Slashdot Mirror
Microsoft Confirms Update-Linked BSODs Required Compromised Machines
Trailrunner7 writes "Microsoft on Thursday confirmed that the blue screen of death issues that affected a slew of users after the latest batch of Patch Tuesday updates is the result of an existing infection by the Alureon rootkit. There was widespread speculation after the patch release that simply installing the MS10-015 update was causing the BSOD condition on some Windows 32-bit machines. However, Microsoft said at the time this was not the case and started an investigation into the problem. In an advisory released Thursday, the company said that it now was confident that the restart problem is being caused by the Alureon rootkit." That seems a harsh way to find out that your Windows machine has been rooted.
The rootkitted library was not a part of the update, just one of the libraries it was using. You should demand that your rootkit vendor stick to published APIs to avoid this in the future.
That seems a harsh way to find out that your Windows machine has been rooted.
What do you want? Some cuddling before breaking the bad news?
"Sweety.. you got rooted" .. as it goes in the _wrong_ hole.
Prompt, efficient and convienient! Where can I buy this Root Kit?
Copyright 2010. All rights reserved. This comment may not be copied in any way including, but not limited to caching.
So is Microsoft rushing out an update to their Malicious Software Removal Tool to clean up this rootkit?
Oh, say does that Star-Spangled Banner entwine / The myrtle of Venus with Bacchus's vine?
This was a zero-day exploit that the virus writers didn't know anything about.
They got the patch out as quickly as they could.
Dear Microsoft:
Please continue to turn off user's computers which are compromised. If at all possible, please display a message directing anyone in my zip code that I'm available to fix it for them at competitive prices. I really need the work.