Video Screencast Help
Search Video Help Close Back
to help
Not able to make it to Vision this year? Get a sampling in the Best of Vision on Demand group.

What are the rootkit detection and removal capabilities of SEP?

Updated: 21 May 2010 | 2 comments
TITSSN's picture
0 0 Votes
Login to vote
This issue has been solved. See solution.

Greetings,

I'd like to know what levels of comfort I should have (or not) with SEP detecting and removing of the tot rootkits that are out and about today. These are some serious issues that I have been seeing more integrated with blended threats to keep reloading them after the AV/AM solutions remove them.

Can anyone from Symantec shed some insight on the rootkit detection and removal capabilities of SEP as it stands today?

Thank you and have a great day,

~Brett A. Scudder~

Comments

Vikram Kumar-SAV to SEP's picture
26
May
2009
0 Votes 0
Login to vote

SEP works well.

Nowadays rootkits are on the rise so is symantec on detecting them.SEP does detect most of the rootkits that are there in the wild.Detection capabilities of any antivirus depends on its Honey Pots (Sensors) across the globe and Symantec has the highest number of Sensors across the globe.
But since there are so many in the wild that it is not possible to detect all them untill and unless symantec has a sample.So if you are facing any kind of Rootkits issue ..Open a case with Symantec or submit your Virus Sample to https://submit.symantec.com/gold 
To double check if there is really a rootkit on your computer you can scan using Microsoft's Rootkit Revealer.

Vikram Kumar-SAV to SEP's picture
24
Aug
2009
0 Votes 0
Login to vote

for you and many who want to

for you and many who want to know wgat rootkits are and what is rootkit detection and removal capabilities of sep.

https://www-secure.symantec.com/connect/articles/rootkit-intruder-living-your-kernel