funsec mailing list archives

Symantec Caught in Norton 'Rootkit' Flap


From: "Fergie" <fergdawg () netzero net>
Date: Thu, 12 Jan 2006 01:20:51 GMT

Via eWeek:

[snip]

Symantec Corp. has fessed up to using a rootkit-type feature in Norton SystemWorks that could provide the perfect 
hiding place for attackers to place malicious files on computers.

The anti-virus vendor acknowledged that it was deliberately hiding a directory from Windows APIs as a feature to stop 
customers from accidentally deleting files but, prompted by warnings from security experts, the company shipped a 
SystemWorks update to eliminate the risk.

[snip]

http://www.eweek.com/article2/0,1759,1910077,00.asp

- ferg


--
"Fergie", a.k.a. Paul Ferguson
 Engineering Architecture for the Internet
 fergdawg () netzero net or fergdawg () sbcglobal net
 ferg's tech blog: http://fergdawg.blogspot.com/


_______________________________________________
Fun and Misc security discussion for OT posts.
https://linuxbox.org/cgi-bin/mailman/listinfo/funsec
Note: funsec is a public and open mailing list.


Current thread: