Re: [Full-disclosure] Norton Monitoring system funny problems



This proves an essential point, often overlooked:: in order to attack, your box will be more vulnerable. Of course, the relationship with norton and being more or less vulnerable will elude many people as it does me ;-).

----- Original Message ----- From: "Alexander Hristov" <joffer@xxxxxxxxx>
To: <full-disclosure@xxxxxxxxxxxxxxxxx>; <full-disclosure@xxxxxxxxxx>
Sent: Sunday, February 26, 2006 4:13 AM
Subject: [Full-disclosure] Norton Monitoring system funny problems


Norton Internet monitoring tools issues
Versions Affected : *
Fix : No

What im writing about is how to stop the internet of some user that is
using the norton tools and IRC / any other chat at the same time.

By default norton monitor checks for words like "keylogger" , "start
keylogger" , "key logger" and etc.etc.

Example for irc :
Start a mIRC or any other IRC client that u like and connect to some server.
Type down /ctcp yournick start keylogger . By default norton monitors
your mIRC Process and your logs of it so it sees "star keylogger" and
automaticly blocks mIRC.exe from starting and automaticly blocks port
6667 or whatever port ure using to connect to IRC. Nice eh ?

Best Regards,
Aleksander Hristov < root at securitydot.net > < http://securitydot.net >
_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/



Relevant Pages

  • [Full-disclosure] Norton Monitoring system funny problems
    ... Norton Internet monitoring tools issues ... using the norton tools and IRC / any other chat at the same time. ... By default norton monitor checks for words like "keylogger", ...
    (Full-Disclosure)
  • Norton Monitoring Systems funny problems
    ... Norton Internet monitoring tools issues ... using the norton tools and IRC / any other chat at the same time. ... By default norton monitor checks for words like "keylogger", ...
    (Bugtraq)
  • Re: tapiexec.dll pwsteal.trojan
    ... SC-KeyLog 2.22 is a psuedo-stealth keylogger. ... A Windows utilities developer from the ... sure this is the case since Norton alerted on it. ...
    (microsoft.public.windowsxp.security_admin)
  • Re: tapiexec.dll pwsteal.trojan
    ... >SC-KeyLog 2.22 is a psuedo-stealth keylogger. ... >sure this is the case since Norton alerted on it. ... >keylogger installer ran would have prevented the Trojan ...
    (microsoft.public.windowsxp.security_admin)
  • Re: Pest scanner I found
    ... > Apparently I had a keylogger and trojan that not even norton could find, ... AdAware SE for a second opinion before willy-nilly deleting everything PP ...
    (alt.computer.security)