Hackers "fix" XP BSoD rootkit February 16th, 2010 Answered

An update released by Microsoft this month (MS10-015) broke XP machines that were infected with the TDL3 rootkit (also known as TDSS and Tidserv and many other names - more info here).

Full story (Adrian Kingsley-Hughes) Blog

Tags:hacker fix rootkit xp bsod

Comments

The forums are retiring in 2021 and are now closed for new topics and comments.

Lithium Rain

11 years ago

In other news, Linux users continue to remain operational a rootkit-free! :D

Goodhart

Reply 11 years ago

Unless you allow access to your computer, like if you leave your home for any length of time ;-) Even a locked, closed door, can be opened when one is resourceful enough ;-)

Lithium Rain

Reply 11 years ago

Heh. Not so much; it's password locked - unless you're a whiz with coldboot attacks, you're not gettin' nuthin'. :)

Goodhart

Reply 11 years ago

*chuckle* I have seen ways in, not overly complicated ways in, but it IS possible to make it nearly impossible.....however, the system isn't much good then. OR you can encrypt the enitire HD....good luck with that.
No, I am not overly familiar with all the ways in, but a memory stick and one's own copy of the OS and a few other tools, make for more pleasant experience, from what I have read breifly on the subject.

Lithium Rain

Reply 11 years ago

Actually encrypting the whole disk isn't that hard, I've even got the tools but am too lazy to get around to testing it since there's no real need...

It's not hard to find the tools to do cold boots, either. I had a stick necessarily configured to boot and dump the ram, but wound up getting distracted and never playing with it. :)

Goodhart

Reply 11 years ago

Not hard to "do" (encryption) but sometimes it can slow down processing a bit.

If you use a good encryption tool though, it doesn't matter whether you have MSe, Linux, or OSx, you can pretty much secure the HD.

Yeah, I'd like to get hold of one of those IRON key sticks, not for hacking purposes, but for quite the opposite, really.

Lithium Rain

Reply 11 years ago

Not for hacking purposes? You want to be a cracker? ;)

Goodhart

Reply 11 years ago

It would be for preventing being "cracked" ;-) Besides, most of my British friends already think I AM crackers LOL