Re: Symantec AV signature corruption

From: Russ (Russ.Cooper@RC.ON.CA)
Date: 02/14/03

  • Next message: Ben Reardon: "Re: Symantec AV signature corruption"
    Date:         Thu, 13 Feb 2003 19:24:46 -0500
    From: Russ <Russ.Cooper@RC.ON.CA>

    Can you post this in reply to a message that was sent out earlier this
    morning on NTBugtraq, titled 'Symantec AV Signature Corruption'.


    Thanks for posting the message. We reviewed the case and here is what
    we have found.

    On Tuesday, February 11, 2003, Symantec posted updated antivirus
    definitions via multiple channels. Shortly after posting these
    definitions, we recognized that due to a replication issue, some
    customers who had used a specific Intelligent Updater (IU) were not
    receiving the new, updated definitions. This potentially impacted
    customers who updated their definitions from the web site using a
    specific version of the IU file (20030211-004-i32.exe) for deployment
    on Win32 desktop systems. You should have seen an error message on
    opening the downloaded definition file. The vast majority of our
    customers, who download new definition files do so via LiveUpdate or the
    Symantec FTP server and so were not affected. Previous virus
    definitions were left in tact and should have continued to protect your
    systems, the only exception to this might have been on some versions of
    the product if you tried to manually restart t! he service in the
    meantime, as that would have required another restart to pick up the new

    From Symantec

    Russ - NTBtugtraq Editor

    Delivery co-sponsored by TruSecure Corporation
    TICSA - Anniversary Special - Limited Time

    Become TICSA certified for just $221.25 US when you register before 3/31/03
    with PROMO "TS0103" at NO membership fees, certification
    good for 2 years. Price for international delivery just $296.25 US, with
    this offer. Offer cannot be combined with any other special and expires
    3/31/03. Visit for full details.