Nav 2003 S*** Itself

[LTJBukem]

Have you disabled task scheduler?

[shogunxxx]

June 25, 2003
Symantec Security Check ActiveX Buffer Overflow
Risk
Moderate
Overview
A vulnerability was discovered in a component of Symantec Security Check's online interface. The vulnerability is a buffer overflow in an ActiveX component. An exploit of this vulnerability can lead to unauthorized system access.
Components Affected
Symantec Security Check rufsi.dll dated prior to June 23, 2003.
Description
Symantec was made aware of Symantec Security Check's ActiveX buffer overflow vulnerability on Monday June 23, 2003 through a public posting on the Internet. Since hearing of the exploit Symantec has worked diligently to replace the ActiveX Control on Symantec Security Check. Through Symantec's customer support, we are working with users who may have downloaded the exploited ActiveX Control to remove it from their systems. Although Symantec Security Check is available to both PC and Mac users, this issue only affects PCs.

Symantec Security Check is a free web-based tool that enables users to test their computer's exposure to a wide range of on-line threats. As part of running the check, users may install an ActiveX Control, which remains on the user's system even after the check has completed.

The current ActiveX Control - which can be named Symantec RuFSI Utility Class or Symantec RuFSI Registry Information Class - contains a buffer overflow exploit. The buffer overflow can be exploited when the user with this ActiveX Control visits a malicious website intent on exploiting this vulnerability. The exploit can cause Internet Explorer to crash and/or the execution of arbitrary code on the user's computer.
Symantec Response
Symantec has replaced the current ActiveX Control on the Symantec Security Check website so that new visitors will not be affected by the exploit.

Recent visitors to Symantec Security Check should revisit the site and run a new Security Scan. By running a new scan, the previous ActiveX Control will be replaced by an updated ActiveX Control that fixes the buffer overflow condition.

Advanced users can attempt to delete the ActiveX Control by rebooting and then going into the system folder: %SystemRoot%\Downloaded Program Files\ and delete "rufsi.dll". This must be done by using the command prompt and the user must not be on the Symantec Security Check site at the time.

A removal tool has been developed [URL=http://securityresponse.symantec.com/avcenter/CleanSSC.exe]

i had the same problem so i reinstalled nav2002 and it work's fine.
i have since been told that if you use the clean up tool it could solve the problem in the 2003.
i don't know if it work's but it can't hurt to try it

[chalkmongoose]

I don't use antivirus, so I have nary a clue. I have NAV 2004 Beta installed, but just as eye-candy, it doesn't serve any purpose. The corporate build (currently build 8) works VERY nicely. I would recommend getting that.

[LTJBukem]

Originally posted by chalkmongoose@ 24 July 2003 - 01:20

I don't use antivirus

Grrrrr...... Why the hell not?????????

[Adster]

thanks guys for the views and help you have posted very mixed posts which still keep me thinking wtf?? could it be that the downlaoded version off kazaa of NAV 2003 Pro has been worked out?? or is my computer just decided to go BOOM!

To answer that other persons questions No I Havn't installed any new hardware

[basics]

i got nav 2003 prof edition from kazaa it works fine, auto update is regular as clockwork and subscribed till next may!

[skelley521]

First uninstall your copy of nortons antivirus then try Nortons Removal tool HERE. Then re-install your copy of nortons again. I would also suggest running an on-line virus scanner or installing AVG to check for a possible infections before the re-install.
What OS are you running? I would also recommend restarting both before and after the uninstall/removal tool and the new install. Also, running your favorite REG Cleaner before the new install wouldnt hurt.
As for the corporate version, I would recommend v8.1. The corporate version doesnt scan email in outlook express; only in outlook; but will detect any viruses during the real time scan.

Hope this helps,
Steve

[Adster]

I tryed that nortons removal didnt work same thing i tryed unistalling reinstalling on different partition used reg cleaner same thing.

Im using Xp prop too

[summond_skull]

hogster is ur internet going slow?
if it iz then u definatly have a virus.
does it let u update?
is autoprotect diabled?
if these things r occuring then u have a virus 100%

the cure is simply pur all ur data to cd(s) then re-install windows then install norton only and internet then update notron then install everything else and u will find out that the virus should be fixed

[johnboy27]

Originally posted by Hogster@24 July 2003 - 03:39
I tryed that nortons removal didnt work same thing i tryed unistalling reinstalling on different partition used reg cleaner same thing.

Im using Xp prop too

Are you trying to install from the exact same DL'd copy that you first installed from? If you aren't then that is likely why you can't get it to work.It has happened to me inn the past so I got smart and burned off the right one when I found it.
Run the removal tool(Rnav2003.exe) and then try a reinstall.If it doesn't work properly then try downloading another copy and trying again. I believe the reason that this happens is because you actually register with norton when you install and if you try to reinstall with a different copy it doesn't match on their end. I highly doubt that Norton has even tried to "fix" the 2003 model or any other for that matter,why bother when you have a new release coming out with copyright protection? I have the kazaa version and haven't had any problems.