Threat Level: green Handler on Duty: Russ McRee

SANS ISC: Symantec AV problem on XP SP2 Simplified Chinese - SANS Internet Storm Center SANS ISC InfoSec Forums


Sign Up for Free!   Forgot Password?
Log In or Sign Up for Free!
Symantec AV problem on XP SP2 Simplified Chinese
We received a report that Symantec Antivirus was identifying two system files (netapp32.dll and lsass.exe) on the Simplified Chinese version of Windows XP SP2 as a virus (Backdoor.Haxdoor) and deleting them.  This prevents the machines from booting correctly.  News reports are limited at this time, so it's difficult to confirm.  But the following sources are available:

http://sbin.cn/blog/2007/05/18/symantec-anti-virus-software-damages-system-files/
http://blog.xfocus.net/index.php?blogId=1
Kyle

112 Posts

Sign Up for Free or Log In to start participating in the conversation!