http://it.slashdot.org/it/05/02/18/1920244.shtml?tid=201&tid=218
Posted by Zonk on Friday February 18, @02:57PM
from the they-have-the-technology dept.
darkjedi521 writes "The Inquirer has a story that the next generation of Windows spyware and exploits are starting to make use of "kernel rootkits". A paper at Microsoft Research has details on a prototype detection tool. Computerworld has more details, as well." From the article: "Newer rootkits can intercept system calls that are passed to the kernel and filter out queries generated by the software. This makes them invisible to administrators and to detection tools..."