Windows Rootkit Wars Escalate
,----[ Quote ]
| "The rootkit wars have started to escalate with a rootkit named Rustock
| which is able to remain hidden from all the popular anti-rootkit tools.
| It uses some new techniques including not only putting itself in a ADS
| (NTFS alternate data stream) which isn't seen by normal file system
| enumeration tools, but even blocks ADS aware tools from seeing the
| stream. Works in Vista, too!..."
`----
http://it.slashdot.org/article.pl?sid=06/07/13/1456217&from=rss
|
|