{"id":378,"date":"2007-03-01T22:44:15","date_gmt":"2007-03-01T22:44:15","guid":{"rendered":"http:\/\/neosmart.net\/blog\/2007\/we-love-you-rinbot\/"},"modified":"2013-08-26T18:14:56","modified_gmt":"2013-08-26T23:14:56","slug":"we-love-you-rinbot","status":"publish","type":"post","link":"https:\/\/neosmart.net\/blog\/we-love-you-rinbot\/","title":{"rendered":"We Love You, Rinbot!"},"content":{"rendered":"<p>It&#8217;s not often that we openly sympathize with the virii writers, but this time, it&#8217;s too good to be true. Rinbot Generation 7 is targeting Symantec [[SYMC]] and Symantec users &#8211; and that&#8217;s a good thing.\n<\/p>\n<p>Anyone using Symantec&#8217;s anti-virus software from 2006 and hasn&#8217;t updated it is vulnerable to a very powerful <strong>complete remote control<\/strong> vulnerability. What does Symantec have to say about it?\n<\/p>\n<blockquote dir=\"ltr\" style=\"MARGIN-RIGHT: 0px\">\n<p>Users of Symantec AntiVirus Corporate Edition and Symantec Client Security should apply the appropriate update as soon as possible, Vincent Weafer, a senior director at Symantec Security Response, said Tuesday. However, because there are no known attacks that exploit the flaw, the need to patch is not urgent, he added.\n  <\/p>\n<\/blockquote>\n<p dir=\"ltr\">That&#8217;s an excerpt from a&nbsp;<a href=\"http:\/\/news.com.com\/Symantec+patches+antivirus+worm+hole\/2100-1002_3-6078160.html\" rel=\"follow\">c|net article<\/a> dating all the way back to May of 2006 &#8211; a year ago now. Thanks to Symantec&#8217;s non-chalance and Turner Broadcasting Systems&#8217; (the owners of CNN) complete disregard for standard IT procedures, <a href=\"http:\/\/news.com.com\/2061-10789_3-6163557.html\" rel=\"follow\">they were infected earlier today<\/a> by <strong>Rinbot<\/strong>.\n<\/p>\n<p><!--more--><\/p>\n<p dir=\"ltr\">Rinbot&#8217;s nothing new, it&#8217;s an ancient virus that has found a new way of entering your PC: through Symantec&#8217;s software. Instead of viruses attacking Microsoft from left, right, top, and under for no truly good reason, here&#8217;s a virus that does some good in the world: it brings attention to a billion-dollar monopoly that has been gambling with the security of its users for years now.\n<\/p>\n<p dir=\"ltr\">What kind of anti-virus product only updates once a week (on Wednesdays). What kind of company labels a complete remote control vulnerability as &#8220;unimportant?&#8221; And most importantly, what kind of <strong>security company<\/strong> lets its product remain installed without updating?\n<\/p>\n<p dir=\"ltr\">Shame on Time Warner for hiring IT Guys that don&#8217;t know how to pick a decent anti-virus solution, and for being too thick to realize they need to <strong>manually update<\/strong> Symantec&#8217;s software. And shame on Symantec for doing this to its customers. Wake up people, Symantec&#8217;s not in it for your security, only your money.\n<\/p>\n<p dir=\"ltr\">Earlier this week, Symantec released <a href=\"http:\/\/www.computerworld.com\/action\/article.do?command=viewArticleBasic&amp;taxonomyName=roi&amp;articleId=9011760&amp;taxonomyId=74\" rel=\"follow\">a public press statement<\/a> that they were&nbsp;&#8220;confident users would see beyond the price&#8221; of their new 360 system protection software&#8230;. 2 days later: Symantec <a href=\"http:\/\/www.neowin.net\/news\/symantec-incorrectly-flags-yahoo-mail-as-a-virus\" rel=\"follow\">labels Yahoo! Desktop as a virus<\/a> &#8211; an &#8220;honest mistake.&#8221;\n<\/p>\n<blockquote dir=\"ltr\" style=\"MARGIN-RIGHT: 0px\">\n<p dir=\"ltr\">&#8220;There will definitely be some price sensitivity&#8221; on the part of users, said Mark Kanok, 360&#8217;s product marketing manager. &#8220;But the breadth and execution of Norton 360&#8217;s functionality is greater [than OneCare&#8217;s]. And I don&#8217;t think anyone should undersell the intelligence of users.&#8221;\n  <\/p>\n<\/blockquote>\n<p dir=\"ltr\">If anyone is underselling the intelligence of users, it&#8217;s Symantec. Can they really believe that people will forever remain enchanted by their flourescent yellow coloring and not immediately switch to better alternatives, chief of which is <a href=\"http:\/\/nod32.com\" rel=\"follow\">NOD32<\/a>?<sup id=\"rf1-378\"><a href=\"#fn1-378\" title=\"NeoSmart Technologies recommends NOD32 for all home and business users&rsquo; AV protection needs. It really works.\" rel=\"footnote\">1<\/a><\/sup>\n<\/p>\n<p dir=\"ltr\">Anyone willing to bet how long the big yellow bubble grows until it pops? Or has it already?\n<\/p>\n<p dir=\"ltr\"><strong>Update: <\/strong><a href=\"http:\/\/money.cnn.com\/2007\/03\/01\/news\/companies\/virus\/index.htm?cnn=yes\" rel=\"follow\">According to CNN<\/a>, the authors of Rinbot don&#8217;t want it called that, but we have no idea what they would like, so that&#8217;s why we&#8217;re using that name here.<\/p>\n<hr class=\"footnotes\"><ol class=\"footnotes\"><li id=\"fn1-378\"><p>NeoSmart Technologies recommends NOD32 for all home and business users&#8217; AV protection needs. It really works.&nbsp;<a href=\"#rf1-378\" class=\"backlink\" title=\"Jump back to footnote 1 in the text.\">&#8617;<\/a><\/p><\/li><\/ol>","protected":false},"excerpt":{"rendered":"<p>It&#8217;s not often that we openly sympathize with the virii writers, but this time, it&#8217;s too good to be true. Rinbot Generation 7 is targeting Symantec [[SYMC]] and Symantec users &#8211; and that&#8217;s a good thing. Anyone using Symantec&#8217;s anti-virus &hellip; <a href=\"https:\/\/neosmart.net\/blog\/we-love-you-rinbot\/\">Continue reading <span class=\"meta-nav\">&rarr;<\/span><\/a><\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"jetpack_post_was_ever_published":false,"_jetpack_newsletter_access":"","_jetpack_dont_email_post_to_subs":false,"_jetpack_newsletter_tier_id":0,"_jetpack_memberships_contains_paywalled_content":false,"_jetpack_memberships_contains_paid_content":false,"footnotes":""},"categories":[1],"tags":[268,269,267,271,266,484,270],"class_list":["post-378","post","type-post","status-publish","format-standard","hentry","category-software","tag-anti-virus","tag-cnn","tag-nod32","tag-rinbot","tag-symantec","tag-virus","tag-viruses"],"aioseo_notices":[],"jetpack_featured_media_url":"","jetpack_shortlink":"https:\/\/wp.me\/p4xDa-66","jetpack_sharing_enabled":true,"_links":{"self":[{"href":"https:\/\/neosmart.net\/blog\/wp-json\/wp\/v2\/posts\/378","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/neosmart.net\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/neosmart.net\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/neosmart.net\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/neosmart.net\/blog\/wp-json\/wp\/v2\/comments?post=378"}],"version-history":[{"count":1,"href":"https:\/\/neosmart.net\/blog\/wp-json\/wp\/v2\/posts\/378\/revisions"}],"predecessor-version":[{"id":2251,"href":"https:\/\/neosmart.net\/blog\/wp-json\/wp\/v2\/posts\/378\/revisions\/2251"}],"wp:attachment":[{"href":"https:\/\/neosmart.net\/blog\/wp-json\/wp\/v2\/media?parent=378"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/neosmart.net\/blog\/wp-json\/wp\/v2\/categories?post=378"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/neosmart.net\/blog\/wp-json\/wp\/v2\/tags?post=378"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}