Avast WEBforum

Other => General Topics => Topic started by: Hermite15 on August 26, 2010, 08:54:53 PM

Title: first rootkit targeting 64 bit Windows
Post by: Hermite15 on August 26, 2010, 08:54:53 PM
don't know what to think of that, someone posted about it on another forum; this is supposed to be the first rootkit being able to attack 64 bit Windows:

http://www.prevx.com/blog/154/TDL-rootkit-x-goes-in-the-wild.html

Quote
TDL3 rootkit x64 goes in the wild

They actually built a nice gift for every security vendor, because TDL3 has been updated and this time this is a major update; the rootkit is now able to infect 64 bit versions of Microsoft Windows operating system



Title: Re: first rootkit targeting 64 bit Windows
Post by: YoKenny on August 26, 2010, 09:03:42 PM
Yup!
Rootkit TDL 3 (alias TDSS, Alureon)
http://www.kernelmode.info/forum/viewtopic.php?f=16&t=19&start=360

Jaxryley is aware of this as well:
http://forums.malwarebytes.org/index.php?showtopic=61174
Title: Re: first rootkit targeting 64 bit Windows
Post by: disPlay on August 26, 2010, 09:23:58 PM
This is scary.
Title: Re: first rootkit targeting 64 bit Windows
Post by: Lisandro on August 26, 2010, 09:29:28 PM
This is scary.
Did you think they wouldn't achieve that?
I don't expect "final win" in security field...
Title: Re: first rootkit targeting 64 bit Windows
Post by: essexboy on August 26, 2010, 09:34:00 PM
I am surprised it took so long - TDSSKiller works on 64 bit systems as does AD_13s MBR so we have a toehold against it
Title: Re: first rootkit targeting 64 bit Windows
Post by: disPlay on August 26, 2010, 09:36:08 PM
This is scary.
Did you think they wouldn't achieve that?
I don't expect "final win" in security field...

I knew that some day this would happen but not so soon.
Title: Re: first rootkit targeting 64 bit Windows
Post by: Hermite15 on August 26, 2010, 09:37:59 PM
This is scary.
Did you think they wouldn't achieve that?
I don't expect "final win" in security field...

I knew that some day this would happen but not so soon.

I guess they've been waiting until it becomes worth it, like most OEM systems ship with Seven/64 now ;D well if you consider the real start of 64 bit Windows being Vista, shipping with patchguard and driver signature check, it still took three and a half years  ;)