symantecbytes
July 15th, 2005, 11:56 PM
[copy of message sent to Symantec Antivirus Corporate Edition Technical Support]
The appended file has been Mime64 encoded to work around the fact that Symantec provides no sane way to submit a problem file for investigation. The encoded file is an encrypted ZIP file. The password is "zhtml" (without the quotes). Inside you will find a file called 'catalog_autumn.zhtml' which exposes a serious bug in Symantec AntiVirus 9.0.0.1400 Corporate Edition. A full system scan of a computer with that file always causes SAV to hang when it gets to that particular file. Specifically selecting that file for scanning has a similar result.
As I have grown quite weary of Symantec delivering new signatures and program updates many months (and sometimes never) after viruses or bugs are discovered by customers, I will duplicate this message to a public forum as well. The list of reasons for switching to a competing vendor's antivirus solution has grown unbelievably long.
_____
Content-Type: text/plain; charset=US-ASCII; name=z.zip
Content-transfer-encoding: base64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_____
The appended file has been Mime64 encoded to work around the fact that Symantec provides no sane way to submit a problem file for investigation. The encoded file is an encrypted ZIP file. The password is "zhtml" (without the quotes). Inside you will find a file called 'catalog_autumn.zhtml' which exposes a serious bug in Symantec AntiVirus 9.0.0.1400 Corporate Edition. A full system scan of a computer with that file always causes SAV to hang when it gets to that particular file. Specifically selecting that file for scanning has a similar result.
As I have grown quite weary of Symantec delivering new signatures and program updates many months (and sometimes never) after viruses or bugs are discovered by customers, I will duplicate this message to a public forum as well. The list of reasons for switching to a competing vendor's antivirus solution has grown unbelievably long.
_____
Content-Type: text/plain; charset=US-ASCII; name=z.zip
Content-transfer-encoding: base64
UEsDBAoACwAAAFV4Ry5qoA7IjgEAAIIBAAAUAHoAY2F0YWxvZ19hdXR1bW4u
emh0bWxTRGUAsAAAAAAIADcGW19jZGBpEWFgYDBggAAfIGZkBTNZRYGEsziX
kYLFbpWm7mUar5lxyzEyMTAwMaQwsIBkBSQYwhgFGUBiILUKQEKRCSL+n1Ee
RVwBLC4CEWeEiAtBzehkEMIwAwBVVA0ABxI7RD5DgthC2njYQvj2m1VrdNrb
EqhEOVwNKJwfIil5QC5PX5ud2+OCiG+RtlFtTGRhQGxYRZn+rL5qGZWvIhEV
QG2S1EwKeoq0oh0/ExlgVZ+ZX7mXgaZhVyM74WDnkQCZv+ivouGiqWBLoT4B
KX7UT+U29g234ui6TOrbnljS56QiOYFvDQw4rM3WjOr4KB+2spQG2T56ktYq
YVijfxAIPBHe7JnFlTQaWeRQlckXXVUvoJWTMe3vG4f2i0Z2xgYsLQDO5ebt
+Dp8Kgpc17s11WHfUJYLFMBh8S3jIH2BLznQAL0EvQGnFkVqAl+BYGIu1Tew
sbduOD9gdcQsZdguqCjlpASULTRSobo01v5hdBj1EVvrsoknjoMM2VQoQkNb
2P8bxPyJPYcYvQ6/kXdFQ1z2Y0me83bTSFcKyVPlWRUH3s9ZmDIFO1H2RAzx
umYY63hyoi09Glpim+LQwHLmY/TR6ErG36Ors+fGkPEnUmTAH8z7ZlqTTAdA
DESYtt2oK6zGSbx3RO6OUAN5yEot7xsiVjTuF5SFUEsHCGqgDsiOAQAAggEA
AFBLAQIXCwoACwAAAFV4Ry5qoA7IjgEAAIIBAAAUABEAAAAAAAAAIAC2gQAA
AABjYXRhbG9nX2F1dHVtbi56aHRtbFNEBACwAAAAVVQFAAcSO0Q+UEsFBgAA
AAABAAEAUwAAAEoCAAAAAA==
_____