Forum Home
Press F1
 
Thread ID: 25335 2002-10-01 10:42:00 Has Norton posted a W98 Bugbear update today? Billy T (70) Press F1
Post ID Timestamp Content User
85057 2002-10-01 10:42:00 Hi Team

Following on yet again from the "Strange emails" threads below, has anybody been notified of new Norton AV definitions via live update for Win98 today?

I have tried live update but it says that my computer is fully up to date. However, I notice some unusual behaviour in the progress bar whereby it flashes "opening live update" and "processing updates" (or similar becase they flash by pretty quickly) several times before putting up the usual all up to date notice.

There is no evidence of a Bugbear infection but I wanted to run a scan anyway and its pointless if I can't get the new definitions.

How can I tell if my AV has been disabled? It still finds my eicar test virus if I manually scan the virus folder so I assume that it is working OK.

Cheers

Billy 8-{) ?:| ?:| ?:|
Billy T (70)
85058 2002-10-01 10:54:00 Nortons site advises they were released yesterday...perhaps you have been nobbled?

There is a lot of it about. Be careful out there........
godfather (25)
85059 2002-10-01 11:00:00 Billy, what is a "eicar test virus"? Is this a pseudovirus that you delibrately plant to test Nortons? If so, is it recommended practice to have a pseudovirus present? Last question, where would I get one from?

Thanks - Jen
Jen C (20)
85060 2002-10-01 11:04:00 Billy T, my NAV automatically updated this morning when I logged on. I didn't have to go to Liveupdate - it downloaded the update automatically. Perhaps it did this for you also?

Mike.
Mike (15)
85061 2002-10-01 11:04:00 Thanks God

I haven't opened any attachments or downloaded anything else today, and the only incoming problem child was knobbled by ZoneAlarn so how I could be infected I'm not quite sure. I don't run preview either by the way.

I've just run a scan on my E drive and Nortons seems to be running OK.

I certainly can't pick up any new definitions on live update though but apart from the strange appearance of the progress bar the process seems normal.

I'm going to rename the defs folder and try again, that should force a new update.

Perhaps I'm just paranoid.

Cheers

Billy 8-{)
Billy T (70)
85062 2002-10-01 11:08:00 Jen, here it is:

Any anti-virus product that supports the eicar virus test file should detect it in any file providing that the file starts with the following 68 characters, and is exactly 68 bytes long:

X5O!P%@AP[4\PZX54(P^)7CC)7}$EICAR-STANDARD-ANTIVIRUS-TEST-FILE!$H+H*

To keep things simple, the file uses only upper case letters, digits and punctuation marks, and does not include spaces. The only thing to watch out for when typing in the test file is that the third character is the capital letter "O", not the digit zero.

Its likely available in download form as well.

Look at www.eicar.com
godfather (25)
85063 2002-10-01 11:14:00 Thanks godfather. I actually whizzed off and found that site after I posted. I just downloaded the zip file and ran NAV on that and it works. I have never had a virus, so have never received any alerts from NAV before which concerned me, as I wondered if it actually worked!

Cheers
Jen
Jen C (20)
85064 2002-10-01 11:22:00 Hi Jen

You can get it by doing a search on eicar.

It is a pseudo-virus test string and there are several variants including one for checking your AV's attitude to zipped files.

I wouldn't be without it and every scheduled scan ends with a message that my computer is infected with the eicar virus. The trick is to not allow the AV program to auto-clean otherwise you have to reinstall it every time. I just click cancel & ignore the warning that the computer is still infected. It's a peace of mind thing jen, and my mind is already in so many pieces I need all the help I can get.

Cheers

Billy 8-{)
Billy T (70)
85065 2002-10-01 11:32:00 Thanks as well Billy, I went back and tried a second zip file which I delibrately unzipped without manually scanning (as per normal practice). NAV killed that in spectacular fashion (along with the PC for a minute!!) when I choose delete.

I really shouldn't complain about never receiving a virus :-) <goes off to find a big piece of wood to touch>

Jen
Jen C (20)
85066 2002-10-01 11:38:00 OK God, it's confirmed, I am paranoid :(

After renaming my AV defs and running live update I downloaded exactly the same defs file (xxxxxx.009) so this time I read the What's New file beyond the first page and found that the Bugbear update was already installed. It was in the update I installed yesterday!

Oh well, I guess I'll have to trust autoprotect to have shielded me from the latest nasty, but just in case I'll set a C: scan running before I go off to noddy land.

Paranoia is very hard to shake off you know God, there are so many people out there trying to get you that I can't trust myself to trust them, or at least , every time I try I end up in an argument, it's the voices you see, they won't go away, perhaps if I gave up eating rhubarb sandwiches so late at night, but why should I? it's a free world, maybe I need a drink, or even some meds, Susan where are you, I'm rambling here in the depths of self inflicted paranoia and I can't hear any clickety-click of heels or the clatter of stainless steel trays, off-topic? what's off topic, who is off topic, ME? never, gedoudahere, you must be paranoid..............uurrrrrgh

#he56s

Bi3l#y <|-(,,,,,,
Billy T (70)
1 2