Symantec Update Breaks Windows

Aron Schatz
May 24, 2007

Page All:

Page 1
Do you trust anti-virus software? Your trust may be misplaced. A live update from Symantec has broken Windows installs in China.


According to the Chinese Internet Security Response Team (CISRT), users of Norton Antivirus, Norton Internet Security 2007 and Norton 360 who installed an antivirus signature update released by Symantec on May 17 could not reboot their PCs. The update reportedly mistook two Windows system files--"netapi32.dll" and "lsasrv.dll"--as the Backdoor.Haxdoo Trojan horse. The two files were subsequently quarantined. CISRT said the flawed Symantec update only affects users of the Simplified Chinese version of Windows XP Service Pack 2 that have been patched with a particular Microsoft software fix available since November 2006. CISRT noted that this issue has been "huge." According to, which is part of China's largest national TV network, the problem has affected millions of PCs and was not completely resolved as of Wednesday.


Medium Image View Large