Rustock.C

[Mehdi Asgari]

http://www.rootkit.com/newsread.php?newsid=879

عجب هیولاییه:

Rustock.C is the most powerful rootkit, ever been found under Windows up to the current time. Its key features which make it so powerful and so undetectable are:

1. Most advanced polymorphic protector ever seen in the malware area up to current date
2. Stealth by design implementation
3. Anti AntiRootkits part
4. Extremely effective firewall bypassing
5. Extremely effective support management

Rustock.C is the first full functional kernel mode virus.

AntiRootkits can’t see these rootkit because: They don’t know for what (and how) they should look for.

[Mehdi Asgari]

اینم تکمیلیه ای بر پست قبل:
http://www.rootkit.com/newsread.php?newsid=885