mode code | DataProtectionCenter.com

Win32/Gapz: New Bootkit Technique

27

Dec

2012

In the last couple of years a number of new bootkits have appeared in the wild targeting the Microsoft Windows platform. Among the most prominent examples are TDL4, Olmasco and Rovnix. These each employ different ways of infecting the system by means of modifying either the MBR (Master Boot Record) or the VBR/IPL (Volume Boot […]

Category General Written by ESET ThreatBlog 0 Comments

Olmasco bootkit: next circle of TDL4 evolution (or not?)

18

Oct

2012

ESET – Olmasco (also known as SST, MaxSS) is a modification of the TDL4 bootkit family that we’ve been aware of since summer 2011. We started to track a new wave of activity from a new Olmasco dropper at the end of this summer. This bootkit family was the second to use VBR (Volume Boot […]

Category General Written by ESET ThreatBlog 0 Comments

W32.Xpaj.B is a File Infector with a Vengeance

02

May

2012

We have recently come across a new wave of W32.Xpaj.B samples. We first met this complex file infector virus in 2009, and since then the threat has been operating and mounting an ad-clicking scam in order to generate revenue. After a few months of rest, the threat seems to be back. Figure 1. Increase […]

Category General Written by Symantec Security Response Blog 0 Comments

The Latest in IT Security

Posts Tagged ‘mode code’

Win32/Gapz: New Bootkit Technique

Olmasco bootkit: next circle of TDL4 evolution (or not?)

W32.Xpaj.B is a File Infector with a Vengeance

Categories

Featured

Archives

Latest Comments

About Us

Contact Us