7/30/2019 Wrkit Part One

1/8

!

""

!!

"#!"$!!%!"""

!&!

!"""!

'!""

"!$"""

!!"

'!$(!$!"$$)

*""!'$!!"""+,"!

!""

+,--#--

Sida 1 av 8Windows rootkits of 2005, part one

2008-06-19http://www.securityfocus.com/print/infocus/1850

7/30/2019 Wrkit Part One

2/8

"!.

!$%

!$"')/*01""

""

'1"

2$"#3$

44/544/6!!!

&

""".!"!

!!.!&"!"""%!1!

$"'!!"

!$".-!"-"!"$$

!+"!!

"""!!

Sida 2 av 8Windows rootkits of 2005, part one

2008-06-19http://www.securityfocus.com/print/infocus/1850

7/30/2019 Wrkit Part One

3/8

7/30/2019 Wrkit Part One

4/8

Sid 5 8Wi d tkit f 2005 t

7/30/2019 Wrkit Part One

5/8

&"!)

'0"%

3!!"

""&!>!

.&

@-$$$$$$$$-!>!&"""

!""!.)C!"DE

)$"&-"-"

$"

7/30/2019 Wrkit Part One

6/8

"$"$"")

"#C!".I"!

%&'(

/27&)5/27)6"

!&!!""!!&"$

+"!&!"""""3

$31!DE!&

'!&!!)"$."

"'0!!&31!&"

$

)

!$@!"%!

/27)"@!/DJE

!!C"!31$!/27)!@

31!"31""!

*

@!$(

""

Sida 6 av 8Windows rootkits of 2005, part one

2008-06-19http://www.securityfocus.com/print/infocus/1850

Sida 7 av 8Windows rootkits of 2005 part one

7/30/2019 Wrkit Part One

7/8

@!/!!)!

#

!"!""3

!,

)

DE0!)-8>4IGGG99

DE31%::!DJE@!/@3%::$,":

+

I+*72!,""

""+)+/;""@+="!"@

-'7C!"-

-C!%4"2-

44!0/1*3*

:""

*"N43

Sida 7 av 8Windows rootkits of 2005, part one

2008-06-19http://www.securityfocus.com/print/infocus/1850

7/30/2019 Wrkit Part One

8/8