netbt ë-Rootkit

Here a new discovery as the rootkit starts to mod netbt.sys look exactly to the screens, the notepad one, check, you will see it adds many ë nothing else.

The netbt file grows when I dump the file from gmer to 1 kb due to this modification.

http://i11.tinypic.com/4v4el9k.png

caught in action

http://i11.tinypic.com/68c8rcw.png

I doubt that anyone ever seen this, but if any knowledge about, just write it down to this thread.

Another curiosity of Gmer

http://i14.tinypic.com/6ez9p44.png