B
badgolferman
This message from our IT Security people was received today by us
administrators.
------------------------------------------------------------------------
----------------------
Microsoft just released a new Beta version of their AntiSpyware tool.
This tool is used to identify 'spyware' on a host machine and remove it
at the users discretion.
The latest version of their tool, which came out Thursday, identifies
Symantec Anti Virus as spyware and identifies it for removal. If the
user clicks on 'remove', the tool will delete a critical library file,
as well as most of the configuration information from the registry.
Norton is unable to recover from this state, and in-fact, will
repeatedly attempt to reinstall and fail.
This problem has been validated by ODIN with Symantec, and they have in
turn called Microsoft. There is no current fix.
We are recommending to all sysadmins and users to NOT install MS
AntiSpyware Beta, and in-fact, if it is installed, remove it
immediately. Do NOT initiate a scan using this tool, and do NOT use it
delete any spyware found on the box. If you have concerns about
spyware, please use trusted, production tools such as SpyBot Search and
Destroy or AdAware.
If you have already run MS AntiSpyware, and Symantec is not
functioning, please call your system administrator or ODIN
representative to resolve the issue. Be aware that your host will be
vulnerable during this period and you should restrict your usage of
e-mail and web browsing particularly until it's resolved.
administrators.
------------------------------------------------------------------------
----------------------
Microsoft just released a new Beta version of their AntiSpyware tool.
This tool is used to identify 'spyware' on a host machine and remove it
at the users discretion.
The latest version of their tool, which came out Thursday, identifies
Symantec Anti Virus as spyware and identifies it for removal. If the
user clicks on 'remove', the tool will delete a critical library file,
as well as most of the configuration information from the registry.
Norton is unable to recover from this state, and in-fact, will
repeatedly attempt to reinstall and fail.
This problem has been validated by ODIN with Symantec, and they have in
turn called Microsoft. There is no current fix.
We are recommending to all sysadmins and users to NOT install MS
AntiSpyware Beta, and in-fact, if it is installed, remove it
immediately. Do NOT initiate a scan using this tool, and do NOT use it
delete any spyware found on the box. If you have concerns about
spyware, please use trusted, production tools such as SpyBot Search and
Destroy or AdAware.
If you have already run MS AntiSpyware, and Symantec is not
functioning, please call your system administrator or ODIN
representative to resolve the issue. Be aware that your host will be
vulnerable during this period and you should restrict your usage of
e-mail and web browsing particularly until it's resolved.
