Quantcast
Channel: BOT24
Viewing all articles
Browse latest Browse all 8064

WinNT/Pitou (MBR bootkit, alias Backboot)

$
0
0
Pitou author seems to be pretty creative when it comes to droppers. This one is coded in PureBasic and drops a slightly older variant of the version described by EP_X0FF.

Behaviour on Windows XP and prior (x86)

more here..........http://www.kernelmode.info/forum/viewtopic.php?f=16&t=3667#p25470

Viewing all articles
Browse latest Browse all 8064

Trending Articles