[IP] more on Symantec Rootkit revealed
Begin forwarded message:
From: Gene Spafford <spaf@xxxxxxxxxxxxxxxxx>
Date: January 12, 2006 9:04:09 PM EST
To: dave@xxxxxxxxxx
Cc: ip@xxxxxxxxxxxxxx
Subject: Re: [IP] Symantec Rootkit revealed
I really don't think it is fair to call software, such as the
Symantec product, a "rootkit." It does not insert control software
into the system that it then hides from process monitors.
Yes, having something on the system that makes files invisible is not
necessarily desirable. But it isn't a rootkit -- other components
would need to be included.
-------------------------------------
You are subscribed as roessler@xxxxxxxxxxxxxxxxxx
To manage your subscription, go to
http://v2.listbox.com/member/?listname=ip
Archives at: http://www.interesting-people.org/archives/interesting-people/