[Lynnex1138]

Hello,

I am a new netadmin at a small organization w/approximately 200 workstations. We presently use symantec corporate edition ver. 10.0.01 but I am finding all kinds of malware, trojans mainly, on our machines when I scan with malwarebytes.

What I want to do is make sure I am up to date on what threats are out there and what the best removal & defense tools are.

What are the websites, email updates, etc. that you all use in addition to this one to stay on top of things?

thanks!

[TOGG]

The SANS Internet Storm Center seems to be aimed at network admins and provides information about current threats; http://isc.sans.org/ and you can go through previous days 'diaries' to read up on recent developments.

ESET, the company behind NOD32, provide an email notification of their definition updates together with an analysis of the threats their software is catching. I have the home version of NOD32 and have subscribed but you don't need to be a customer to get the emails;https://secure.eset.co.uk/forms/threatalerts.asp

You could also try their Security Newsletter ; https://secure.eset.co.uk/forms/newsletter.asp and, while you're on their site, check out their Enterprise Edition! ;http://www.eset.co.uk/products/enterprise_edition.php

I don't work for ESET and, in order to give you both sides of the picture, I will point you to the NOD32 section over at Wilder's Security Forums where you will find quite a few people complaining about updating problems!; http://www.wilderssecurity.com/forumdisplay.php?f=88 Obviously, I have no idea what percentage of NOD users are having problems, but I'm not.

PS. You could also try Eset's online scanner on a few of the machines you suspect are infected; http://www.eset.eu/online-scanner There don't seem to be any limitations as to its use eg: for home users only

[Lynnex1138]

Thanks so much for all those resources! I really appreciate it.

[TOGG]

There are a couple of other places that might be of interest;

Secunia; http://secunia.com/ I use their Online software inspector regularly to check for out of date programs (which needs Sun Java) and you could look into their Network Software Inspector,

FSIRT; http://www.frsirt.com/english/security-advisories/ more bad news!

File Hippo; http://www.filehippo.com/ probably not for 'commercial' users, but it does have a software checker (that needs .NET)

I assume you already have US Cert but, if not; http://www.us-cert.gov/ and the Wilders site has an 'update alerts' thread that covers a lot of software.