Per the Sunbelt Blog: Microsoft’s Windows operating system, running on a 64-bit machine provides enhanced security with driver signing of system and low level drivers. This policy, called the kernel mode code signing policy, disallows any unauthorized or malicious driver to be loaded [1]. The TDL4 rootkit bypasses driver signing policy on 64-bit machines by [...]
Archive | Malware RSS feed for this section
How the TLD4 Rootkit Bypasses Driver Signing on Windows 64-bit
Please +1 this post if you like me :)
Kaspersky Website Serves Up Malware
My first reaction to this was….”oooooo….that’s bad”. Anyway, check out the article. http://www.examiner.com/technology-in-national/security-firm-kaspersky-serves-up-malware-from-its-site
Combofix Not As Effective As It Once Was
I don’t know if anyone else has noticed but for the last 2-3 weeks Combofix has been more or less….a waste of time, in fact I just had to resort to my UBCD4Win on every malware appointment. The latest round of rootkits seem to be evading it rather well. Also, I’ve really had to rely [...]




