Friday, July 28, 2006

Monitoring Low-level disk access

Also thanks Krazaf for reminding me the low-level access monitoring.

I've researched a little bit about this kind of access but still can't find information necessary for protection. If anyone (including Krazaf) have a Trojan, virus (or any malware) file which uses low-level access to do damage, please contact me.

If you know exactly how these kind of malwares access and modify MBR or something (that needs low-level access) in Windows NT family, please leave a comment here.

my busy days are just starting, hoping for better

1 comment:

Anonymous said...

if you are still looking for a virus with lowlevel access, try the "killdisk" virus. it destroys the MBR.