Rootkit-like Feature Found in Norton Systemworks

eWeek reports a rootkit-like ‘feature’ in Symantec’s Norton Systemworks, discovered by the Mark Russinovich, who was also responsible for blowing the whistle on Sony’s DRM rootkit. The cloaked directory is intended to prevent users from accidentally deleting important files, but could compromise a system by serving as a hiding place for malware, as was the case with Sony’s rootkit. Russinovich says Symantec had good intentions, but they were right to post an update to fix this hole.

Not so surprising since any Norton product is crap, but it’s good to know if it’s installed on your system. Check out the posting at Slashdot.