Symantec Using Sony Drm-like Rootkit? - Norton Protected Recycle Bin Exposure

free web hosting
Free Web Hosting > Computers & Tech > Security issues & Exploits

Symantec Using Sony Drm-like Rootkit? - Norton Protected Recycle Bin Exposure

sparx
Link here


Symantec has released an advisory saying that the Norton Protected Recycle Bin which is used to recover deleted files as an added safety net underlying Windows' Recycle Bin will now display the NProtect sub-folder in the Recycled folder.

QUOTE
The NProtect directory is used to store temporary copies of files that the user has deleted or modified. This feature supplements the Windows Recycle Bin, creating a temporary backup of certain types of files that the Windows Recycle Bin does not back up. The Norton Protected Recycle Bin allows the user to recover these protected files if they are accidentally deleted.

NProtect is hidden from the Windows FindFirst/FindNext APIs. Since the hidden directory is not visible to Windows, files in the directory might not be scanned during scheduled or manual virus scans. Files in the NProtect directory are scanned by on-access scanners like Symantec's Auto-Protect, and by the on-access scanners of other vendors' products.

When NProtect was first released, hiding its contents helped ensure that a user would not accidentally delete the files in the directory. In light of current techniques used by malicious attackers, Symantec has re-evaluated the value of hiding this directory. We have released an update that will make the NProtect directory visible inside the Windows Recycler directory. With this update, files within the NProtect directory will be scanned by scheduled and manual scans as well as by on-access scanners like Auto-Protect.

The NProtect directory will continue to function as it always has, and users will continue to have the ability to enable or disable the feature through the Norton Protected Recycle Bin user interface.


All you need to do is run LiveUpdate, download the new version of the Symantec Common Event Driver (less than 300 KB) and reboot. This affects Norton Systemworks 2005/2006 including the Premium versions.

Basically, they're just insuring themselves against possible public outcry following the discovery of Sony's DRM rootkit install and the hoopla surrounding that bad decision

BTW, the above two links point to one of the funniest tech comic strips available online - Userfriendly by J.D. "Illiad" Frazer

 

 

 


Reply

Khymnon
Great business sense on Symantec's part. Thanks, sparx.

Actually, the NProtect folder has always been shown when you accessed the Recycle Bin directory under DOS. Naturally since almost no one had used DOS in eons except perhaps for experimental reasons, this fact isn't widely known.

Plus, I remember seeing my anti-virus scanning the Norton protected files before. I can't be sure, though. Well, either way, Symantec covered themselves against the *hoopla.* :-)

Reply


Got an Opinion! Express your Views! (no registration):-
Add your Reply/ Opinion/ Views/ Comments/ Suggestion/ Questions/ Queries etc.
Posts with decent grammar & English will be accepted and please refrain from profanities.
For asking a Question, We recommend you to sign-up (for free) so that you can track the topic easily.

Nature of your Post*: Opinion/ Reply/ Comments
Question/Query
Feedback to us.
       
Name   Email
Title/Question*

Recent Queries:-
  1. symantec sygate drm - 14.02 hr back. (1)
  2. symantec drm - 29.13 hr back. (1)
  3. symantec.com/drm - 62.16 hr back. (2)
  4. www.service.symantec.com/drm - 83.88 hr back. (2)
  5. norton recycler virus - 533.15 hr back. (1)
  6. how to remove rootkit from recycler - 535.52 hr back. (1)
  7. symantec and recycler virus - 567.51 hr back. (1)
  8. drm symantec rootkit - 674.77 hr back. (1)
Similar Topics

Keywords : symantec, sony, drm, rootkit, norton, protected, recycle, bin, exposure

  1. Rootkit Revealer Locks Up My System
    (2)
  2. Can Someone Get A Rootkit Certified?
    (1)
    It looks like the famous H.D. Moore is trying to get Metasploit Microsoft Certified for Vista in an
    article at physorg.com (http://www.physorg.com/news93262491.html). Apparently getting your software
    certified by Microsoft only costs $500 and is somewhat of a conveyer belt mindless system. The
    problem with this is Vista and XP, if enabled, only allows signed drivers to be installed. I
    suppose this is nothing new but having a signed driver gives the comfort of legitimacy to the users
    and in the case of Vista, gives legitimacy to the OS. Even though only allowing signe....
  3. Sygate Still Secure?
    Downloaded the latest version they released, before being bought by Sy (4)
    Hi there, First off a few days ago I switched from Linux to Windows (don't ask me why!) and
    trying to get it secure. Second, don't know if this is the right forum, but it seemed the best
    choice to me! Alright, now my question: Is Sygate Personal Firewall still secure? (it's quite
    dated now!) Symantec bought/destroyed Sygate. But I downloaded Sygate Personal Firewall from
    oldversion.com , it's the last version they released and it's the firewall that best suites
    my needs. I'm behind a router (with firewall) at the moment, but i like to be a DM....
  4. I Don't Want Norton To Delete My Viruses And Hacktools!
    (23)
    I have a quite unique problem regarding Norton AV and viruses. I do software security research as a
    hobby. As such, I routinely harbor various “hacktools”, keylogers, exploit code and viruses on my
    machine. My problems began when I installed Norton Systemworks 2006. As usual Norton AV done a
    full system scan. This time however I forgot to dismount my virus directory and lost several years
    worth of downloads and research. This did not hurt that bad since I had all the viruses backed up
    but pissed me off none the less. What really irritates me to no end though is No....
  5. Keep Your Windows XP Protected
    A discussion. (9)
    Dear Members As you all may be aware of the spywares, trojan horses,viruses which are troubling us.
    I have found out a descent way of protecting owr PC's from these harmful stufs. I run a cyber
    cafe and use windows xp home version. I am describing my way of protecting pc's:- 1. Frist of
    all I have downloaded the windows XP service pack 2. 2. Then I have downloaded Avg Free. 3. Lastly
    I have downloaded Windows Defender. 4. What I do is that, I have created two accounts in my
    computer. One Admin which have Administrator rights another guest account. I use the ....
  6. Symantec Antivirus Heap Overflow Advisory
    (0)
    On 21 Dec, Security researcher Alex Wheeler has released an advisory that could affect
    Symantec's antivirus products including gateway, server, and client versions on most platforms.
    Symantec Antivirus Library will decompress the RAR file when i t does virus analysis. During the
    process, Symantec is vulnerable to multiple heap overflows allowing attackers complete control of
    the system. I This flow allows attackers unauthorized control of data and related privileges.
    Source: http://www.rem0te.com/public/images/symc2.pdf ....
  7. Norton Antivirus Vulnerable
    Antivirus software vulnerable (1)
    Norton Antivirus Vulnerable QUOTE Symantec AntiVirus Engine Vulnerable Published 08:40:08
    07.02.2004 Symantec has issued an advisory on a security vulnerability discovered within the
    web-based Administrative Interface of its AntiVirus Scan Engine. The flaw could lead to a buffer
    overflow that enables a remote attacker to execute arbitrary code and access a system. Security
    firm iDefense discovered the problem, which is only a risk if the Web interface is enabled and open
    to outsiders. Symantec has issued a patch for the AntiVirus Scan Engine that can be downloaded....

    1. Looking for symantec, sony, drm, rootkit, norton, protected, recycle, bin, exposure






*SIMILAR VIDEOS*
Searching Video's for symantec, sony, drm, rootkit, norton, protected, recycle, bin, exposure
advertisement




Symantec Using Sony Drm-like Rootkit? - Norton Protected Recycle Bin Exposure