Malware Myths

CloneRanger · Jun 15, 2012

Undetectable rootkits, irremovable malware, firmware bootkits surviving multiple drive wipes, I read about all these subjects on a regular basis and I will dedicate this blog post to these so-called malware myths in the hope that it may help you getting a better idea of what is possible (and most importantly what is not possible) when it comes to malware.

First of all, undetectable malware doesn't exist. Simply put, if we can't find it it means only we don't search well enough. As no piece of malicious software can exist on air only, it will have a stored component somewhere (this can range from code in a patched file to a sophisticated encrypted file system). While this stored component can be very hard to detect (after all a harddisk is a large place to hide stuff), it is not impossible and in worst case a wipe of the drive will always remove it, no matter how sophisticated. If malware returns afterwards it is time to check out removable/backup media or the network/router a computer connects to.

http://securitysnapshots.blogspot.co.uk/2012/04/malware-myths.html
Click to expand...

So you can all sleep safely now

treehouse786 · Jun 15, 2012

night night

Hungry Man · Jun 15, 2012

Perfect malware implies perfect software, which doesn't exist. There was a hypothetical malware that would run the entire system in a virtual container. The problem is that as you try to bury deeper and hide further you end up with more complex code and there will definitely be bugs.

Log in or Sign up

Malware Myths

CloneRanger Registered Member

treehouse786 Registered Member

Hungry Man Registered Member

Log in or Sign up

Malware Myths

CloneRanger Registered Member

treehouse786 Registered Member

Hungry Man Registered Member

Useful Searches