Forum Discussion

SKnauer's avatar
SKnauer
Level 2
13 years ago

Koobface virus

I am currently using Symantec Anti-virus Full Version 10.1.8.8000.  I have just been asked if we are protected against koobface.  From what I have read it has reared it's ugly head again.  I am new to Symantec, my previous employer used Trend and most recently Vipre and I knew where to go to determine if I had the virus definition that included protection against this latest risk.  Can anyone assist me?

  • With all the unknown variants out there, you need to follow the "PREVENTION AND AVOIDANCE" found on the technical details page.

    http://www.symantec.com/security_response/writeup.jsp?docid=2008-080315-0217-99&tabid=2

    I suggest upgrading off the old AV engine ASAP.

3 Replies

  • Let me start out by saying that you are using an old AV product. SAV only provides Antivirus, and these days you need a lot more than just AV.

    You need to upgrade to our Endpoint Protection product for more security. SEP provides Firewall, IPS, Application & Device control and more.

    Symantec Endpoint Protection Technologies Explained - http://www.symantec.com/business/support/index?page=content&id=TECH166816

    The New SEP - http://www-uat.ges.symantec.com/business/theme.jsp?themeid=sep-family

    The Koobface worm spreads through social networking sites, so user education is key to helping minumize the risk off infection. Blocking these sites in a workplace environment is your safest bet, but most companies these days need access to Social sites.

    Follow the Security Best Practices for Protecting a Business Environment from Common Threats - http://www.symantec.com/business/support/index?page=content&id=TECH105236

    W32.Koobface write-up - http://www.symantec.com/security_response/writeup.jsp?docid=2008-080315-0217-99

     

    I hope this info is helpful.

  • So with this version..... am I protected from the worm  W32.Koobface?

  • With all the unknown variants out there, you need to follow the "PREVENTION AND AVOIDANCE" found on the technical details page.

    http://www.symantec.com/security_response/writeup.jsp?docid=2008-080315-0217-99&tabid=2

    I suggest upgrading off the old AV engine ASAP.