| CPU | Windows XP: 600 MHz Windows Vista: 1 GHz |
|---|---|
| Memory | Windows XP: 256 MB Windows Vista: 1 GB |
| Hard Drive Space | 50 MB |
| Other | CD-ROM/DVD-ROM drive or an Internet connection |
Norton AntiBot, developed bySymantec, monitored applications for damaging behavior. The application was designed to prevent computers from being hijacked and controlled byhackers. According to Symantec, over 6 million computers have been hijacked, and the majority of users are unaware of their computers being hacked.
AntiBot was designed to be used in conjunction with otherantivirus software. Unlike traditional antivirus products, AntiBot does not usesignatures; there is a delay between when a vendor discovers a virus and distributes the signature. During the delay, computers can be affected. Instead, AntiBot attempts to identify a virus through its actions; viruses are malicious by nature. However, AntiBot was not intended to replace an antivirus product. The program uses technology licensed from Sana Security.
The product has been discontinued after AVG acquired Sana Security in January 2009, developing a standalone program similar to AntiBot called AVG Identity protection, which was also discontinued and integrated in AVG Internet Security 2011. Product updates and technical support were available from Symantec for one year after a customer's last purchase or renewal.[1]
Ed Kim, director of product management at Symantec, highlighted the rise ofbotnets. A botnet is a collection of compromised computers, known as bots, which hackers usually control for malicious purposes. Two main uses of botnets includeidentity theft ande-mail spam.[2] Kim cited a 29 percent increase of bots from the first half of 2006 to the second half. In all, there were six million active bots by the end of 2006.[3]
On 7 June 2007, Symantec released a beta version of Norton AntiBot.[4] AntiBot was designed to supplement a user's existing antivirus software. Unlike traditional antivirus software, AntiBot does not usesignatures to identifymalware. Instead, it monitors running applications for damaging or malicious behavior, licensing technology from Sana Security.
AntiBot can also supplementSONAR technology by Symantec, found inNorton AntiVirus 2007,Norton Internet Security 2007, andNorton 360. Similar to AntiBot, SONAR monitors for malicious behavior. However, SONAR does not run continuously in the background; only during a virus scan in those specific products.[5]
AntiBot was made available to the general public on 17 July 2007. On 16 January 2009, AVG announced their plans to acquire Sana Security were finalized. J.R. Smith,CEO ofAVG Technologies, highlighted the 40,000 unique malware samples their analysts see each day. He noted the time frame between when a sample is analyzed and a signature is created, emphasizing the need for "instant protection", since hackers are constantly modifying their malicious software to evade signature detection. Often, there are several strains, or variations, of one virus, each with a different classification and signature.[6][7]Symantec confirmed ceasing sales and distribution of Norton AntiBot in early 2009. Product help and updates would still be available for one year following a customer's last purchase or renewal.[8]
PC Magazine noted AntiBot's above average ability to identify malicious programs based on behavior and the fact it did not mistakenly mark a legitimate program as malicious during testing. However, on some infected systems AntiBot failed to install or causedblue screens because it failed to completely remove a virus.[9]
A technical limitation is that AntiBot cannot detect inactive malware since there is no behavior for the software to monitor.[10]
