Skip to main content
3 events
when toggle format what by license comment
Sep 8, 2016 at 16:19 comment added Chad Baxter I used to be a part of an OffSec forum that has since gone to trash. But most of the rootkit code shared on that forum required a restart of the system to hook deep enough into the kernel. Has something to do with the windows login screen running as SYSTEM (windows specific example).
Sep 5, 2016 at 22:04 comment added user58446 It would seem to be difficult to ascertain the true threat level before damage would be done in either case. Ransomware may very well be tricking you into restarting your computer. Do you have a source regarding the Ring 0 protection mechanisms in relation to a restart?
Aug 15, 2016 at 17:01 history answered Chad Baxter CC BY-SA 3.0