Trojan utilizes Encrypting File System (EFS) to protect itself
,----[ Quote ]
| Encrypting File System (EFS) is integrated in Microsoft's Windows
| platform since Windows 2000. EFS uses public key cryptography that makes
| use of a user?s account login and password pair to encrypt a private key.
| The private key is used to encrypt the original data (files or folders).
| Recently a trojan was seen to take advantage of EFS to protect itself
| and execute with administrative privileges.
`----
http://www.secguru.com/node/239
Reminds you of Sony Rootkits? This one, on the contrary, will become an
integral part of Windows.
|
|
