[Eset]ZeroAccess: code injection chronicles

[igor51]

ZeroAccess: code injection chronicles

At the end of spring 2012, the rootkit family Win32/Sirefef and Win64/Sirefef (also known as ZeroAccess) was updated. We began tracking the first updated samples at the beginning of May when a new affiliate program started for the distribution of a new ZeroAccess version. The updated version of Sirefef doesn't use kernel-mode drivers, as was ... <a href="http://blog.eset.com/2012/06/25/zeroaccess-code-injection-chronicles"><strong>Read More...</strong></a>
Source: ZeroAccess: code injection chronicles