Threat Level: green Handler on Duty: Bojan Zdrnja

SANS ISC: Symantec AV problem on XP SP2 Simplified Chinese - Internet Security | DShield SANS ISC InfoSec Forums


Sign Up for Free!   Forgot Password?
Log In or Sign Up for Free!
Symantec AV problem on XP SP2 Simplified Chinese
We received a report that Symantec Antivirus was identifying two system files (netapp32.dll and lsass.exe) on the Simplified Chinese version of Windows XP SP2 as a virus (Backdoor.Haxdoor) and deleting them.  This prevents the machines from booting correctly.  News reports are limited at this time, so it's difficult to confirm.  But the following sources are available:

http://sbin.cn/blog/2007/05/18/symantec-anti-virus-software-damages-system-files/
http://blog.xfocus.net/index.php?blogId=1
Kyle

112 Posts

Sign Up for Free or Log In to start participating in the conversation!