1. You are viewing our forum as a guest. For full access please Register. WindowsBBS.com is completely free, paid for by advertisers and donations.

Another Rootkit comes out of the woodwork - this time from Symantec

Discussion in 'Security and Privacy' started by charlesvar, 2006/01/13.

  1. 2006/01/13
    charlesvar

    charlesvar Inactive Alumni Thread Starter

    Joined:
    2002/02/18
    Messages:
    7,024
    Likes Received:
    0
  2. 2006/01/13
    Arie

    Arie Administrator Administrator Staff

    Joined:
    2001/12/27
    Messages:
    15,174
    Likes Received:
    412
    Also read this PCWorld Article.
     
    Arie,
    #2

  3. to hide this advert.

  4. 2006/01/13
    charlesvar

    charlesvar Inactive Alumni Thread Starter

    Joined:
    2002/02/18
    Messages:
    7,024
    Likes Received:
    0
    Thanks Arie, didn't see the PCWorld article - didn't know about KAV.

    Makes you wonder who else is doing this and for how long.

    Regards - Charles
     
  5. 2006/01/16
    Brenda J

    Brenda J Inactive

    Joined:
    2002/01/07
    Messages:
    96
    Likes Received:
    0
    Norton AV 2005?

    Well there is a patch for Norton Works but what about those of us that only run Norton AV 2005? There's been no mention of it and the protected trash is included there also. I could disable that, but if I'm correct, disabling won't fix the problem. The "hide program" will still be there and functional. Am I correct on that and if so what now? Thanks in advance.
     
  6. 2006/01/16
    charlesvar

    charlesvar Inactive Alumni Thread Starter

    Joined:
    2002/02/18
    Messages:
    7,024
    Likes Received:
    0
    Hello Brenda,

    NAV2005 is one of my AV's - I don't see any mention of "Protected Recycle Bin ". I've E-mail scanning, Interent Worm Protection, and LU disabled. Is it tied to one of these?

    From my understanding, the problem is limited to SystemWorks versions for 2005 and 2006.

    Regards - Charles
     
    Last edited: 2006/01/16
  7. 2006/01/16
    charlesvar

    charlesvar Inactive Alumni Thread Starter

    Joined:
    2002/02/18
    Messages:
    7,024
    Likes Received:
    0
  8. 2006/01/16
    Brenda J

    Brenda J Inactive

    Joined:
    2002/01/07
    Messages:
    96
    Likes Received:
    0
    Hi Charles,

    Open Norton AV and click on "options" then under "other" click on "Advanced tools" That's where you'll find the protected recycle bin listing.
     
  9. 2006/01/17
    charlesvar

    charlesvar Inactive Alumni Thread Starter

    Joined:
    2002/02/18
    Messages:
    7,024
    Likes Received:
    0
    Hi Brenda,

    Don't see it.

    Regards - Charles
     
  10. 2006/01/17
    Brenda J

    Brenda J Inactive

    Joined:
    2002/01/07
    Messages:
    96
    Likes Received:
    0
    How odd! I did a print screen of mine but how the heck do I attach it to this? The only thing I can figure is that I bought the 3 lic pack because I have 3 computers. It doesn't say anything about it on the box but the user guide has it listed under advanced utilities and unerase wizard...on page 22...and yes, I'm sure I have Norton AV 2005 and not system works.
     
  11. 2006/01/17
    charlesvar

    charlesvar Inactive Alumni Thread Starter

    Joined:
    2002/02/18
    Messages:
    7,024
    Likes Received:
    0
    Hi Brenda,

    Ok, checked a NAV2005 installation on another system, and yes, found it under Advanced Tools. I don't have that.

    Don't know if that's an option on the original install procedure or not - don't remember, been almost a year.

    Regards - Charles
     
  12. 2006/01/17
    Brenda J

    Brenda J Inactive

    Joined:
    2002/01/07
    Messages:
    96
    Likes Received:
    0
    Hi again! Attachment not needed now! And I can stop thinking I've gone nuts too! :D But it still brings us back to "what do those of us with just AV 2005 to do about the problem" doesn't it? I think it may be time to email Symantec support. Thanks for restoring my idea that I'm a fairly sane person. :rolleyes:
     
  13. 2006/01/18
    Brenda J

    Brenda J Inactive

    Joined:
    2002/01/07
    Messages:
    96
    Likes Received:
    0
    After an hour of waht was like pulling teeth :mad: spent with Symantec chat here's what I was finally told.

    Manjunath N: I apologize for the confusion, you can run the patch released for Norton SystemWorks (NSW) for Norton AntiVirus (NAV) also.

    But only after being told repeatedly taht NAV 2005 doesn't have the protected recycle bin! It would seem I need to go to work for Norton! :(
     
  14. 2006/01/18
    charlesvar

    charlesvar Inactive Alumni Thread Starter

    Joined:
    2002/02/18
    Messages:
    7,024
    Likes Received:
    0
    Hi Brenda,

    Glad you've got a resolution of this.

    Still trying to figure why I don't have the protected recycle bin option - not that I want it :rolleyes:

    But only after being told repeatedly taht NAV 2005 doesn't have the protected recycle bin!
    That respnse may be an indication of different versions of NAV2005. I do have a dim recollection that versions sold in various parts of the world do differ, but never found out how.

    My version came from a re seller, not a boxed version or a direct download from Symantec.

    Regards - Charles
     
  15. 2006/01/18
    Brenda J

    Brenda J Inactive

    Joined:
    2002/01/07
    Messages:
    96
    Likes Received:
    0
    I did finally find an article from Symantec that says "some" versions of NAV do have the protected recycle bin {PRB} and that those will automatically download the patch if you have auto update running. If run manually it will be in a symevent update. Funny thing is it's called a symevent update not a protected recycle bin patch. But I was able to check the version in symevent and verify that it had, indeed, already been done.

    My version is a boxed NAV 2005 Home protection Pack. It's a 3 lic pack. Maybe that's the difference. My best advise would be, if you have the option to not install PRB, don't. If not check to make sure it's updated. Do a search for symevent.sys {it should be somewhere in c:windows}. Right click on it and choose properties then check the version. If updated it will be version 11.6.6.1. I had 2 show up in the search but only one was in the windows folder.

    I hope this helps someone else! Good luck to all!
     
  16. 2006/01/19
    alboy

    alboy Well-Known Member

    Joined:
    2002/01/09
    Messages:
    538
    Likes Received:
    4
    What about Systemworks 2004 ?

    I use Systemworks 2004 professional
    It also has a hidden recycle bin but there is no mention of a patch for the 2004 version does anybody have any info please.
     
  17. 2006/01/19
    Brenda J

    Brenda J Inactive

    Joined:
    2002/01/07
    Messages:
    96
    Likes Received:
    0

Share This Page

  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.