rootkit | DataProtectionCenter.com

A Retrospective “TOuR” of Backdoor.Bifrose

21

Jun

2011

Backdoor.Bifrose first came to our attention in 2004. It is a remote administration backdoor tool that allows unauthorized access to a compromised computer. Once installed, the malware has a range of capabilities, including: running processes, opening windows, opening a remote shell, stealing system information (such as passwords, and video game serial numbers), generating screen captures, […]

Category General Written by Symantec Security Response Blog 0 Comments

Remote rootkit detection

14

Jun

2011

“A rootkit is a set of programs and code that allows a permanent or consistent, undetectable presence on a computer.” (Greg Hoglund, James Butler in ‘Rootkits: subverting the Windows kernel’.) Rootkits are some of today’s most difficult threats to detect and remove. A rootkit can hide itself and other components from the Windows file system […]

Category Security Written by Malware Diaries 0 Comments

TDL4: new bootkits stepping out

31

May

2011

My colleague Aleks Matrosov has come across an interesting if uncomfortable post on a Russian language forum, advertising a "Boot loader for drivers" currently under test that doesn't require a Digital Signature driver, which sounds very much like our old friend TDL4. This metamorphic malware (each build generates a fresh binary) loads before the start of PatchGuard. It's […]

Category General Written by ESET ThreatBlog 0 Comments

The Latest in IT Security

Posts Tagged ‘rootkit’

A Retrospective “TOuR” of Backdoor.Bifrose

TDL4: new bootkits stepping out

Categories

Featured

Archives

Latest Comments

About Us

Contact Us