Symantec uses Rootkit in Norton SystemWorks?!?

[system]

;D

Symantec Corp. has admitted to using a rootkit-type feature in Norton SystemWorks that could provide the perfect hiding place for attackers to place malicious files on computers.

The anti-virus vendor acknowledged that it was hiding a directory from Windows APIs as a feature to stop customers from accidentally deleting files but, prompted by warnings from security experts, the company shipped a SystemWorks update to eliminate the risk.

Symantec, of Cupertino, Calif., is the second commercial company caught in the flap over the use of rootkit-type techniques to hide files on computers. Rootkits are programs that are used to give a remote user access to a compromised system while avoiding detection from security scanners.

eWeek Security

[DavidR]

Looks like a Sony/Symantec merger bid ;D notice how both begin with ‘s’ for snake, as in low down snake in the grass or s***

[lisandro.carmona]

Another negative point to Symantec
This is a bad antipiracy policy

[system]

@DavidR post:2

Looks like a Sony/Symantec merger bid ;D notice how both begin with ‘s’ for snake, as in low down snake in the grass or s***

;D ;D ;D

[leanbone]

@DavidR post:2

Looks like a Sony/Symantec merger bid ;D notice how both begin with ‘s’ for snake, as in low down snake in the grass or s***

yep have to agree as low as a snakes belly ;D all the s’s do fit

[igor0]

@Tech post:3

This is a bad antipiracy policy

What does the Symantec issue have to do with antipiracy?

[lisandro.carmona]

@igor post:6

What does the Symantec issue have to do with antipiracy?

Avoiding simple copy of the install CD.
If I’m wrong, just correct me :

[igor0]

I think those “rootkit features” was simply hiding of the Norton-Protected Recycle Bin folder (so that people couldn’t delete the files for real by accident, but have to use the “Empty Norton-Protected Recycle Bin” option). But I’m not really sure, I could be wrong as well.

[DavidR]

It doesn’t see to be to stop copy of the CD, the only mention of that related to a reference to SONY’s use of a rootkit for DRM purpose.

From the article:

The anti-virus vendor acknowledged that it was hiding a directory from Windows APIs as a feature to stop customers from accidentally deleting files but, prompted by warnings from security experts, the company shipped a SystemWorks update to eliminate the risk.

[bob3160]

Symantec wants to lend a hand with Vista security