Help - Search - Members - Calendar
Full Version: Hey did Symantec change the engine in SAV 10.0?
ieXbeta Board > Tech > Software Corner
ATLien
I just installed the SAV 10.0 client and it looks like the engine has changed. It looks like its using the same engine as the personal/home edition. I mean the UI is the same but the running processes are the same as in the home/personal editions.

Can anyone confirm or deny this?

Can you give feed back on whether its better or worse?

Man, who the hell is running Symantec these days? They screwed ghost up, now this.
Chugworth
We run SAV10 on the servers and workstations where I work, and I haven't noticed much difference except it finding more spyware. Deleting it is another thing though. I don't know if they are trying to combine the scan engines, but in my opinion they both suck.

I CAN'T STAND IT when Symantec sees a virus but is unable to remove it. The bad thing is that happens more often than not. If an AntiVirus program finds a virus, it is supposed to remove it immediately. I don't care if the file is in use, its job is to make it not in use. Does anyone here recommend any better corporate solutions? I like Symantec's client management system, but I just hate its scan engine.

I don't run any AntiVirus software on my home computer. The main reason is that every one slows down the system no matter how fast it is. I know that AntiVirus software is a requirement for most people, but I just don't get viruses. I check about every year.
Phonics Monkey
I'm still running v9.0.3.1000 at work & here in the lab, I just haven't had time to do the upgrade.

v10 is good in that it has some spyware checking included, & a pain it the ass due to the default startup scan (but that's easy to kill).

I hadn't noticed any change it the running processes for v10, but I haven't looked either...guess I gota put that on the to-do list (hehe).
~*McoreD*~
QUOTE(Chugworth @ Jul 9 2005, 11:52)
I CAN'T STAND IT when Symantec sees a virus but is unable to remove it. The bad thing is that happens more often than not. If an AntiVirus program finds a virus, it is supposed to remove it immediately.


I have same problem. I get bloody pissed off when it cannot delete and quarantines instead.

Wonder if this will make a difference:

If you check both remediation option check boxes, then users are not notified when Symantec AntiVirus needs to terminate a process or application, such as a Web browser, or stop a service on the user's computer to complete the removal or repair of a risk. Symantec AntiVirus automatically takes the necessary action without first notifying users and then requiring them to initiate the action.
Automatically terminate processes
Check this if you do not want users to be notified when Symantec AntiVirus must terminate a process to remove or repair a risk.

Automatically stop services

Cheers,
McoreD
Chugworth
QUOTE(~*McoreD*~ @ Jul 9 2005, 02:06)
QUOTE(Chugworth @ Jul 9 2005, 11:52)
I CAN'T STAND IT when Symantec sees a virus but is unable to remove it. The bad thing is that happens more often than not. If an AntiVirus program finds a virus, it is supposed to remove it immediately.


I have same problem. I get bloody pissed off when it cannot delete and quarantines instead.

Wonder if this will make a difference:

If you check both remediation option check boxes, then users are not notified when Symantec AntiVirus needs to terminate a process or application, such as a Web browser, or stop a service on the user's computer to complete the removal or repair of a risk. Symantec AntiVirus automatically takes the necessary action without first notifying users and then requiring them to initiate the action.
Automatically terminate processes
Check this if you do not want users to be notified when Symantec AntiVirus must terminate a process to remove or repair a risk.

Automatically stop services

Cheers,
McoreD
*


I have tried that, and there are still many times when it won't remove the virus.
Nightwind Hawk
Something that i dont like about SAV is the "Pending Analysis."

what the heck?? It takes a long time to figure out what to do! (usually ignored.. bah)
~*McoreD*~
QUOTE(Chugworth @ Jul 11 2005, 01:46)
I have tried that, and there are still many times when it won't remove the virus.

YOU ARE right. This post is just to confirm that. I upgraded SAV to 10.0.1.1000. Let's hope a difference.
ATLien
Yea, I have upgraded to 10.0.1.1000 and there's no difference. I downloaded some really nasty adware from some bittorrent files and I had Ad-Watch runnning to prevent the adware from taking hold and Symantec did nothing but log the adware files as they were created.

The funny thing is, as I got an alert from Symantac saying that it found a file that was a threat, it also gave me the path and filename. Well if I cut and pasted that path\filename to a command prompt and I could delete the file from a command prompt.

If I can delete the file from a command prompt then why can't Symantec delete it?????


Whoever is running Symantec needs to be fired. They're running that company into the ground!!!
Nightwind Hawk
What do you all think is the best software for protection?
theman
QUOTE(Nightwind Hawk @ Jul 19 2005, 22:24)
What do you all think is the best software for protection?
*



id have to say AVG. that combined with adaware works wonders.
Rafael
QUOTE(Chugworth @ Jul 9 2005, 02:52)
If an AntiVirus program finds a virus, it is supposed to remove it immediately.  I don't care if the file is in use, its job is to make it not in use.


Uh, by who's rules? Definately not yours. If the programs cannot remove the file in question, it, at minimum, blocks user access to the file. Let me see you programatically remove an executable in use that re-executes itself upon termination.
Rafael
QUOTE(Nightwind Hawk @ Jul 11 2005, 04:31)
Something that i dont like about SAV is the "Pending Analysis."

what the heck?? It takes a long time to figure out what to do! (usually ignored.. bah)
*



Because you stupidly submitted the virus to SARC, which requires human intervention.
Rafael
QUOTE(ATLien @ Jul 19 2005, 16:05)
Yea, I have upgraded to 10.0.1.1000 and there's no difference. I downloaded some really nasty adware from some bittorrent files and I had Ad-Watch runnning to prevent the adware from taking hold and Symantec did nothing but log the adware files as they were created.

The funny thing is, as I got an alert from Symantac saying that it found a file that was a threat, it also gave me the path and filename. Well if I cut and pasted that path\filename to a command prompt and I could delete the file from a command prompt.

If I can delete the file from a command prompt then why can't Symantec delete it?????


Whoever is running Symantec needs to be fired. They're running that company into the ground!!!
*



You're an idiot. You couldn't have downloaded spyware from a torrent and have it automatically "take hold" of your machine. You sound like you don't know what you're doing so I'll just mark your posts from here on out as "IRRELEVANT BABBLING"
K2
QUOTE(Rafael @ Jul 20 2005, 13:46)
You're an idiot. You sound like you don't know what you're doing so I'll just mark your posts from here on out as "IRRELEVANT BABBLING"
Could you please keep it down a bit... All trying to learn and help here, you know shifty.gif

And in order to show you can learn something new:

QUOTE(Rafael @ Jul 20 2005, 13:41)
QUOTE(Chugworth @ Jul 9 2005, 02:52)
If an AntiVirus program finds a virus, it is supposed to remove it immediately.  I don't care if the file is in use, its job is to make it not in use.
Uh, by who's rules? Definately not yours. If the programs cannot remove the file in question, it, at minimum, blocks user access to the file. Let me see you programatically remove an executable in use that re-executes itself upon termination.


An executable doesn't magically reproduces onces it's terminated. When after termination another file shows up immediately (by the same name or any other), then that means that another "root" file (or process) is monitoring that first file. I you find and delete this root file, the file wil be gone (or deletable) just as well... Numerous freeware proggies can do this...so commercial anti-virus software should be able to as well.
Rafael
QUOTE(K2 @ Jul 20 2005, 12:45)
An executable doesn't magically reproduces onces it's terminated.


No shit, that's why I specifically noted "... that re-executes itself upon termination...". Some virii and malicious executable programs employ this technique. It was merely an example, I wasn't saying all executables do this. rolleyes.gif
ATLien
Rafael, you're the fucking idiot! Not to mention a know nothing blowhard. Not only have I downloaded torrents that contained 180search and SAH <?> but they also embedded themselves into a restore point that Symantec consistently recognizes in the System Volume Information folder.

Before you speak next time i suggest that you do some research so that you'll know about what your talking about first.

That is of course unless you just love to hear yourself talk. In which case I would say carry on! Dufus!

And another point, a anti-virus program could easily prevent a virus from re-spawning itself by simply quarantining the executable then killing the process and then deleting the quarantined file.

This is exactly what Ad-Aware does and its not even a full fledged anti-virus program.
Chugworth
QUOTE(Rafael @ Jul 20 2005, 07:41)
QUOTE(Chugworth @ Jul 9 2005, 02:52)
If an AntiVirus program finds a virus, it is supposed to remove it immediately.  I don't care if the file is in use, its job is to make it not in use.


Uh, by who's rules? Definately not yours. If the programs cannot remove the file in question, it, at minimum, blocks user access to the file. Let me see you programatically remove an executable in use that re-executes itself upon termination.
*


I didn't want to spend a lot of time on this, so I just slapped together something quick in VB6:

CODE
Private Sub Command1_Click()
   On Error Resume Next
   Dim BadFile As String
   BadFile = "c:\BadFile.exe"
   SetAttr BadFile, vbNormal 'Reset attributes before checking if file exists
   Do Until Dir(BadFile) = "" 'Try until the file does not exist
       Shell "c:\windows\system32\taskkill.exe /IM BadFile.exe" 'Quick and easy way to kill a process
       SetAttr BadFile, vbNormal 'Again just in case
       DoEvents
       Kill BadFile 'finally delete the file
   Loop
End Sub

It works though. wink.gif
Rafael
QUOTE(ATLien @ Jul 21 2005, 02:38)
Rafael, you're the fucking idiot! Not to mention a know nothing blowhard. Not only have I downloaded torrents that contained 180search and SAH <?> but they also embedded themselves into a restore point that Symantec consistently recognizes in the System Volume Information folder.
*



Know nothing eh? Heh. So you've downloaded torrented files containing embedded 180search and SAH and it just began infecting your computer automatically? Right. You're an idiot.
Rafael
QUOTE(Chugworth @ Jul 21 2005, 03:32)
I didn't want to spend a lot of time on this, so I just slapped together something quick in VB6:

CODE
snipped

It works though. wink.gif
*



I'll write you an example of what I'm talking about when I return home this weekend.
ATLien
QUOTE(Rafael @ Jul 21 2005, 13:17)
QUOTE(ATLien @ Jul 21 2005, 02:38)
Rafael, you're the fucking idiot! Not to mention a know nothing blowhard. Not only have I downloaded torrents that contained 180search and SAH <?> but they also embedded themselves into a restore point that Symantec consistently recognizes in the System Volume Information folder.
*



Know nothing eh? Heh. So you've downloaded torrented files containing embedded 180search and SAH and it just began infecting your computer automatically? Right. You're an idiot.
*




Like i said you should research what you're talking about before you run off at the mouth. It only exposes your own stupidity. But in order to do that you must first learn how to read. Never once did i mention the word automatically. That's a word you used, not me!

Dood, if you're having a bad day or you were having one when you made that post I suggest you go kick your dog or beat your wife or something because you're just making an ass out of yourself here!
Rafael
I'm not having a bad day nor ever was. I'm frustrated that you, amongst others, are claiming Symantec AntiVirus isn't doing it's job yet haven't the faintest idea how it, let alone their computer, works.

EDIT: I'm taking my leave of this thread to prevent losing my temper over your idiocy.
ATLien
Ya!!! Go ahead leave!!! Try and save what little face you have rather than being a man/adult about it and admit that you were wrong in ASSuming that I used the word 'automatically'.

Like I said you've only exposed your own stupidity. Now Git and run along with your tail between your legs.
Rafael
ATLien, apologies for any of the previous comments. I'm in the process of re-securing my Iexbeta account which seems to have been breached and used illicitly.
ATLien
truth is that I need to learn to exhibit more restraint. Others in this thread certainly did a better job of it than me.

I apologize also. to everyone.


Group Hug!!!!!!!

<deep inhale, long exhale> ahhhhhhhhh!!! biggrin.gif
This is a "lo-fi" version of our main content. To view the full version with more information, formatting and images, please click here.
Invision Power Board © 2001-2008 Invision Power Services, Inc.