info Upload	High
HTTP Surfsidkick Popup Activity	High
HTTP PowerSearch Download Activity	High
HTTP BINET Download Request	High
HTTP Getup Activity	High
HTTP Instdollars Activity	High
HTTP NowFind Activity	High
HTTP WhileUSurf Activity	High
HTTP StartPage Ifrbiz Activity	High
HTTP Qoolaid Activity	High
HTTP Webbar Register Update Activity	High
HTTP Iebar Activity	High
HTTP 2Search Activity	High
HTTP Superbar Activity	High
HTTP AdultLinks Activity	High
HTTP Adlogix Activity	High
HTTP ABXToolbar Activity	High
HTTP CWSAlfaSearch Update Activity	High
HTTP EnhanceMSearch Activity	High
HTTP Topantispyware Activity	High
HTTP TrustInPopups Activity	High
HTTP Webext Install Activity	High
HTTP FindemNow Activity	High
HTTP EZSearch Activity	High
HTTP ClickAlchemy Activity	High
HTTP GreenIo Activity	High
HTTP Daosearch Activity	High
HTTP QuickBrowser Activity	High
W32 Looked CreateFile Request	High
HTTP ClearX Activity	High
HTTP QuickBrowser Install	High
HTTP Adgoblin Activity	High
HTTP CoolWebSearch Activity 2	High
HTTP EasySearch Activity	High
HTTP Adblaster Activity	High
HTTP DownloadPlus Activity	High
HTTP FlashEnhancer Activity	High
HTTP ICcontrol Activity	High
HTTP Lantend Activity	High
HTTP Look2me Activity	High
HTTP LoveFreeGames Activity	High
HTTP Margoc Activity	High
HTTP Roimoi Activity	High
HTTP TopAV Activity	High
HTTP OverPro Activity	High
HTTP Ulubione Activity	High
HTTP Vanish Activity	High
HTTP SearchNew Activity	High
HTTP SearchSeekFind Activity	High
HTTP Kuaiso Activity	High
HTTP Winshow Activity	High
HTTP Twaintec Activity	High
HTTP Yuupsearch Activity	High
HTTP SearchBarCash Activity	High
HTTP MediaInject Activity	High
HTTP Ziocom Activity	High
HTTP ZQuest Activity	High
HTTP PortalScan Activity	High
HTTP Winpup Activity	High
HTTP Peacomm Download Activity	High
HTTP MSIE Generic Browser Exploit	High
HTTP Wnad Activity	High
HTTP Searchsquire Activity	Medium
HTTP Trojan Lodeight.C Activity	High
HTTP W32.Mixor Worm Activity	High
HTTP Zlob Activity	Medium
Universal Plug and Play Service Overflow	High
HTTP W32 Medbot Activity	High
HTTP Imaut File Download Activity	High
HTTP Mancsyn File Download Activity	Medium
HTTP W32 Dasher Activity	High
HTTP Cashfiesta Activity	Medium
HTTP W32 Mumawow Activity	High
HTTP Tickerbar Activity	Medium
HTTP W32.Stration Activity	High
HTTP W32.Reyds Activity	High
HTTP W32 Fubalca Activity	High
HTTP DesktopMedia Activity	High
HTTP Blowsearch Activity	Medium
HTTP CramToolbar Activity	Medium
HTTP Egyrank Activity	Medium
HTTP Conspy Activity	Medium
HTTP W32 Relfeer Activity	High
HTTP W32.Hitapop Activity	Medium
HTTP W32.Drom Activity	High
HTTP Surfcomp Activity	High
HTTP TrafficJam Activity	High
HTTP SpyCrush Activity	Medium
HTTP AntiSpyZone Activity	Medium
HTTP AntiVermins Activity	Medium
HTTP SpyLocked Activity	Medium
HTTP ExpertAntivirus Activity	Medium
HTTP SpywareQuake Activity	Medium
HTTP SuperKeylogger Actvity	High
HTTP PCParent Activity	High
HTTP Nafaoz Activity	High
HTTP Archivio Activity	High
HTTP Mediasups Activity	High
HTTP Searchtool Activity	High
HTTP Searchnet Activity	High
HTTP NewAds Activity	High
HTTP SoftStop Activity	Medium
HTTP Fujacks Activity	High
HTTP Infostealer Monstres Activity	High
HTTP Rediff Toolbar ActiveX DoS	High	21924
HTTP SpyBlocs Activity	Medium
HTTP PCHealthPlan Activity	Medium
HTTP ErrorSafe Activity	Medium
Hacktool Dahij	High
HTTP SpyFalcon Activity	Medium
HTTP SpyFighter Activity	Medium
HTTP UnSpyPC Activity	Medium
HTTP Malware Alarm Install	High
HTTP ScanAndRepair Activity	Medium
HTTP Spybouncer Activity	High
HTTP Tginfo Activity	High
HTTP AdwareSpy Activity	Medium
HTTP AgentSpyware Activity	Medium
HTTP AntiVirusGold Activity	Medium
HTTP EasySpywareKiller Activity	High
HTTP MagicAntiSpy Activity	High
HTTP AdwareSheriff Activity	Medium
HTTP UCCPlay Misleading Apps Installation	High
HTTP KMGuide Activity	High
HTTP AVSystemCare Activity	Medium
HTTP SystemDoctor Activity	Medium
HTTP DoctorAdwarePro Activity	Medium
HTTP TrojanGuarder Activity	Medium
HTTP Truesword Activity	Medium
HTTP EliteProtector Activity	Medium
HTTP Cleanator Activity	Medium
HTTP Remacc MultiWebSurv Activity	High
HTTP Malwarecrush Activity	Medium
HTTP AntiSpyBoss Activity	Medium
HTTP SwiftCleaner Activity	Medium
HTTP Malwarepro Activity	Medium
HTTP AdwareRemover Activity	Medium
HTTP Virusblast Activity	Medium
HTTP VirusRescue Activity	Medium
HTTP Winreanimator Activity	Medium
HTTP MyCleanerPC Activity	Medium
HTTP VirusProtectPro Activity	Medium
HTTP SpyShield Activity	Medium
HTTP MyBugFreePc Activity	Medium
HTTP PrivacyGuarantor Activity	Medium
HTTP PrivacyKit Activity	Medium
HTTP SpywareSweeper Activity	Medium
HTTP PCCleaner Activity	Medium
HTTP ETDScanner Activity	Medium
HTTP RegistryCare Activity	Medium
HTTP SaferScan Activity	Medium
HTTP SpyDestroy Activity	Medium
HTTP TheSpywareDetective Activity	Medium
HTTP Adobe SWF Malicious Download Attempt	High	28695
HTTP Gammima Activity	High
HTTP Trojan Bayrob Activity	Medium
HTTP Trojan Webkit Activity	High
HTTP Trojan Pandex Activity	High
HTTP Fake AV Installers Activity	Medium
HTTP TrackZapper Activity	Medium
HTTP SpyKill Activity	Medium
HTTP BPSpyware Activity	Medium
HTTP FaceBook Phish Attempt	High
HTTP AntivirusXP2008 Activity	Medium
HTTP UltimateDefender Activity	Medium
HTTP SpywareScrapper Activity	Medium
HTTP CrisysTecSentry Activity	Medium
HTTP MalwareDestructor Activity	Medium
HTTP WinXDefender Activity	Medium
HTTP Trojan Malware Download Activity	High
HTTP Suspicious Domain Request	High
HTTP Acrobat PDF Suspicious File Download 2	High	27641, 30035, 34169, 34736
HTTP Trojan Bankpatch.C Activity	High
HTTP Suspicious Executable File Download 2	High
HTTP Trojan Vundo File Download	High
HTTP Downloader Sninfs Activity	High
HTTP Downloader Sninfs Activity 2	High
HTTP SDBot Activity	High
HTTP Goldencashworld Downloader Activity	High
HTTP Fake AV Install Request 3	High
HTTP Cashboom Trojan Activity	High
HTTP Earning4u Downloader Activity	High
HTTP Infostealer Bancos BB Activity	High
HTTP Misleading Application File Download 2	High
HTTP Gumblar Activity	High
HTTP Neosploit Toolkit Activity U3D Activity	High	35759