Technology news and Jobs 
Fuzzy Logic TrustDefender and the Trojan Vundo story
Fuzzy Logic TrustDefender and the Trojan Vundo story | TrustDefender and the Trojan Vundo story |
|
| by Alex Zaharov-Reutt | |
| Sunday, 21 December 2008 | |
|
Page 3 of 3 ”Some technical details:Featured Whitepaper
5 Best Practices for Smartphone Support
“Two DLL’s were started during system startup with two entries into the HKLM\…\Run section with rundll32.exe (which is a totally legitimate Microsoft application) and one DLL was registered as a Browser-Helper-Object (BHO) in Internet Explorer. “Interestingly all three DLL’s were NOT visible in the Windows Explorer as they used user-mode rootkit techniques to avoid detection. “All three components checked the presence of each other, meaning that if you only remove the BHO but not the other DLL’s, the BHO will be automatically re-created. And if you remove the two startup DLLS’s but not the BHO, the two startup DLL’s will be recreated automatically as well. “Virustotal Detection is unfortunately again very low! “Nezusena.dll – payload (9/38 – 23.69%) – “BTW: One of the offered rogue Antivirus Engines had the filename InstallAVg_770522170802.exe! Sounds familiar, doesn’t it? “TrustDefender “A quick note on TrustDefender: Even though Vundo does not try to steal confidential information like username/passwords, TrustDefender picked up the Vundo DLL’s from the first second with our whitelisting approach and the DLL’s were automatically removed from memory on-the-fly. “Our rootkit scanner detected them without any problems. All TrustDefender users were protected, especially for any enterprises (Online businesses) that use the TrustDefender system, for all Financial Institutions that are part of our Financial Trust Network and for all self-defined websites.” So, there ends the Trojan Vundo story. With TrustDefender able to stop known and unknown Trojans from sneaking into your banking and other online transactions, which existing anti-virus programs aren’t doing, I wonder how long it will be before TrustDefender gets snapped up by Symantec or one of its competitors? After all, the underground cyber criminal economy has grown in 2008, to incredible levels never before seen, worth untold billions of dollars. With 2009 set to be even worse, online cybercrime is new “technology” boom at a time when the rest of the world is going through an economic crisis. Given that TrustDefender has a solution for any organisation wanting to transaction online with its consumers, it’s clearly only a matter of time before more financial and other institutions offer it free of charge to their customers, so that they are part of the bank’s or organisation’s overall security chain - for the first time. |
Tags
| < Next story in category | Previous story in the category > |
|---|
