Tuesday, August 09, 2005

Microsoft Targets Another Rootkit For Removal

Via TechWeb News.

Microsoft on Tuesday posted the monthly update to its Windows Malicious Software Removal Tool, and added four new Trojan horses and one new rootkit to those it eradicates.

The for-free program now detects and deletes the Wootbot, Purstiu, Optixpro, and Optix Trojans, and the Hacty rootkit.

Rootkits are especially dangerous, because they can hide the existence of other malware on a computer by modifying file data, Windows registry keys, or active processes, all of which are used by code detection software to spot worms, viruses, and spyware that's been installed on a PC.

Hacty is the third rootkit-enabled piece of malicious code that Microsoft has added to the tool's library. It first included one in the line-up of malware it seeks and destroys in April 2005.

Microsoft's removal tool can be downloaded from its Web site; users who have Windows' Automatic Updates feature enabled receive it automatically.

0 Comments:

Post a Comment

<< Home