Aug 14

Windows XP rootkit infections

Posted in Antivirus, Avast, Microsoft
The anti-virus vendor Avast alerts that unpatched Home windows XP machines still pose a significant threat to the web ecosystem by harbouring 75 % of rootkit infections.

The organization comes with an unique understanding of the threat landscape because of over 130 million active Avast! anti-virus installations worldwide that send it adware and spyware telemetry. Based on a current analysis carried out through the firm’s scientists, 74 percent of 630,000 rootkit samples based in the wild came from from Home windows XP machines.

This rootkit infection minute rates are almost two occasions greater compared to decade-old operating system’s global usage share of 38 percent. Avast’s statistics reveal that 49 percent of their clients have XP running on the computer systems.

The amounts show the high Home windows XP infection count can’t just be described by its share of the market. “One problem with Home windows XP may be the large number of unlicensed versions, especially as customers are frequently not able to correctly update them since the software can not be validated through the Microsoft update,” stated Przemyslaw Gmerek, Avast’s leading rootkit expert.

Rootkits are serious risks simply because they function in the cheapest quantity of a operating-system, causing them to be tough to identify. For instance, some rootkits hook the file system motorists to cover malicious files.

Others even operate outdoors the OS, providing them with a lot more treatments for machine. They are known as bootkits simply because they infect a partition’s Master Boot Record (MBR) and, based on Avast, they have the effect of 62 percent of rootkit infections.

The very best MBR rootkit family is called Alureon, TDL or TDSS. The most recent variant, TDL4, is capable of doing self-propagation and may infect 64-bit versions of Home windows Vista and Home windows 7.

Read more …


comments: 0 »