Malware Analysis: Rootkits, Part 2

Network security analyst Corey Nachreiner, CISSP, explains how "inline hooking" enables rootkit stealth activities. Part 2 of 3; the other parts are available elsewhere but too long for YouTube's time limit. Directed by D. Scott Pinzon, CISSP. Produced by LiveSecurity for WatchGuard Technologies.

Category:

Howto & Style

Tags:

• livesecurity
• hacker
• rootkit
• network
• security
• Nachreiner
• WatchGuard
• malware
• hooking

[Masowai]

"Hacker Defender" sounds like its a program to protect AGAINST hackers, i.e. some type of security. But its not. Right?

So why the hell do you call it "Hacker Defender"?

[LiveSecurity]

That's the name of the tool used. It's very common for malware files to have names that make the malware sound as if it's part of a PC's security defenses. For example, the bot asprox drops a malicious file named "Microsoft Security Center Extension." It's just basic social engineering, to try to trick users into leaving malware on their computers.

[peaceful1123]

Your video's great! I don't know why there's so little people interested in it. Please repost the other parts of the video. Keep going!

I've had enough with 3721 (cnsmin). Can someone tell me how to remove it with, let's say, IceSword?

[LiveSecurity]

We have more Malware Analysis videos posted, but they're longer than the 10 minutes YouTube allows. Search Google Video for "Malware Analysis" and you'll see them!

[alanbrit]

Are you kidding? I am (have been) interested and subscribed to "LiveSecurity" for a long time..I am also hoping MORE videos from them., good quality stuff.

@LiveSecurity: How about encoding the videos to make it much smaller (but SMALLER file-size), then you can post them. I mean theres tons of videos on youtube thats 20-40 Mins long (one video). That should fix the length problem..let us know

[LiveSecurity]

Thanks Alanbrit. Our videos are well below YouTube's file size limitations, but if they run even a second over 10 minutes, YouTube's uploader stops them. That's their stated policy. I see longer videos here, too, but I don't know the workaround. For now, we'll subdivide the videos (so the three-part series is five parts, but all under 10 minutes) and get them posted soon. Thanks for your interest!

[mnajem]

the other part that available elsewhere --- where can we download them?

[TheWaynelds]

only fat ugly losers who have no life and never get laid make viruses and rootkits.

[Devorvan]

lol damn this is old

[jibi1705]

informative

[will4210]

Then if it hooks the PC only on installation, why not download the antivirus AFTE-- Oh. It hooks the browser, so that all antivirus sites are redirected to another place.

[ZelousGun]

I luv UnHackMe it completely destroyed this Vanquish Rootkit... Idk how I got it. o.O

[pulse404]

blacklight isnt too good i had a r00tkit on my system yesterday and blacklight couldnt detect use unhackme that works a treat and can detect any r00tkit

[taeyoungchoon]

Not so bad.. Hmm..

[hamid0401]

fake!!!!!!!!!!!!! lol george lukas