Tuesday, August 31, 2010
Rootkit on the rise that "hits" the 64-bit versions of Windows
The rootkit installs a modified MBR (master boot record) which forces Windows to restart. When activated the MBR, the Alureon loads the kernel before they can put into effect any defenses. As the company PrevX, the "mutant" rootkit is currently beta, and unable to function in all tests conducted in laboratory conditions.
The 64-bit versions of Windows have always been an added protection against the rootkits and other malware, due to the different memory management. However, the emergence of new threats specific to the 64-bit versions aside, in practice, so far benefit.