New Antivirus Tests Show Rootkits Hard to Kill

ancientribe writes "Security suites and online Web scanners detect only a little more than half of all rootkits, according to new tests conducted by independent test organization AV-Test.org. Many of today's products struggle to clean up the ones they find. AV-Test.org also found that a few big name AV scanners had serious problems finding and removing active rootkits, such as Microsoft Windows Live OneCare 1.6.2111.32 and McAfee VirusScan 2008 11.2.121."

Interesting way of putting it

[pjt33]

I know that AV software can be fairly intrusive, to the point that it feels like it's taking over your box, but to call Microsoft Windows Live OneCare and McAfee VirusScan rootkits seems a bit strong.

Re:Interesting way of putting it

[Anonymous Coward]

"removing active rootkits, such as Microsoft Windows Live OneCare 1.6.2111.32 and McAfee VirusScan 2008 11.2.121."

Perhaps you yourself need a lesson in reading and comprehension.

What a title!

[Svet-Am]

from the article:

Dan Kaminsky, Director - Penetration Testing

Re:Interesting way of putting it

[Oxy the moron]

you sir are an oxy-moron

No, I got the joke, TYVM. :)

Re:What a title!

[Anonymous Coward]

"Hey babe, I've got a good paying job."
"Really? What is it?"
"Penetration tester."
** SMACK **
"Ouch..! I do not think that word means what you think it means."

If you think that's bad

[Anonymous Coward]

Try working in an area of the building labeled "Mail Insertion" (for stuffing envelopes.) It doesn't come off too well when you tell someone you work over in mail insertion, no matter how you try to emphasize the 'i' in mail.

Re:Interesting way of putting it

[phoenixwade]

Well, it is not a bit strong to state that your reading comprehension is terrible.

whoosh!

Re:Not really surpirsed

[UnknowingFool]

Thanks to all the porn sites my FRIEND goes on, it's not uncommon for my AV to pick up a virus every now and then. Usually it's able to kill the thing, but every now and then one comes along that's just a pig to get rid of.

I would say you have a few choices here:

1. a) Replace your OS
2. b) Replace your friend
3. c) All the above
4. d) ????
5. e) Profit!!!

Re:What a title!

[Red Flayer]

I hear it's a temporary title, as he changes positions often.

I wonder if promotion to the position came with a raise.

I heard he reports to the VP for Internal Affairs.

His responsibilities include data massage, internal handling of customers, and staff management.

I could do this all day...

Re:If you think that's bad

[Vectronic]

use a french accent and pretend like yer learning english.

Female: "What Is Your Job?"
Male: "Souffler Le Travail?, nah... how do you say... May I l'Insertion?

Rootkits are hard to kill?

[Anonymous Coward]

Rootkits are actually very easy to kill, and the tool to kill them can be found here [ubuntu.com] or here [kubuntu.com]

Re:What a title!

[geekoid]

I think he got the position because of his anal tendencies.

Please, go on.

Re:Interesting way of putting it

[Mister Whirly]

You ended that sentence with a "~". Why are you sarcastically advocating a new punctuation mark? ~

Re:Great..

[Mister Whirly]

"Now Steven Seagal is writing rootkits?

We're screwed."

No way. Not with my new Chuck Norris(TM) brand anti-rootkit software. Not only does it find the rootkit and get rid of it, but it first makes it cry and beg for it's life needlessly.

Re:Not really surpirsed

[ConfrontationalGrayh]

Thanks to all the porn sites my FRIEND goes on, it's not uncommon for my AV to pick up a virus every now and then.

Come on, you can admit that you're the "FRIEND" and that you surf porn. :)

Re:Interesting way of putting it

[roaddemon]

I believe the sentence was poorly written and the last clause is a dangling participle, but I got into engineering because I failed English.

(sorry to interrupt the flame war)

Re:What a title!

[Red Flayer]

Please, go on.

Since you insist...
Performance review:

His performance metrics primarily include duration of uptime and average time need to recover from downtime. He has expanded the scope of his role to fill the requirements.

He is able to handle repetitive tasks well.
He does not think outside the box.
He is good at getting his workgroup to multitask.
His staff responds well to stress.
Work/life balance may be an issue -- he always makes his work come first.

I think that's enough for now :)

Re:Interesting way of putting it

[rcamans]

In other news: half the threads posted on Slashdot are incorrectly interpreted as worth reading, or even educational.

Do you know what you call?

[Anonymous Coward]

Do you know what you call a PC with Symantec or McAfee anti-virus?

Slow and infected.

Those two products are the equivalent of banging your head against the ground to prevent the common cold. It doesn't actually help, but it feels like you must be doing something, otherwise it wouldn't hurt so much.

Re:Interesting way of putting it

[TheVelvetFlamebait]

Half? Are you serious? It's probably only about 20% or so. Prone to exaggeration much?

Re:What a title!

[Red Flayer]

I could do this all day...

now you're just bragging

Since your ID is 'witherstaff' I think I understand the source of your envy.

Re:Interesting way of putting it

[ozmanjusri]

the more I start thinking that you, sir, are a genius.

You forgot the twiddle.~