Thursday, July 13, 2006

Slashdot | Windows Rootkit Wars Escalate

Slashdot | Windows Rootkit Wars Escalate

"The rootkit wars have started to escalate with a rootkit named Rustock which is able to remain hidden from all the popular anti-rootkit tools. It uses some new techniques including not only putting itself in a ADS (NTFS alternate data stream) which isn't seen by normal file system enumeration tools, but even blocks ADS aware tools from seeing the stream. Works in Vista, too! Analysis in both Symantec and F-Secure blogs."

0 Comments:

Post a Comment

<< Home

Top Stories on Diggs at the moment