Symantec confesses to using rootkit technology.
Oh, dear. We're just getting over the Sony DRM rootkit ruckus and now we have a security company hiding software components from Windows APIs with rootkit technology. News.com reports that Symantec Corp.'s spokesperson admitted to using this rootkit type feature in Norton SystemWorks to hide a directory so customers wouldn't accidentally delete files. The problem was it could also provide a convenient hiding place for attackers to place malicious files. Due to the vulnerability, Symantec has issued an update for SystemWorks and is "strongly recommending" users update the software immediately.
Be warned, and eternally vigilant.
http://blogs.siliconvalley.com/gmsv/2006/01/_after_the_sony.html
'
and:
http://www.eweek.com/article2/0%2C1895%2C1910077%2C00.asp
Once upon a time I was a faithful Norton user. After becoming completely disillusioned with their products, service and the like, I uninstalled my System Works.
Now what? I'm no longer using their product, so what do I do about my computer?
Thanks and I hope this isn't too stupid a question, but it's early and I'm tired.
I have a Mac and a PC and love them both. I have used Norton Utilities on the Mac since the early 1990s when it was great. Since Allume acquired them they have really gone down hill, especially the way they dropped Mac support (they continued to sell a version of Norton Utilities that was not compatible with OS X 10.4. People, like me, bought it, ran into all sorts of problems and had one heck of a time uninstalling it.).
I have come to hate Symantec products and would like to rid my self of them despite the fact that I have a good couple of dollars invested in their software.
If they're in the root tool kit how do I do that?
If you no longer have their product installed, back up all your data and do a OS clean install. I think that should eliminate the possibly hidden software.
Thanks. I will never use Norton products again.
not trusting us & update/upgrade to some-one-elses." ![]()
Systemworks was a bloated nightmare on my systems many years ago when it first came out. I liked the products when they were separate (**Norton** Disk Doctor, Symantec Anti Virus, etc.). When they went to SystemWorks, they should have called it SnafuWorks.
I think we'll probably find out most major vendors are doing the same thing (rootkit-style install), but they're just trying to 'protect us from ourselves'.
I also stopped using Norton SystemWorks long ago, because that version did not have an easy "uninstall" selection. First, it gummed up the works of my PC and then it was time consuming to get it out of my PC. At least the McAfee products I have used have always included an uninstall feature.
I bought an HP PC that works fine but I needed the Helppdesk to completely remove all Symantic files from its "hidden vaults". Never use a program that does not have an uninstall option and certainly not Symantic!
Steinmetz
Avast Antivirus = Free
Zonealarm Firewall = Free
Spy Sweeper = $30
Wincleaner Complete = $49 (sale at staples)
So for $79, I got a more effective, less taxing, activation free computer defense system...Systemwho?
I started out to just to see if I could find free alternatives to Norton's Suite and noticed the following after doing a simple uninstall from Add/Remove programs and installing the above. In other words I was being cheap.
My whole system was faster, more dynamic and had more system resources.
Avast found 3 virus' that Norton's didn't with current definitions and a complete virus scan a few minutes earlier.
Now I feal kind of stupid being a PC Admin that for years used and installed Norton's one several hundred PC's.
Now I use the above programs instead and after 2 yrs and a couple hundred installs (after uninstalling Norton's) I have a lot less problems. I also get a lot less of "I think I need a new PC, this one is too slow".
but I was wrong.
I used the free version for a while then I found the retail version at WalMart for $20. Bought it, installed it and it revealed that a free update was available. I tried to make use of the free update but it would push the program back to an "SE" version. Updated but, with limited features. It said I needed some kind of registration numbers that I received in email when I registered the product.
I originally registered the product but never received what the update was wanting. I contacted Lavasoft and after a lengthy period of time they decided they would give me a lazy response. They said:
------------------------------------------
"Dear Customer,
Thank you for your e-mail and please forgive the late reply.
To activate Ad-Watch on the Ad-Aware SE 1.06, please click the Ad-Watch icon on the main screen when you open your Ad-Aware.
You can use your person ID: #########, if an ID is asked for.
For further information, please do not hesitate to contact us.
Best regards,
Stephanie Ekman"
-------------------------------------
None of this worked. The program didn't care about those numbers they gave me and wanted the registration numbers I was supposed to have received in email. I contacted Lavasoft again on this matter but have never received a reply.
Currently the Ad Aware program is uninstalled and unused. It can't be updated to the latest protection so I can't rely on it.
I have Systemworks 2005 on my computer. What is the best way to remove it? (I have cccleaner on my computer. Should I use that removal tool or add/remove?) I went to Symantec website and could not find an uninstaller for 2005 version. If someone has link or advice, much appreciated.
Just put the Systemworks disc in the optical drive and follow the on screen removal instructions.
Systemworks 2005 was the first Systemworks I've used that fully removed itself.
| Forum legend: | |
| Locked thread | |
| Moderator | |
![]() |
CNET staff |
![]() |
Samsung staff |
| Norton Authorized Support team | |
| AVG staff | |
| Windows Outreach team | |
![]() |
Dell staff |
| Intel staff | |