Welcome Guest ( Log In | Register)



 
Reply to this topicStart new topic
> Rootkits, the security threats that no one's heard of
gaurdro
post Aug 18 2006, 01:56 AM
Post #1


Newbie [Level 3]
***

Group: Members
Posts: 42
Joined: 20-April 06
Member No.: 22,190



a security threat to be concerned with is the increasing prevalence of viruses containing advanced rootkits to hide their actions or data on the computer. even from the anti-stuff tools.

a rootkit was originally a name for tools that hackers/crackers would use to maintain root on unix/linux machines. root is the uber user with all the permissions on a linux box. on windows these tools can be used to hide data on the harddrive and in the registry by manipulating the way the data is stored. THe windows api(the thing windows uses to communicate to the hardware) reads things in certain ways but the data/structures can be vastly different. an example of this is in the registry the data is stored as numbered strings while the api reads them as null terminated string.
the data a rootkit would write is:

/hkey_something_or_other/folder/"data that is seen\x0(the null character)data i want hidden"

and windows will return:

/hkey_something_or_other/folder/"data that is seen"

the rootkit reads the raw data and bypasses the windows api so it can read the full data. these programs are everywhere already. windows even has one to deal with the special files on an ntfs filesystem and another to deal with windows update. i've heard that there are many tools to find these things but as of yet i haven't looked into any of them.

Notice from truefusion:
Moved to the Security Issues & Exploits forum.
Go to the top of the page
 
+Quote Post
TypoMage
post Aug 18 2006, 05:25 AM
Post #2


Master of All Typos
*********

Group: Members
Posts: 621
Joined: 30-July 06
From: Earth, Usa, Maine, Waterford,
Member No.: 27,507
Spam Patrol



Hmm hidig something on your harddrive. But it is impossible to make it completely untrackable. Right? Well I do not think that you can hide anything. Like when you delete something then you empty your trash bin. There is still a way to retrive that data. right? huh.gif
Go to the top of the page
 
+Quote Post
gaea
post Aug 19 2006, 05:17 AM
Post #3


Super Member
*********

Group: Members
Posts: 205
Joined: 14-March 06
From: Vermont or Boston (USA)
Member No.: 20,077



QUOTE(TypoMage @ Aug 18 2006, 05:25 AM) *
Well I do not think that you can hide anything. Like when you delete something then you empty your trash bin. There is still a way to retrive that data. right? huh.gif


As you described it, yes you can still retrieve the data. The solution would be to use a "shredder" utility. In essence what it does is find the location and size of the file you want to destroy, and then over-writes it with garbage information fifteen times or more. If you really want to destroy a file overwrite it about fifty times, and there will be no going back.
Go to the top of the page
 
+Quote Post

Reply to this topicStart new topic

Collapse

> Similar Topics

Topics Topics
  1. Security Issue With Mozilla Based Browsers(22)
  2. Email Clients(23)
  3. List Of Security Sites(7)
  4. Linux Security Tools(5)
  5. Security Issue With Ctrl+c/copy On Clipboard(35)
  6. Windows Security Scanners(0)
  7. Antihack Is Launched - Oct 14(8)
  8. Antihack Security(8)
  9. System Security(6)
  10. Evil Bit In Ipv4 Header(0)
  11. Light To Heavy Security Tips(4)
  12. Microsoft Ships First Vista Security Patches(9)
  13. Rootkits, And How To Detect Them(1)
  14. Serious Mac Os Flaws(1)
  15. Manual Virus Removing And Security.(0)
  1. Security Not Safe(2)
  2. A Very Simple Security Tip(13)
  3. Cpanel Exploit(8)
  4. Major Flaw In .ani File Found In Windows 98 Through Vista Creates Major Security Risk(9)
  5. Security Firm Kaspersky Lab Creates Ipod Virus(1)
  6. Brand New Security Holes Found And Patch On This Month Updates And Office Exploits(0)
  7. Php Security Vulnerability - Beware From Spammers(1)
  8. Security Guidelines For Internet Users(6)
  9. Symantec's Top 10 Internet Security Trends Of 2007(3)
  10. Security Commom Sense(0)
  11. New Security Hole Discovered In Excel(0)
  12. Security Warning 2008: Top 11 Malware Threats To Watch Out For(0)
  13. White Paper: Security Threat Report: 2008(0)


 



- Lo-Fi Version Time is now: 5th September 2008 - 09:08 AM