Tdss rootkit silently owns the net

Tdss rootkit silently owns the net

Full Story: http://www.prevx.com/blog/139/Tdss-rootkit...ns-the-net.html

TH

 

Tdss rootkit owns the net?

More like incompetent users own themselves.

 

Not impossible to detect. However, difficult to remove:
http://www.malwarebytes.org/forums/index.php?showtopic=31378

 

Atm latest TDL3 not detected by DrWeb, TDSS killer, eSage TDSS Remover detects.
Cure can come from replacement from original source.

 

So I replace my libata.h with a clean version from the live CD?

 

Which would be at least 80% of Windows users. Most have no idea what the difference in an admin and user account is. I see people even on this board who ask about user accounts. Imagine the ignorance of the populace at large.

And, yes Microsoft can be blamed for this -- they have done nothing until the last few years to change this paradigm of "run as admin" among both third party developers and end users.

But that's neither here nor there. Hopefully security 101 practices that the rest of the computing world has been using for 30+ years will finally become commonplace on Windows machines.

 

Hitman Pro 3.5 can also remove TDL3 since November 30. See this thread or this news article.

 

Is DefenseWall sufficient protection?

 

Yes- it covers the way TDSS installs.