Microsoft Rootkit Revealer is intended for use by system administrators and software developers. While being a correct concept, this tool fails on too many levels. Microsoft tried to address the problem by releasing their own Rootkit Revealer. armor race and your PC is the firing range. Antivirus programs use the very functions that are intercepted by the rootkits specifically for the purpose of deceiving antivirus. The problem is that modern antivirus programs try to detect rootkits at the time when they are already active. A rootkit could install into your system and fool the antivirus system by hiding itself. Today, using an antivirus does not guarantee complete safety. But time has passed, and now there's a new wave of viruses that can work on Windows and hide their presence even more efficiently than the stealth viruses of the old days.
Old viruses did not run under the new operating system, and it wasn't easy to develop simple hacks to intercept system calls in Windows. When computers evolved, Windows replaced the DOS. You could view an infected file right in front of your eyes and see nothing but legit code! These viruses were called 'stealth' in those days. They did it by intercepting some system calls that were responsible for reading the files, and lied to the system by filling these calls with fake information. In the early days of personal computers, in the age of the DOS command-line operating system, there were viruses that hid their presence from the users and anti-virus programs. There's nothing new under the sun, and rootkits are no exception.
0 kommentar(er)
