Symantecs Norton und PIFTS.exe Einstellungen

[Gast_peks_*]

Computer support forums are lighting up with queries from users wondering what to do about an alert on whether to trust a file called "PIFTS.exe". Meanwhile, someone at Symantec's support forum seems to be deleting posts from users inquiring about this alert almost as soon as they go up on the forum.Swa Frantzen, an incident handler with the SANS Internet Storm Center, writes today that PIFTS.exe appears to be related to a Norton update since it has a has a component in it that leverages the user's Internet connection to contact a Web page at norton.com, which is owned and operated by Symantec.


Also, it appears that PIFTS.exe is being submitted quite a bit to VirusTotal.com, a free service that people can use to scan suspicious files against more than three dozen different anti-virus products. ThreatExpert also has a writeup that confirms that this file phones home to Symantec.

Quellen:
http://voices.washingtonpost.com/securityf...rss=securityfix
http://it.slashdot.org/article.pl?sid=09/0...29&from=rss

Mal gucken was das nun ist...

Nachtrag:
Anubis Analyse der Datei
ThreatExpert Analyse

Der Beitrag wurde von peks bearbeitet: 10.03.2009, 15:51

[Voyager]

Sprich also ganz harmlos , nichts mit gehackte Symantec Server oder Polizei Trojaner die Symantec per Gerichtsbeschluss verteilen musste.... oder anderen Quatsch den die Dummen im Netz verbreiten.