The other night, before leaving the shop for home, I've took down a very tough piece of French malware -- a Virtumonde variant to be precise -- residing in the server that even NOD32 couldn't root it out. All it required was to boot into DOS using the XPSP2 boot disc and try to access the hard disk to delete the offending files ( Read more... )

Found this out after I'm using my cousin's notebook and getting some pr0n ads popping even within Yahoo Mail. Did a rootkit check and ran HijackThis and discovered a rogue DLL that's being loaded onto memory within startup. It also had a log file to record processes and an XML file -- designated as a "campaign" data file -- full of addresses traced ( Read more... )