The Network Security. Org

RSS Feed

← Security holes in VLC media player patched Microsoft Patches 12 Office Security Holes →

Malware removes rival rootkits

March 4th, 2008 · No Comments


Miscreants have created a strain of malware capable of removing rootkits from compromised PCs, only to install almost undetectable backdoor code of its own. The Pandex Trojan stops previously installed rootkits from working by removing their hooks into system calls.

Pandex then installs its own rootkit component, detected by Trend Micro as Pushu-AC. Rootkits are a type of malware that hide their presence on infected PCs, making them more dangerous than typical viruses. By operating below the level of traditional malware scanning tools, rootkits are able to carry out covert functions, for example keystroke-logging, without detection. Malware removes rival rootkits | The Register

From around the Web

  • Advertisments