Symantec has collected evidence of an attack in progress from a new bot that is exploiting multiple bugs that have been around for a few months. Including a bug in Symantec's very own antivirus scanning engine. There have been seven exploits for seven different vulnerabilities from Spybot.acyr that were found in Microsoft Windows and in Symantec's antivirus application. The vulnerability has been around since May 2006, and customers that have updated their applications since then will remain unaffected. Symantec is monitoring a spike in traffic recently with activity mainly lying in .edu domains. Symantec is asking that all customers update their products to the latest available security updates to prevent against any possible attacks.Symantec bug exploits
Symantec has collected evidence of an attack in progress from a new bot that is exploiting multiple bugs that have been around for a few months. Including a bug in Symantec's very own antivirus scanning engine. There have been seven exploits for seven different vulnerabilities from Spybot.acyr that were found in Microsoft Windows and in Symantec's antivirus application. The vulnerability has been around since May 2006, and customers that have updated their applications since then will remain unaffected. Symantec is monitoring a spike in traffic recently with activity mainly lying in .edu domains. Symantec is asking that all customers update their products to the latest available security updates to prevent against any possible attacks.Spybot Search & Destroy destroying Tablet PC functionality?
James Kendrick over at JKOnTheRun is reporting that the latest updates from the popular Spybot Search & Destroy anti-spyware application are falsely detecting and removing files that are crucial to the correct functioning of Tablet PCs. The fix appears to require rolling back to a recent system restore point, which to me makes puts this problem in the serious category. Of course, you're immune if you don't have a Tablet PC, but think of the possibilities had this problem caused bigger problems for more mainstream versions of Windows. I suppose these days there's no real solution that will prevent a buggy update from slipping through for one of the many security based tools we now need to run to keep a Windows installation running in good shape. Heck, Windows Updates are often the worst offenders in terms of introducing problems when they're trying to fix something.
What's a user to do, short of unplugging from the net and never updating?
Assassinate in-use programs with Killbox
Spybot Search & Destroy - for Pocket PC
Yes, you read that right. I know; I was pretty surprised too, when I came across the reference to it at Pocket PC Thoughts. Spybot Search & Destroy for Windows Mobile has been launched, and although I can't imagine the risk to Pocket PCs being a realistic threat, there's no point building an anti-malware application if no examples of malware exist, so we must assume that at least some amount - no matter how small - of Windows Mobile malware must exist out there. If that's the case, do you continue on as you have been and assume it won't affect you, or do you download the scanner and make sure you're protected? Tough call...














