Symantec Found Using Rootkit Feature
Thursday, January 12, 2006 by Island Dog | Discussion: Windows Software
Another reason to use Norton products.
Symantec is cleaning up a feature in Norton SystemWorks that uses a rootkit-like technique to hide a system folder from Windows. The technology works similar to Sony BMG's controversial rootkit DRM in the way it masks files and makes them invisible to the operating system.
The Norton Protected Recycle Bin feature adds a directory called NProtect, which stores temporary copies of files that users delete. The idea was to supplement the standard Windows Recycle Bin and enable users to recover files they removed accidentally.
Reply #2 Thursday, January 12, 2006 8:02 AM
The NProtect folder is easily found and files easily removed.
Reply #3 Thursday, January 12, 2006 8:41 AM
| The NProtect folder is easily found and files easily removed. |
But if, as the article states, that itis hidden from the OS, then it is possible for a virus to use that fact to their advantage. It is not they did anything wrong, just something foolish.
Reply #4 Thursday, January 12, 2006 11:25 AM
Reply #5 Thursday, January 12, 2006 11:46 AM
Reply #6 Thursday, January 12, 2006 2:29 PM
Reply #7 Thursday, January 12, 2006 5:13 PM
Symantec antivirus... much better
Yes, there is a difference
Reply #8 Thursday, January 12, 2006 7:11 PM
)
Reply #9 Thursday, January 12, 2006 7:13 PM
| Norton Antivirus... yuk Symantec antivirus... much better Yes, there is a difference |
Don't see how as they are both the same company.
Reply #10 Thursday, January 12, 2006 7:15 PM
| Norton Internet Security 2005 is the devil |
I would call it pure EVIL! Altho I do like their anti-virus.
Reply #11 Thursday, January 12, 2006 7:31 PM
Reply #12 Thursday, January 12, 2006 7:40 PM
Ah, so they have cured the 'ccApp.exe is not responding' ? Or 'Ns..blah blah cannot start as ccL30.dll cannot be found', even though it is there?
I'll take my chances elsewhere
Reply #13 Friday, January 13, 2006 2:20 AM
Reply #14 Friday, January 13, 2006 8:26 AM
| Don't see how as they are both the same company. |
Kona,
Symantec anti-virus is mostly used in corporations. You don't normally find it a say Best Buy. It is designed for larger networks and provides a central point of adminstration etc.
It doesn't include all the fluff and hideous tools that accompany NAV.
There is a WORLD of difference between them, even though they are made by the same company.
BTW... Harley Davidson used to make golf carts and motorcycles. When they were owned by AMF they also made athletic equipment. Point being, the Company has nothing to do with the similarity and/or differences in product.
Reply #16 Friday, January 13, 2006 6:11 PM
A 'protected recycle bin' is hardly equitable with Sony's rootkit issue.
The former is a 'necessary' function of the proggy....the latter is an invasive and subversive infiltration of your system 'integrity'.
Perhaps both can be exploited by evil-doers...but they are only similar, not the same at all.
Symantec simply saw it as a security vulnerability that needed fixing....whereas Sony's rootkit was only dealt with following mass-rebellion from their signed musicians...and class-action suits.
And THAT is one heck of a difference...
Reply #17 Friday, January 13, 2006 10:23 PM
I do not use the 'protected recycle bin' feature, so disable the feature, and remove the NTprotect folder.
Of course, I use Shift+Delete, so...........
Reply #18 Saturday, January 14, 2006 11:53 AM
| And THAT is one heck of a difference.. |
Could not agree with you more!
Please login to comment and/or vote for this skin.
Welcome Guest! Please take the time to register with us.
There are many great features available to you once you register, including:
- Richer content, access to many features that are disabled for guests like commenting on the forums and downloading skins.
- Access to a great community, with a massive database of many, many areas of interest.
- Access to contests & subscription offers like exclusive emails.
- It's simple, and FREE!
Reply #1 Thursday, January 12, 2006 7:51 AM