Boot Record Rootkit Threatens Vista, XP, NT

Paul sends us word on a new exploit seen in the wild that attacks Windows systems completely outside of the control of the OS. “Unfortunately, all the Windows NT family (including Vista) still have the same defense flaw — MBR [Master Boot Record] can be modified from usermode. Nevertheless,

MS blocked write-access to disk sectors from userland cipher on VISTA after the pagefile

attack, however, the first sectors of disk are still unprotected… At the end of 2007 stealth MBR rootkit was discovered by MR Team members (thanks to Tammy & MJ) and it looks like that way of affecting NT systems could be more common in near future whether MBR stays unprotected.”

Read […]

Orginal post by kdawson

Share and Enjoy: These icons link to social bookmarking sites where readers can share and discover new web pages.
  • Digg
  • del.icio.us
  • Netvouz
  • DZone
  • ThisNext
  • MisterWong
  • Wists
Related Articles
  • Vista sets 2007 land-speed record for copying and deleting
  • Speed Up Windows Vista
  • Creepy Robot Threatens to Destroy Humanity
  • Microsoft stops selling Windows 3.x
  • Laptops Need Faster Bootup Times
  • Core i7 motherboard sticker threatens overclockers
  • Windows Coming to Low-Cost XO Laptop
  • Microsoft denies working with OLPC on dual-boot Windows OS
  • Will Microsoft Buy Research in Motion?
  • SanDisk: Vista Shortfalls Limit Use of SSDs
  • No comments yet. Be the first.

    Leave a reply