Symantec Found Using Rootkit Feature

http://www.betanews.com/article/Symantec_Found_Using_Rootkit_Feature/1137029426
from WinCustomize Forums

Another reason to use Norton products.

:SURPRISED:

Symantec is cleaning up a feature in Norton SystemWorks that uses a rootkit-like technique to hide a system folder from Windows. The technology works similar to Sony BMG's controversial rootkit DRM in the way it masks files and makes them invisible to the operating system.

The Norton Protected Recycle Bin feature adds a directory called NProtect, which stores temporary copies of files that users delete. The idea was to supplement the standard Windows Recycle Bin and enable users to recover files they removed accidentally.

 

10,059 views 18 replies
Reply #2 from WinCustomize Forums Top
Comparing the NProtect folder with the Sony incident is scandalous.     The NProtect folder is easily found and files easily removed.
Star Control: Origins
Reply #3 from JoeUser Forums Top

The NProtect folder is easily found and files easily removed.

But if, as the article states, that itis hidden from the OS, then it is possible for a virus to use that fact to their advantage.  It is not they did anything wrong, just something foolish.

Reply #4 from JoeUser Forums Top
I have to agree with Dr. Guy here. I wouldn't say Symantec did the same thing as Sony, but the potential for abuse of this could be ugly.
Reply #5 from WinCustomize Forums Top
I don't use Symantec products. Don't like them. Bloated.
Reply #6 from WinCustomize Forums Top
I too dislike Symantec products. Bloated, use too much resources and just wait till you decide to remove them from your pc! Its like pulling teeth to remove all traces.

Posted via WinCustomize Browser/Stardock Central
Reply #7 from WinCustomize Forums Top
Norton Antivirus... yuk
Symantec antivirus... much better
Yes, there is a difference
Reply #8 from WinCustomize Forums Top
Some Norton/Symantec stuff is good ( Sytem Works 2006 is ok ). Norton Internet Security 2005 is the devil, use it at your own peril... (and frequent re-installs   )
Reply #9 from WinCustomize Forums Top
Norton Antivirus... yuk
Symantec antivirus... much better
Yes, there is a difference


Don't see how as they are both the same company.
Reply #10 from WinCustomize Forums Top
Norton Internet Security 2005 is the devil


I would call it pure EVIL! Altho I do like their anti-virus.
Reply #12 from WinCustomize Forums Top

Ah, so they have cured the 'ccApp.exe is not responding' ? Or 'Ns..blah blah cannot start as ccL30.dll cannot be found', even though it is there?

I'll take my chances elsewhere

Reply #13 from WinCustomize Forums Top
You should see some of the Buzz Report videos on www.cnet.com where Molly Wood tears apart Sony BMG for their root kit dilema

Posted via WinCustomize Browser/Stardock Central
Reply #14 from WinCustomize Forums Top
Don't see how as they are both the same company.


Kona,
Symantec anti-virus is mostly used in corporations. You don't normally find it a say Best Buy. It is designed for larger networks and provides a central point of adminstration etc.
It doesn't include all the fluff and hideous tools that accompany NAV.
There is a WORLD of difference between them, even though they are made by the same company.

BTW... Harley Davidson used to make golf carts and motorcycles. When they were owned by AMF they also made athletic equipment. Point being, the Company has nothing to do with the similarity and/or differences in product.
Reply #15 from WinCustomize Forums Top
Not only Symantec. Kaspersky, too. Link
Reply #16 from WinCustomize Forums Top

A 'protected recycle bin' is hardly equitable with Sony's rootkit issue.

The former is a 'necessary' function of the proggy....the latter is an invasive and subversive infiltration of your system 'integrity'.

Perhaps both can be exploited by evil-doers...but they are only similar, not the same at all.

Symantec simply saw it as a security vulnerability that needed fixing....whereas Sony's rootkit was only dealt with following mass-rebellion from their signed musicians...and class-action suits.

And THAT is one heck of a difference...

Reply #17 from WinCustomize Forums Top

I do not use the 'protected recycle bin' feature, so disable the feature, and remove the NTprotect folder.

Of course, I use Shift+Delete, so...........

Reply #18 from WinCustomize Forums Top
And THAT is one heck of a difference..


Could not agree with you more!