TIP: Click on subject to list as thread! ANSI
echo: osdebate
to: Geo.
from: Rich
date: 2007-05-22 20:59:12
subject: Re: Symantec false positive cripples thousands of Chinese PCs

From: "Rich" 

This is a multi-part message in MIME format.

------=_NextPart_000_06B5_01C79CB4.0C92EBB0
Content-Type: text/plain;
        charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable

   Possible but I suspect it is more likely that all copies were =
deleted.

Rich

  "Geo."  wrote in message =
news:4653aa01$1{at}w3.nls.net...
  I suspect it's more likely that the files that got deleted although =
critical=20
  to the system were not protected.

  Geo.

  "Rich"  wrote in message news:4652776e$1{at}w3.nls.net...
     If a protected file is deleted and can't be restored automatically =
it=20
  will prompt.  Symantec could have dismissed this but I would be =
surprised if=20
  they did.

  Rich

    "Geo."  wrote in message =
news:46525e01{at}w3.nls.net...
    Ok so badly written applications that overwrite as opposed to badly=20
  written
    applications that delete? Shouldn't it have at least popped up the =
warning
    and asked for the CD to replace the deleted files?

    Geo.

    "Rich"  wrote in message news:465116b6$1{at}w3.nls.net...
       It could have deleted the backup copy as well.  SFP doesn't =
protect
    against intentional deleting of the files.  It protects against =
badly
    written applications that overwrite system files with old or bogus=20
  versions
    of their own.

    Rich
      "Geo."  wrote in message =
news:46508cac$1{at}w3.nls.net...
      So where was Windows File Protection in all of this? Stops me from
    deleting
      outlook express but it allows malware to delete critical windows =
files?

      Geo.

      "mike"  wrote in message
      news:rnbu43p7uu3d0bom2lotfc28mu9oqoia53{at}4ax.com...
      >
      >
    =
http://computerworld.com/action/article.do?command=3DviewArticleBasic&art=
icleId=3D9019958
      >
      > =3D=3D=3D
      > A signature update to Symantec's anti-virus software crippled=20
  thousands
      > of Chinese PCs Friday when the security software took two =
critical
      > Windows .dll files for malware.


------=_NextPart_000_06B5_01C79CB4.0C92EBB0
Content-Type: text/html;
        charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable








   Possible
but I suspect it =
is more=20
likely that all copies were deleted.
 
Rich
 

  "Geo." <georger{at}nls.net>">mailto:georger{at}nls.net">georger{at}nls.net>
wrote=20
  in message news:4653aa01$1{at}w3.nls.net...I=20
  suspect it's more likely that the files that got deleted although =
critical=20
  to the system were not
protected.Geo."Rich" =
<{at}>=20
  wrote in message news:4652776e$1{at}w3.nls.net...=
  =20
  If a protected file is deleted and can't be restored automatically it =
will=20
  prompt.  Symantec could have dismissed this but I would be =
surprised if=20
  they did.Rich 
"Geo." <georger{at}nls.net>">mailto:georger{at}nls.net">georger{at}nls.net>
wrote in =
message news:46525e01{at}w3.nls.net...&nbs=
p; Ok=20
  so badly written applications that overwrite as opposed to badly=20
  written  applications that delete? Shouldn't
it have at =
least=20
  popped up the warning  and asked for the CD to replace the =
deleted=20
  files?  Geo. 
"Rich" <{at}> wrote in =
message news:465116b6$1{at}w3.nls.net...=
    =20
  It could have deleted the backup copy as well.  SFP doesn't=20
  protect  against intentional deleting of the
files.  It =
protects=20
  against badly  written applications that overwrite system =
files with=20
  old or bogus versions  of their
own. =20
  Rich    "Geo." <georger{at}nls.net>">mailto:georger{at}nls.net">georger{at}nls.net>
wrote in =
message news:46508cac$1{at}w3.nls.net...=
   =20
  So where was Windows File Protection in all of this? Stops me =
from =20
  deleting    outlook express but it
allows malware =
to delete=20
  critical windows files?   =20
  Geo.    "mike"
<mike{at}barkto.com>">mailto:mike{at}barkto.com">mike{at}barkto.com>
wrote in=20
  message    news:rnbu43p7uu3=
d0bom2lotfc28mu9oqoia53{at}4ax.com...   =20
  >   
>  http://computerworld.com/action/article.do?command=3DviewArticleB=
asic&articleId=3D9019958">http://computerworld.com/action/article.do?=
command=3DviewArticleBasic&articleId=3D9019958  &nb=
sp;=20
  >    >
=3D=3D=3D    > A =
signature=20
  update to Symantec's anti-virus software crippled=20
  thousands    > of
Chinese PCs Friday when =
the=20
  security software took two
critical    > Windows =
.dll=20
  files for malware.

------=_NextPart_000_06B5_01C79CB4.0C92EBB0--

--- BBBS/NT v4.01 Flag-5
* Origin: Barktopia BBS Site http://HarborWebs.com:8081 (1:379/45)
SEEN-BY: 633/267
@PATH: 379/45 1 633/267

SOURCE: echomail via fidonet.ozzmosis.com

Email questions or comments to sysop@ipingthereforeiam.com
All parts of this website painstakingly hand-crafted in the U.S.A.!
IPTIA BBS/MUD/Terminal/Game Server List, © 2025 IPTIA Consulting™.