Dailydave mailing list archives

Re: Re[2]: Microsoft Says Recovery from Malware Becoming Impossible

From: "val smith" <mvalsmith () gmail com>
Date: Thu, 27 Apr 2006 13:27:36 -0600

Maybe check out http://www.rootkit.com and look for

MTDWin - A driver that will identify writable memory chips / FlashRAM /
EEPROM on the motherboard.
description

VideoCardKit - A driver that can store executable code in a FLASH or EEPROM
and submit this code to be executed from the video processor in order to
patch kernel memory.

Those look kind of like PoC's to me although i havent see the code yet.

V.

On 4/27/06, Thierry Zoller <Thierry () zoller lu> wrote:


Dear Dinis Cruz,

DC> What about malware placed the computer's hardware?
Bios is not hardware, how can you "place malware" on a cpu ?

Where is your PoC?

DC> A rebuild will not eliminate these.
They'd need to exist first. Do they? I'd be interested.



--
http://secdev.zoller.lu
Thierry Zoller
Fingerprint : 5D84 BFDC CD36 A951 2C45  2E57 28B3 75DD 0AC6 F1C7

Current thread:

Microsoft Says Recovery from Malware Becoming Impossible dan (Apr 24)
- Re: Microsoft Says Recovery from Malware Becoming Impossible Dinis Cruz (Apr 27)
  - Re: Microsoft Says Recovery from Malware Becoming Impossible MindsX (Apr 27)
    - Re: Microsoft Says Recovery from Malware Becoming Impossible Marc_Bevand (Apr 27)
  - Re[2]: Microsoft Says Recovery from Malware Becoming Impossible Thierry Zoller (Apr 27)
    - Re: Re[2]: Microsoft Says Recovery from Malware Becoming Impossible val smith (Apr 27)