11-04-2011 10:08 AM
I am currently using Symantec Anti-virus Full Version 10.1.8.8000. I have just been asked if we are protected against koobface. From what I have read it has reared it's ugly head again. I am new to Symantec, my previous employer used Trend and most recently Vipre and I knew where to go to determine if I had the virus definition that included protection against this latest risk. Can anyone assist me?
Solved! Go to Solution.
11-04-2011 10:52 AM
With all the unknown variants out there, you need to follow the "PREVENTION AND AVOIDANCE" found on the technical details page.
http://www.symantec.com/security_response/writeup.jsp?docid=2008-080315-0217-99&tabid=2
I suggest upgrading off the old AV engine ASAP.
11-04-2011 10:25 AM
Let me start out by saying that you are using an old AV product. SAV only provides Antivirus, and these days you need a lot more than just AV.
You need to upgrade to our Endpoint Protection product for more security. SEP provides Firewall, IPS, Application & Device control and more.
Symantec Endpoint Protection Technologies Explained - http://www.symantec.com/business/support/index?page=content&id=TECH166816
The New SEP - http://www-uat.ges.symantec.com/business/theme.jsp?themeid=sep-family
The Koobface worm spreads through social networking sites, so user education is key to helping minumize the risk off infection. Blocking these sites in a workplace environment is your safest bet, but most companies these days need access to Social sites.
Follow the Security Best Practices for Protecting a Business Environment from Common Threats - http://www.symantec.com/business/support/index?page=content&id=TECH105236
W32.Koobface write-up - http://www.symantec.com/security_response/writeup.jsp?docid=2008-080315-0217-99
I hope this info is helpful.
11-04-2011 10:35 AM
So with this version..... am I protected from the worm W32.Koobface?
11-04-2011 10:52 AM
With all the unknown variants out there, you need to follow the "PREVENTION AND AVOIDANCE" found on the technical details page.
http://www.symantec.com/security_response/writeup.jsp?docid=2008-080315-0217-99&tabid=2
I suggest upgrading off the old AV engine ASAP.