Norton & Symantec security issue

[sawstopuser]

For those that use these products you should check out this Homeland Security notice.


https://www.us-cert.gov/ncas/alerts/TA16-187A

(Modertors - was not sure where to post this. Please move as necessary )

 

[clam1952]

Also been reported on several other security sites, not very good for the supposed claimed leaders in IT security!

 

[epa]

I've been using Norton for years. Now I'm glad I switched to Vipre.

Matt

 

[cyberdongreen]

It's been reported several times over the last few years that a few disgruntled ex-employees have been releasing viruses into the community based on Norton's anti-virus engine itself. Norton denied it, of course, but what chance have you got if the burglars have got the key to your door? I've never trusted them and never will.

Dave

 

[raymac1946]

ESET makes a good security suite and I've been happy with it.
https://www.eset.com/us/products/smart-security/

 

[KenGreen]

I would imagine that Norton were made aware of the problems first and they have already fixed them. Well I can hope!

Ken

 

[clam1952]

Think the point is for a company who claims to be the foremost in Computer security, it should never have happened in the first place.

 

[KenGreen]

Think the point is for a company who claims to be the foremost in Computer security, it should never have happened in the first place.

Yes I agree with that but if these are the actions of malicious ex staff it is difficult to control.

Ken

 

[clam1952]

Yes I agree with that but if these are the actions of malicious ex staff it is difficult to control.

Ken

As it's their software that contains malicious and flawed code written by them it's entirely their fault, nothing to do with ex employees on this occasion.

 

[KenGreen]

I assumed that it was the ex employees who had written the flawed code, I am not trying to defend them but trying to understand how the leader in the anti virus field could be so be so negligent, this could lose them half of their sales.

Ken

 

[johnwhelan]

I assumed that it was the ex employees who had written the flawed code, I am not trying to defend them but trying to understand how the leader in the anti virus field could be so be so negligent, this could lose them half of their sales.

Ken

The difficulty is something called attack surface. If your computer is not connected to the Internet than Malware from web sites is difficult to pick up. No matter which 3rd party security software you run the software will have access to everything on the computer which makes it a prime target for Malware. That's why my preference is for Windows defender at least you're only dealing with one company and the software should know Windows with its updates backwards.

Cheerio John

 

[KenGreen]

It's only relatively recently that I learnt that there was such a program called Windows Defender. What I don't understand why it is not installed by default.

Ken

 

[PC_Ace]

KenGreen - Windows 10 will default to the native Windows Defender antivirus/anti-malware program IF it does not detect some other already installed AV solution.
Unfortunately, for many new PC and laptop owners, OEMs frequently pre-install a great deal of bloatware (AKA 'crapware') - including dodgy anti-virus programs - in order to make their hardware more marketable to PC-novices.
The solution is simple; Remove the unwanted AV solutions by uninstalling them and then enable Windows Defender from the All Settings tab of the Action Center.

 

[KenGreen]

KenGreen - Windows 10 will default to the native Windows Defender antivirus/anti-malware program IF it does not detect some other already installed AV solution.
Unfortunately, for many new PC and laptop owners, OEMs frequently pre-install a great deal of bloatware (AKA 'crapware') - including dodgy anti-virus programs - in order to make their hardware more marketable to PC-novices.
The solution is simple; Remove the unwanted AV solutions by uninstalling them and then enable Windows Defender from the All Settings tab of the Action Center.

Why can't they both be installed. Does this mean that if buying a new computer from a PC builder if Norton is not installed at first Windows Defender will install, but if Norton is then installed it will uninstall.
My last PC from PC Specialists with Windows 7 Ultimate came with Windows installed but then I installed Norton so at that point did Windows Defender uninstall.

Ken

 

[PC_Ace]

Having more than one AV solution installed and active or resident in memory gives rise to conflict and instability.
Best to stick to one, proven performer, rather than two or more compromised ones.
There are some excellent 3rd party payware AV solutions out there, so feel free to install any that, upon independent review, perform the best at dealing with all and sundry malware threats out there,
If you practice safe and savvy computing (i.e. avoid dodgy websites and never open questionable emails, etc.) then Windows Defender is likely all you'll actually ever need IF you keep your Windows OS continually updated.

 

[KenGreen]

Having more than one AV solution installed and active or resident in memory gives rise to conflict and instability.
Best to stick to one, proven performer, rather than two or more compromised ones.
There are some excellent 3rd party payware AV solutions out there, so feel free to install any that, upon independent review, perform the best at dealing with all and sundry malware threats out there,
If you practice safe and savvy computing (i.e. avoid dodgy websites and never open questionable emails, etc.) then Windows Defender is likely all you'll actually ever need IF you keep your Windows OS continually updated.

Thanks for that. I've used Norton 360 for nine years and like the fact that it clears out my temp files and defrags my harddrive in the background. It is constantly loading the live update scans and gives positive feed back on the scanning for viruses. It now uses Norton safe search and will not allow you to visit known dodgy sites. When you know the site is safe you can just override this by using Google. I was quite happy with Norton until this report came out.

Ken

 

[johnwhelan]

Having more than one AV solution installed and active or resident in memory gives rise to conflict and instability.
Best to stick to one, proven performer, rather than two or more compromised ones.
There are some excellent 3rd party payware AV solutions out there, so feel free to install any that, upon independent review, perform the best at dealing with all and sundry malware threats out there,
If you practice safe and savvy computing (i.e. avoid dodgy websites and never open questionable emails, etc.) then Windows Defender is likely all you'll actually ever need IF you keep your Windows OS continually updated.

and be very careful to type in the web address correctly, sites with commonly mispelled variations often are booby trapped.

Cheerio John;

 

[Kennilworth]

Hi Ken

I too have used Norton for many years without issue and will continue to do so. All my computers updated Norton yesterday which I assume would be the patch for this issue as it was a large update. My assumption is that a company such as Norton will fix these issues immediately they come to light where one of the smaller companies may take longer due to fewer staff. I'm not obsessed by security as I assume that the internet is a dangerous place whatever security I use and so act accordingly. There is an absolute minimum of personal information stored on my computers which is why I don't use social media. Most of my personal information is stored in notebooks which seem to be harder to hack.

This issue seems to have taken some time to come to light so who is to say that whichever companies security you use hasn't something similar that hasn't been found yet?

Regards

Brian

 

[KenGreen]

Brian
This is also my view. My PCs requested a close down yesterday to load the new scan profiles. As Norton are a leading company in Internet Security they can't afford to loose market share and will probably need to work even harder to restore customers' confidence. I too use iPads for general internet browsing, the only time I use a PC is to download items for Trainz but only from known sites.

Ken

 

[sawstopuser]

I did not post this thread as a shot at Norton or Symantec. I only meant to alert those that do use it so they could get the patch. I did not know if the products auto-updated as I now assume they do based on Brian and Ken's responses.