R E L A T E D   C O N T E N T
ADVERTISEMENT

Symantec caught using rootkit technology

Sony BMG saga all over again?

Tom Sanders in California, vnunet.com 13 Jan 2006
ADVERTISEMENT

Security vendor Symantec has admitted to using a rootkit-like technology in its Norton SystemWorks appliction.

The company admitted in a security advisory that the technology hides a directory from the user and the operating system.

"Files in the directory might not be scanned during scheduled or manual virus scans. This could potentially provide a location for an attacker to hide a malicious file on a computer," the vendor stated.

The technology aims to help the user recover files without running the risk of accidentally deleting them.

"In light of current techniques used by malicious attackers, Symantec has re-evaluated the value of hiding this directory," the advisory continued.

The security vendor has published an update that can be downloaded through Symantec LiveUpdate. The update requires a system reboot.

The firm emphasised that it is not aware of any attempts by hackers or worm authors to exploit the feature.

Symantec credited fellow security vendor F-Secure and software developer Mark Russinovich with finding the vulnerability. 

See also:

Digital musicFree downloads or your money back  09 Jan 2006
Trojan horseMalware turns even more nefarious  08 Dec 2005
Digital musicSony BMG has 'behaved responsibly' throughout, claims Cary Sherman  21 Nov 2005
AmazonOnline retailer offers to replace all 'defective' CDs  19 Nov 2005
Trojan horseNightmare darkens for troubled record label  18 Nov 2005
Trojan horseSony doomsday scenario becomes reality  10 Nov 2005
Computer virusDodging the virus shield becomes big business as authors 'outsource' malware creation  19 Oct 2005

All Bugs & Fixes

Like this story? Spread the news by clicking below:

Post this to Delicious del.icio.us    Post this to Digg Digg this    Post this to reddit reddit!

Permalink for this story

M A R K E T P L A C E
Sponsored links
F E A T U R E D   J O B S
| Computer People
SQL Server 2008 Developer – Staffordshire – Market Rate – 3 - 6 month initial role Computer People have an exciting opportunity for a SQL Server 2008 Developer within an Large organisation based in Staffordshire. ... more >
| Aston Carter
JAVA J2SE DEVELOPER – CREDIT DERIVATIVES amp; Credit Derivatives (CDS, CDO, CDX, IRD, IRS), Exotics and Structured Hybrid products. Technical skills include: Server side Java, SQL, Sybase, SOAP, WEB SERVICE and OOA/D. Nice to have ... more >
| Aston Carter
JAVA J2SE DEVELOPER – CREDIT DERIVATIVES amp; Credit Derivatives (CDS, CDO, CDX, IRD, IRS), Exotics and Structured Hybrid products. Technical skills include: Server side Java, SQL, Sybase, SOAP, WEB SERVICE and OOA/D. Nice to have ... more >
| Aston Carter
Java, C++, SQL Analyst Developer – Interest Rate Risk Java, C++, SQL, Analyst Developer, interest rate, risk, credit risk, market risk, perl, scripting • At least 2-5 years experience developing in C++ and Java • ... more >
More job opportunities