I saw a virus once that put bogus entries for Symantec's servers in a
workstation's hosts file, so that the workstations would never look up the
real Ip address, they'd just try to get the def's from the bogus servers,
which wouldn't work.  Subsequently, the virus definitions were frozen as
of the date of the infection.  I've also seen workstations get frozen on a
date for no apparent reason, and I have to uninstall SAV and reinstall it
to fix it.  I've never seen it happen for the whole network, though.
 


School Information Technology Discussion <[log in to unmask]> writes:
>I have been on the phone off and on all week with symantec support re  
>updating virus definitions.... which seem to be frozen at sept 6  
>date... Am running
>SAV corporate editions v 9, 10, and 10.1 as unmanaged clients set to  
>autoupdate definitions daily.....
>after today's discussion we are thinking it is some kind of firewall  
>trap..... as it gets to liveupdate.symantecliveupdate.com but won't  
>get a zip file....
>
>Am beginning to think of ditching av bloatware and maybe move to  
>something leaner like nod32 for av...
>  as usual advice and suggestions help me keep sane
>
>vulnerable to exploits in cabot,
>john