Symantec, Kaspersky criticized for cloaking software

The Windows operating system expert who exposed Sony BMG Music Entertainment use of "rootkit" cloaking techniques last year is now criticizing security vendors Symantec and Kaspersky Lab for shipping software that works in a similar manner.

Mark Russinovich, chief software architect with systems software company Winternals Software, says that the techniques used by Symantec's Norton SystemWorks and Kaspersky's Anti-Virus products are rootkits, a term usually reserved for the techniques used by malicious software to avoid detection on an infected PC. There is "no good justification," for the use of such techniques, Russinovich said. "If the vendor believes that the implementation of their software requires a rootkit then I think they need to go back and re-architect it."

Both Symantec and Kaspersky concede that they have shipped software that hides information from system tools, but told IDG News Service they disagreed with Russinovich's use of the term rootkit, saying that because their software was not designed with malicious intent, it should not be lumped into the same category. PC World | Symantec, Kaspersky criticized for cloaking software

Linked by shanmuga Friday, 13th January 2006 2:40AM