Skip Links

Network World

  • Social Web 
  • Email 
  • Close

Symantec releases beta of Norton AntiBot software

By Erik Larkin , PC World , 06/07/2007
  • Share/Email
  • Comment
  • Print

Symantec Thursday announced a free public beta for its new Norton AntiBot software that attempts to identify malware on your system by analyzing its behavior.

The stand-alone software is based on existing (and currently available) technology from Sana Security, with a few minor add-ins from Symantec's SONAR behavioral scanning technology that is now included in Norton products.

Symantec says AntiBot is meant as a supplement to antivirus software, not a replacement, and doesn't use signatures as traditional antivirus products do. Instead, it examines how a program behaves--where it runs from, what Registry changes it makes, what Internet sites it may attempt to contact, and so on. The company says it won't conflict with other antivirus programs, either its own or those of competitors.

While the SONAR feature runs only during virus scans, Symantec says AntiBot stays running in the background to observe all programs' behavior. Though the name emphasizes its focus on catching the versatile "bot" malware that can turn infected computers into remote-controlled "zombie" PCs, the program will look for behaviors associated with a wide range of malicious software, including keystroke logging and other suspicious activities.

The beta is available as a free download from Symantec. The company plans to release the final version around July, at which time the beta will expire. Symantec hasn't yet announced a price for the program, but says that it may eventually add the technology to its existing line of antivirus programs.

This latest move signals security companies' continued interest in developing technology that doesn't rely on exact signature matches in order to identify malware, since online crooks are continually devising new approaches to evade signatures. For more on these evasion techniques and the proactive technologies that combat them, see "When a Signature Isn't Enough," a section of the PC World article, "Virus Stoppers."

  • Share/Email
  • Comment
  • Print
Partner Content

Brilliantly simple security and control solutions for email, web and endpoint

www.sophos.com

Stopping data leakage

Learn how to exploit your current security investment to control the information that flows into, through and out of your network.

Download the white paper.

Why detection rates aren't enough

Evaluating endpoint security products is a time-consuming and daunting task. Learn the six critical questions you need to ask prospective vendors to get the right endpoint solution.

Download the white paper.

Applications: taking back control

Employees installing unauthorized applications is a growing threat to business security and productivity. Cost-effectively reduce this threat by integrating control into your malware protection.

Learn more today.

Comments (1)
Login
Forgot your account info?

RE: Symantec releases beta of Norton AntiBot softwareBy Prince on September 29, 2007, 1:41 pmcan this anti virus dectect and remove all viruses of any kind from a system.is it possible to for anti virus to repair a corupted file

Reply | Read entire comment

View all comments

Add comment
Anonymous comments subject to approval. Register here for member benefits.
Have a NetworkWorld account? Log in here. Register now for a free account.

Videos

rssRss Feed