Norton Product Tamper Protection support for Vista 64-bit

Norton Security | Norton Internet Security
1

The 16.5 patch contains many changes and fixes for the 2009 products that some customers were seeing. Here is a list of some of the changes:
...
...
- Added Norton Product Tamper Protection support for Vista 64-bit
...
...

Vista 64-bit has patchguard, which prevents patching of kernel functions and objects; Microsoft has stated that if ways to bypass patchguard are discovered they will make updates to prevent them. As far as I know Norton Product Tamper Protection (32-bit) functions primarly by patching kernel functions.

 

How does Norton Product Tamper Protection function on 64-bit?

2

Only some of the tamper protection is implemented by patching the dispatch table on non-patch guard systems. With patch guard we can’t do that but Microsoft has added/documented other ways to monitor some of these same events and we use those instead. We also use some alternative techniques to protect the product.

3

So, basically, what Norton does not do is being done by the OS-integrated Patch Guard of 64-bit OSs?

4

Sorry to butt in but wanted to say thnaks for fixing the Task Manager shut down ability.  Previous versions you could shut this down from Task Manager; now you can not.  Whooo!!!  Thanks.

5
RavenMacDaddy wrote:
So, basically, what Norton does not do is being done by the OS-integrated Patch Guard of 64-bit OSs?

I don't think so. Patch Guard doesn't do anything to prevent tampering of a Norton product. There are, however, new APIs that allow us to monitor and alter the behavior of applications that attempt to tamper with the product and we use those instead of using the old technique of patching the service dispatch table.

Message Edited by reese_anschultz on 03-20-2009 11:18 AM