Re: SP2 virus monitoring
From: cquirke (MVP Win9x) (cquirkenews_at_nospam.mvps.org)
Date: 08/20/04
- Next message: nospam.please_at_ualberta.ca: "Re: Adobe Acrobat Reader 6.0 Can't open .pdf f that are emailed on"
- Previous message: CWatters: "Re: XP SP 2 and freeware - are there issues ?"
- In reply to: Donald McDaniel: "Re: SP2 virus monitoring"
- Next in thread: Frank Bulk: "Re: SP2 virus monitoring"
- Messages sorted by: [ date ] [ thread ]
Date: Fri, 20 Aug 2004 20:23:06 +0200
On Wed, 18 Aug 2004 16:28:34 -0700, Donald McDaniel
>On Thu, 19 Aug 2004 00:34:11 +0200, "cquirke (MVP Win9x)"
>>On Wed, 11 Aug 2004 20:12:40 -0400, InQuisition® <nospam@hoofmail.com>
>>>Norton Firewall/Norton Internet Security
>>>Installing Service Pack 2 will have no affect on Norton
>>>Personal Firewall or Norton Internet Security. The Windows
>>>Security Center will be aware that you have one of these
>>>products installed, but it will not be able to determine
>>>their working status due to
>>>"""Symantec's tamper-protection technology."""
>>>Looks to me like a cop out....
>>Not really.
>>How would SP2 query anti-malware software?
>>How would malware not be able to do the same thing?
>For your information, Symantec has, for the last week, had updates
>available through LiveUpdate for its Security Products which enable
>them to report their presence and status
I know. But the explanation that this issue was related to
"tamper-protection" is likely sound.
It's to Symantec's credit that, unlike MS where everything is left so
easy for "remote admin" that almost any malware presence allows
settings to be shot to pieces, NAV at least *tries* to hide from
processes that want to query it or shut it down.
So when SP2 tries to query it, it fails; to "fix" that, Symantec would
have to accomodate SP2. Hopefully without accomodating malware that
just looks like SP2, however.
>--------------- ----- ---- --- -- - - -
If you leave the door open long enough, the
wrong dogs will come home - Duane Arnold
>--------------- ----- ---- --- -- - - -
- Next message: nospam.please_at_ualberta.ca: "Re: Adobe Acrobat Reader 6.0 Can't open .pdf f that are emailed on"
- Previous message: CWatters: "Re: XP SP 2 and freeware - are there issues ?"
- In reply to: Donald McDaniel: "Re: SP2 virus monitoring"
- Next in thread: Frank Bulk: "Re: SP2 virus monitoring"
- Messages sorted by: [ date ] [ thread ]
Relevant Pages
|