Anti-spyware Battles Rootkits with Rootkit Tactics

Anti-spyware software companies are adding features to their products that spot rootkits and other malicious programs that operate at the Windows "kernel," or core processing center. The new kernel-mode features are a response to new, sophisticated spyware. However, they have raised warnings from security analysts about instability in Windows and conflicts with anti-virus programs that also work at the kernel level.

Aluria Software of Lake Mary, Fla., became the latest anti-spyware vendor to add kernel-mode features. The company, which is owned by EarthLink Inc., announced Active Defense Shield on Monday. The technology installs a kernel driver that hooks into a computer's system driver, which controls the processes executing on that machine, Aluria said in a statement. Anti-spyware Battles Rootkits with Rootkit Tactics

Linked by shanmuga Wednesday, 14th December 2005 11:32PM