Beyond Rootkits: World's First Standalone Kernel Mode Bot?

Posted by zanek on Apr 7, 2006 12:47 PM
By Email Battles
Mail this story
Web version

A new kernelmode rootkit has the ability to communicate via Internet Relay Chat without relying on outside applications. This represents a dangerous escalation in Windows rootkit ability, as previous kernelmode device drivers required help from usermode programs. While the IRCbot released is non-destructive, it can be easily enhanced. The developer has made the download available as a Visual Studio 2003 project.

Full Story

Printed at http://lxer.com/module/newswire/view/57978/index.html