rustock

TechRepublic Resources

• sort by:
• Relevance
• Date
• Popularity

Rootkits get better at hiding

More to comeEach month there is a new more improved method of hiding malware. As soon as one method is discovered the rootkit writers find another method.When scanning for rootkits one will have to use a few of the current rootkit scanners because each use different methods of finding rootkits....

Tags: Rootkits, rootkit

Discussion threads 2006-07-20

Srizbi Botnet: Life after McColo

After McColo was shut down, the Srizbi botnet, a major source of spam and over 300,000 strong, was effectively quieted. Not for long, Spam levels eventually started ramping back up. How is that possible with no command and control servers? Read on to find out. by Michael Kassner

Tags: Command, Bot, Domain Name, McColo, Rustock, Domain Names, Servers, Internet, Hardware, Michael Kassner

Blog posts 2008-12-01

Additional Resources

"Invisible" rootkit heralds trouble ahead..

I recently read an interesting article concerning a new form of rootkit which is much more difficult to detect (I thought rootkits were already difficult to detect!), the bit that caught my attention was the fact that this rootkit was already tested on a windows vista beta 2 machine which...

Tags: rootkit, windows, security, virus, threat, malware, vista, rootkits, UncleRob, BlackLight

Discussion threads 2006-07-18

Botnets: Bigger isn't always better

Botnets are becoming more sophisticatedLike most malware, rootkits and botnets are becoming increasing sophisticated. Single purpose construction allows a more pointed attack vector. I recently had a close call with Rustock, one of the new and improved rootkits, have you had any experiences related to botnets? I'd very much...

Tags: Spyware, adware & malware, Cyberthreats, Rootkits, Scanners, SECURITY, Viruses and worms, malware, attack, Botnets, Linux

Discussion threads 2008-10-27

Srizbi Botnet: Life after McColo

The botnets are returningBoth Srizbi and Rustock botnets are regaining strength. Security experts are trying to keep them off line, but colo hosting sites are willing to provide servers for command and control of the botnets. The ability to point to new command and control servers is a very sophisticated...

Tags: botnet, bot, McColo, Srizbi Botnet, domain

Discussion threads 2008-12-01

Spam Relay: Up close and personal

Exchange meets RustockWell, I learned first hand what it means to get rooted. I'm definitely humbled, Rustock is quite impressive and only by shear luck was I able to remove it. Have any of you been compromised by a rootkit, especially one focused on SPAM relay? That adds all sorts...

Tags: Rootkits, Phishing, E-mail, Cyberthreats, Viruses and worms, SECURITY, antivirus, Antivirus2009, Spam Relay, Up Close and Personal, Rustock, server

Discussion threads 2008-10-21

After Windows XP Loads, it reboots. Details inside.

After entering safe mode and selecting "Disable system restart after failure" The following numbers are displayed on the bottom of my screen:STOP: 0x0000008E (0xC0000005, 0x8062C26B, 0xB92CE99C, 0x00000000)If anyone could point me in the right direction to fixing this issue it would be greatly appreciated.From what i can gather, it is...

Tags: Microsoft Windows, motherboard, BIOS, memory, RAM, Microsoft Windows XP

Discussion threads 2008-09-21

Update Nod32 Offline

NOD32 - v.3969 (20090327)Virus signature database updates:PDF/Exploit.Pidief.ODA, PDF/Exploit.Pidief.ODB, PDF/Exploit.Pidief.ODC, Win32/Adware.Antivirus2008, Win32/Adware.GooochiBiz (4), Win32/Adware.InternetAntivirus (2), Win32/Adware.MalwareDefender2009, Win32/Adware.MSAntispyware2009, Win32/Adware.Virtumonde (2), Win32/Adware.Virtumonde.NEF (2), Win32/Adware.Virtumonde.NEK (2), Win32/Adware.XPPoliceAntivirus (2), Win32/Agent.AEXS, Win32/Agent.PCG (6), Win32/Agent.WPI (2), Win32/AutoRun.FakeAlert.AF, Win32/AutoRun.FlyStudio.EN, Win32/AutoRun.FlyStudio.EO, Win32/Delf.ODS (2), Win32/Delf.ODT, Win32/FlyStudio.NIO, Win32/FlyStudio.NIP (3), Win32/Injector.MD, Win32/Kryptik.LL, Win32/Olmarik.FT (4), Win32/PSW.LdPinch.NEL, Win32/PSW.LdPinch.NJG, Win32/Rustock, Win32/Spy.Banker.QEP, Win32/Spy.Banker.QNJ, Win32/TrojanClicker.Delf.NDJ, Win32/TrojanClicker.Delf.NDK, Win32/TrojanClicker.Delf.NDM,...

Tags: bugmenot@..., NOD32

Discussion threads 2009-03-28