Rokop Security

Willkommen, Gast ( Anmelden | Registrierung )

> Symantecs Norton und PIFTS.exe
Gast_peks_*
Beitrag 10.03.2009, 15:34
Beitrag #1






Gäste






ZITAT
Computer support forums are lighting up with queries from users wondering what to do about an alert on whether to trust a file called "PIFTS.exe". Meanwhile, someone at Symantec's support forum seems to be deleting posts from users inquiring about this alert almost as soon as they go up on the forum.Swa Frantzen, an incident handler with the SANS Internet Storm Center, writes today that PIFTS.exe appears to be related to a Norton update since it has a has a component in it that leverages the user's Internet connection to contact a Web page at norton.com, which is owned and operated by Symantec.


Also, it appears that PIFTS.exe is being submitted quite a bit to VirusTotal.com, a free service that people can use to scan suspicious files against more than three dozen different anti-virus products. ThreatExpert also has a writeup that confirms that this file phones home to Symantec.
Quellen:
http://voices.washingtonpost.com/securityf...rss=securityfix
http://it.slashdot.org/article.pl?sid=09/0...29&from=rss

Mal gucken was das nun ist...

Nachtrag:
Anubis Analyse der Datei
ThreatExpert Analyse

Der Beitrag wurde von peks bearbeitet: 10.03.2009, 15:51
Go to the top of the page
 
+Quote Post

Beiträge in diesem Thema


Reply to this topicStart new topic
1 Besucher lesen dieses Thema (Gäste: 1 | Anonyme Besucher: 0)
0 Mitglieder:

 



Vereinfachte Darstellung Aktuelles Datum: 05.04.2026, 12:42
Impressum