Worm Becomes Part Of The Windows OS
Posted on 25.02.2003
BitDefender, an award-winning provider of security software and services, today released a free removal tool against the worm LovGate (its last version is Win32.LovGate.C@mm), which has widely spread in the wild in the last four days. The novelty brought by this worm is that it integrates in the Windows OS, becoming a part of the operating system process.

The worm author had access to an undocumented function of one of the Microsoft Windows operating system, so he was able to break into the "lsass" process and identified itself with this system process. "The virus is the more treacherous as it cannot be blocked until the process "lsass" is stopped, or the process' stopping could mean also damaging the operating system", stated Mihai Chiriac, Virus Researcher at BitDefender.

The worm comes by e-mail, without exploiting the famous I-Frame vulnerability, but bringing to table a series of well-defined, social engineering structures. "It's all about sex, cracked software or human curiosity" says Mihai Chiriac. "Today's software philosophy very much requires people's trust and confidence. When patching, "pack-installing" and testing becomes a rule, no one should wonder why clicking on such attachments is so frequent", Mihai added.





Spotlight

eBook: Cybersecurity for Dummies

Posted on 16 December 2014.  |  APTs have changed the world of enterprise security and how networks and organizations are attacked. These threats, and the cybercriminals behind them, are experts at remaining hidden from traditional security while exhibiting an intelligence, resiliency, and patience that has never been seen before.


Weekly newsletter

Reading our newsletter every Monday will keep you up-to-date with security news.
  



Daily digest

Receive a daily digest of the latest security news.
  
DON'T
MISS

Thu, Dec 18th
    COPYRIGHT 1998-2014 BY HELP NET SECURITY.   // READ OUR PRIVACY POLICY // ABOUT US // ADVERTISE //