Panda roots out rootkits

Security firm Panda Software has introduced what it claims to be the world's first anti-rootkit technology to combat an epidemic of targeted attacks and cyber-crime using this malware.

Panda Titanium 2006 Antivirus + Antispyware and Panda Platinum 2006 Internet Security now include anti-rootkit technology that scans and detects suspicious processes hidden in memory, the technique frequently used by rootkits to hide malicious code.

Panda believes that rootkits are being used by cyber-criminals who are paying hackers to create this type of application. They then test them against all antivirus engines to ensure that nothing is detected.

"This business model, in which hackers and malware creators seek profit rather than fame, has become an emergent trend," the security firm said.

"By using rootkits, the hidden code can operate maliciously without the knowledge or consent of the user, and without interference from a traditional antivirus solution.

"As a consequence, a user could be oblivious to malware activities on their computer, such as sending spam and launching denial of service attacks."

All users of Panda Titanium and Platinum 2006 products will receive the free software update which includes the anti-rootkit technology.

"Rootkits have become a serious problem in recent months. Although the concept is nothing new, rootkits and the programs they hide are complicated to detect," said Luis Corrons, director of PandaLabs.

"With this update, processes hidden in memory by rootkits are detected and analysed by the anti-malware engine. If they are identified as dangerous, the technology blocks them so our users are protected against this malware technique."