My problem with this root-kit issue is how the heck it can embed itself soo deeply inside the OS without the user having local admin privileges. At that point the kit must take advantage of some kind of vulnerability or weak security in the OS. The next question is, if the kit indeed requires local admin privs, why did the corporate users have such rights?
_________________________
There are two types of vessels, submarines and targets.
