New 'botworm' exploits Symantec flaw

TalkBack 43 of 46:

Next »

« Previous

• Thread View
• Flat View

I wish I weren't saying that...

Yes, sadly, I AM saying that about companies, at least about 1 or 2 companies. I'm not even sure if the corporate (or "Symantec" branded versions) even allow automatic updates. I know that my company wouldn't allow it, and they actually have reasons why they don't allow it. We don't have to schedule changes to run Live Updates on our own laptops but we DO have to schedule changes for ANY server which is used by multiple users. Sadly, the paperwork would be the cause of these servers not being updated.

Having said that, I know that our midrange IT staff submits change records every week to apply different patches to different servers. I'd like to think that all of the servers in my company are patched for this flaw. But, at the same time, I have several friends who still work at a previous employer and it doesn't sound like their staff has done much of anything with their servers for various reasons.

By the way, I do NOT support any midrange systems so I'm just speculating that these Symantec products run on their servers. I also am only familiar with 2 company's IT staffs so I suppose I shouldn't speculate that ALL corporations act like these 2. But I CAN say that a frightening number of my coworkers didn't realize that they needed to click on their Live Update buttons to get their versions of Symantec AntiVirus Corporate Edition to apply patches and new AV definitions. As I said earlier, we don't need a change record for that but we DO need some direction. Maybe someone thinks that all of our laptop users should automatically know that they need to click on the Live Update button, but many of them definitely do NOT know that.

If this bot gets into our network through someone's laptop which hasn't been patched, then the employee should certainly at least have a "reorientation" on how to protect their PCs but I think that the person who made the choice to use SAVCE in this way (without adequate instructions for the users) is the one who should be shot. But he probably won't be...

Glen Guenther

Posted by: Glen Guenther   Posted on: 12/18/06 You are currently: a Guest | Members login | Terms of Use

Alert moderator to an offensive message

Subscribe to this discussion via Email or RSS

SponsoredWhite Papers, Webcasts, and Downloads

• Building the Virtualized Enterprise with VMware Iinfrastructure VMware VMware virtualization software has been adopted by over 120,000 enterprise ... Download Now
• Building the Virtualized Enterprise with VMware Infrastructure VMware VMware virtualization software has been adopted by over 120,000 enterprise ... Download Now
• Using NIC Teaming to Achieve High Availability on Linux Platforms Dell Network interface card (NIC) teaming is one method for providing high ... Download Now