Tag Info

New answers tagged


What are the common vectors for installing rootkits? (And if I understand correctly, this would include MBR as well as BIOS? So same question for each.) Mainly by hooking the system calls. I suggest you read a book about this because I cannot cover it all here. I suggest: practical malware analysis and rootkit arsenal How common are rootkits that ...


No, absolutely not. As your trusted system requests the files from the untrusted system, a root kit can hide all bad files. The even can just be locked by a process, so your trusted client cannot access the files. If we exclude the chance of a modified bios or hdd firmware, you can run a live system from usb and export the drive using samba, nfs or sshfs.

Top 50 recent answers are included