Xcess
12-10-2007, 12:52 AM
A routine update from Symantec Security Response wreaked havoc on a California company's clientele this week when it inadvertently tagged a program produced by Solid Oak Software as a virus and cut off the Internet access of Solid Oak customers.
Symantec on Monday released a virus definition update that incorrectly identified Solid Oak's CyberSitter filtering program as a virus. Depending on the version of Symantec's Norton Antivirus product that Solid Oak customers were running, CyberSitter files were either deleted or banned from use by Norton, according to Solid Oak.
On Friday, a Symantec spokesman said that the company had issued a fix.
Before that, however, Solid Oak customers including schools, libraries and personal accounts, were not provided with a recovery mechanism and subsequently lost Internet access. Solid Oak did not have an exact number of those affected, but it likely numbers in the tens of thousands, according to a spokeswoman.
Customers have had to re-install entire operating systems and software, she said.
Symantec contacted Solid Oak on Wednesday and "under pressure from Solid Oak," set up a technical support number for customers to call, Solid Oak said.
That number, however, is no longer in service. When PC Magazine called it on Thursday evening, it directed callers to the Norton customer service Web site, which provides standard fixes to common problems but does not address the problem facing Solid Oak customers.
This is the third time in less than a year that Symantec's Norton products have caused severe damage to computers running CYBERsitter software offerings, said Brian Milburn, president of Solid Oak Software, in a statement. "In my opinion, Norton products are worse than any virus I can think of," he said.
"We have thousands of users with no Internet access and all Symantec has done is to provide our mutual customers with a non-functioning support number that tell them to use on-line support," Milburn added. "The problem is even worse because [it's] the holiday season. Users are trying to order gifts on-line and they can't."
A Symantec spokeswoman said Thursday the company was "researching" the problem. On Friday, the company issued the following statement:
"On December 5, Symantec moved the detection of an application called CYBERsitter from trackware into a new category called parental controls. Both categories are considered security risks, and Symantec provides its customers with the option of allowing the technology to function as intended or blocking it. During the category switch, behavioral technology in Symantec products detected CYBERsitter as Bloodhound.unknown and restricted Internet access.
"To restore full Internet access, Symantec advises affected customers to temporarily turn off AutoProtect, run LiveUpdate and then turn AutoProtect back on," Symantec said in the statement, which was issued by spokesman Mike Bradshaw. "This will install the most current set of definitions which classify CYBERsitter as a parental control."
Symantec also said that it depended on the customer to determine what actions to take.
"Customers depend on Symantec to notify them when their computers are being remotely monitored and tracked and provide them the option of allowing or blocking such technologies," a Symantec spokesman said in a separate statement on Friday. "We understand that there are legitimate uses of this type of software so Symantec enables the users to make their own decision on what is acceptable to run on their systems. Sometimes conflicts arise and we will continue to work with industry groups like the Antispyware Coalition "ASC" and the vendors themselves to set standards and improve the communications between the security industry and vendors of commercial monitoring and spyware programs, but our first priority will always remain protecting our customers".
The situation is "embarrassing" for Solid Oak, Solid Oak's spokeswoman said. The company has been forced to pass along to customers instructions from Symantec, but nothing is working as of Thursday, she said. "People are upset," she said.
Solid Oak received an e-mail from Kevin Haley, Symantec's director of product management for Security Response, at 11 a.m. PST Thursday but no further instructions were relayed at the original time of this story's publication, according to Solid Oak.
Solid Oak's experiences were reproduced in a testing environment by PC Magazine. "When I reviewed SnoopStick for PC Magazine earlier this year NIS 2007 killed it, and I had to go through conniptions to get it working," analyst Neil Rubenking said. "I suppose I was lucky; it killed the installer, so I never got to the point of two products fighting and keeping me off the 'Net."
That was the first of the three incidents where Symantec "caused severe damage" to CYBERsitter software, according to Milburn. The second, in November, identified CYBERsitter 10 as a "risk" of potential malware, he said.
"If the parent was logged in, who installed it, they wouldn't remove it," Milburn said in an interview. "But if kids were using it, almost exclusively at schools and at Boys & Girls Clubs, if they were given the option of removing it they would, which would kill Internet access."
Original Article Here:
http://www.pcmag.com/article2/0,2704,2229576,00.asp
I can attest to this happening with Symantec, my school was taken out for 5 days, we had no internet. I think this is a huge problem and they need to realize how serious this is.
I don't know if this is the exact problem that we had here, but the school released a letter saying to download this new Symantec update and they couldn't get the internet back until everyone on campus did the update.
Symantec on Monday released a virus definition update that incorrectly identified Solid Oak's CyberSitter filtering program as a virus. Depending on the version of Symantec's Norton Antivirus product that Solid Oak customers were running, CyberSitter files were either deleted or banned from use by Norton, according to Solid Oak.
On Friday, a Symantec spokesman said that the company had issued a fix.
Before that, however, Solid Oak customers including schools, libraries and personal accounts, were not provided with a recovery mechanism and subsequently lost Internet access. Solid Oak did not have an exact number of those affected, but it likely numbers in the tens of thousands, according to a spokeswoman.
Customers have had to re-install entire operating systems and software, she said.
Symantec contacted Solid Oak on Wednesday and "under pressure from Solid Oak," set up a technical support number for customers to call, Solid Oak said.
That number, however, is no longer in service. When PC Magazine called it on Thursday evening, it directed callers to the Norton customer service Web site, which provides standard fixes to common problems but does not address the problem facing Solid Oak customers.
This is the third time in less than a year that Symantec's Norton products have caused severe damage to computers running CYBERsitter software offerings, said Brian Milburn, president of Solid Oak Software, in a statement. "In my opinion, Norton products are worse than any virus I can think of," he said.
"We have thousands of users with no Internet access and all Symantec has done is to provide our mutual customers with a non-functioning support number that tell them to use on-line support," Milburn added. "The problem is even worse because [it's] the holiday season. Users are trying to order gifts on-line and they can't."
A Symantec spokeswoman said Thursday the company was "researching" the problem. On Friday, the company issued the following statement:
"On December 5, Symantec moved the detection of an application called CYBERsitter from trackware into a new category called parental controls. Both categories are considered security risks, and Symantec provides its customers with the option of allowing the technology to function as intended or blocking it. During the category switch, behavioral technology in Symantec products detected CYBERsitter as Bloodhound.unknown and restricted Internet access.
"To restore full Internet access, Symantec advises affected customers to temporarily turn off AutoProtect, run LiveUpdate and then turn AutoProtect back on," Symantec said in the statement, which was issued by spokesman Mike Bradshaw. "This will install the most current set of definitions which classify CYBERsitter as a parental control."
Symantec also said that it depended on the customer to determine what actions to take.
"Customers depend on Symantec to notify them when their computers are being remotely monitored and tracked and provide them the option of allowing or blocking such technologies," a Symantec spokesman said in a separate statement on Friday. "We understand that there are legitimate uses of this type of software so Symantec enables the users to make their own decision on what is acceptable to run on their systems. Sometimes conflicts arise and we will continue to work with industry groups like the Antispyware Coalition "ASC" and the vendors themselves to set standards and improve the communications between the security industry and vendors of commercial monitoring and spyware programs, but our first priority will always remain protecting our customers".
The situation is "embarrassing" for Solid Oak, Solid Oak's spokeswoman said. The company has been forced to pass along to customers instructions from Symantec, but nothing is working as of Thursday, she said. "People are upset," she said.
Solid Oak received an e-mail from Kevin Haley, Symantec's director of product management for Security Response, at 11 a.m. PST Thursday but no further instructions were relayed at the original time of this story's publication, according to Solid Oak.
Solid Oak's experiences were reproduced in a testing environment by PC Magazine. "When I reviewed SnoopStick for PC Magazine earlier this year NIS 2007 killed it, and I had to go through conniptions to get it working," analyst Neil Rubenking said. "I suppose I was lucky; it killed the installer, so I never got to the point of two products fighting and keeping me off the 'Net."
That was the first of the three incidents where Symantec "caused severe damage" to CYBERsitter software, according to Milburn. The second, in November, identified CYBERsitter 10 as a "risk" of potential malware, he said.
"If the parent was logged in, who installed it, they wouldn't remove it," Milburn said in an interview. "But if kids were using it, almost exclusively at schools and at Boys & Girls Clubs, if they were given the option of removing it they would, which would kill Internet access."
Original Article Here:
http://www.pcmag.com/article2/0,2704,2229576,00.asp
I can attest to this happening with Symantec, my school was taken out for 5 days, we had no internet. I think this is a huge problem and they need to realize how serious this is.
I don't know if this is the exact problem that we had here, but the school released a letter saying to download this new Symantec update and they couldn't get the internet back until everyone on campus did the update.