Tagged Questions
14
votes
3answers
528 views
Why do rootkits hide in drivers?
A lot of rootkits for Windows (maybe even Linux?) do hide in drivers. Why is that?
One reason I can think of is that using a driver they run in kernel mode and have full system access, but aren't ...
1
vote
0answers
108 views
Hidden Registry Strings - possible rootkit? [closed]
Win server 2003 R2 SP2 - no noticeable issues on the machine. When I create new strings in regedit, I hit refresh and they are gone! I try to re-add and it complains the string already exists.
I am ...
7
votes
5answers
557 views
Detecting malware-infected USB drives
I'm about to distribute some relatively cheap promotional usb drives to some of my company's clients. I'm fairly confident the company I purchased them from wouldn't intentionally implant malware on ...
11
votes
6answers
687 views
Why do malware creators use such clever technologies for such silly purposes?
Some days ago I got infected by a malware, probably something new and very clever, as it went in unstopped and no scanning tool was able to detect it afterwards (see this question).
It was a ...
7
votes
4answers
339 views
Unknown malware, how to report it and whom to report it to?
I'm a professional Windows system administrator, but I've been caught off-guard (or maybe some malware writer has been very clever) and I caught some unknown malware on my home computer (Windows 7 x64 ...
