Microsoft Malware Protection Center: Some Observations on Rootkits

/Home/Internet Security: Blogs/Internet Security: Microsoft blog/Microsoft Malware Protection Center

by mmpc2
7 Jan 2010

Getting hit by a live rootkit infection is among the more unfortunate fates that can befall an unsuspecting computer user. A rootkit burrows deep into the system, modifying it at a low-level in order to hide itself and other malware, and from there fights off attempts at deactivation and removal. While real-time protection can block the rootkit from becoming active to begin with, if the computer is already infected by a rootkit, things get more interesting. Antimalware technologies must use sophisticated techniques to scan for and detect, and finally to remove, a lurking rootkit. In reviewing the telemetry we receive from some of our antirootkit-related features, a few interesting things stand out.

Click the URL above to read the full article