Slashdot Mirror


No Defense Against Windows Rootkits?

An anonymous reader writes "Spyware bad guys (and also phishing people) started using rootkits technology to stay hidden in a system. The problem is that at the moment the technology to defend a Windows system from these things is very poor. In fact antivirus companies have just started adding basic anti-rootkits technology. So the problem is serious, and well outlined by this question: Is the closed source code of Windows preventing us from actively defending our systems?"

4 of 510 comments (clear)

  1. Sysinternals... by traveyes · · Score: 0, Redundant

    has a "revealer" and a great write up

    Sysinternals RootkitRevealer

  2. Why hasn't Microsoft addressed this earlier? by haruchai · · Score: 0, Redundant

    After all, they launched their much-touted Secure Computing almost 4 years ago.
    I guess that a complete redesign would be needed but that might break backward compatibility.
    Of course, some of this might be addressed in Vista but that will leave a lot of older computers out in the cold.

    --
    Pain is merely failure leaving the body
  3. Re:I'm not sure admin is such a big deal by bluffcityjk · · Score: 0, Redundant

    You mean BritaneySperesNaked!!!.exe had an embedded rootkit!? Shit!

  4. Re:It works both ways, but it's worse for MS by Jeff+Hornby · · Score: 0, Redundant

    I re-read the parent and I can't see where he/she said anything about only doing this on a server.

    In fact, I wouldn't consider a server "my system". When I talk about "my system", I'm referring to my desktop not to one of the servers in the backroom (which are really everybody's system).

    --
    Why doesn't Slashdot ever get slashdotted?