Added: Jul 7, 2008

From: LiveSecurity

Duration: 8:40

Network security analyst Corey Nachreiner, CISSP, explains how "inline hooking" enables rootkit stealth activities. Part 2 of 3; the other parts are available elsewhere but too long for YouTube's time limit. Directed by D. Scott Pinzon, CISSP. Produced by LiveSecurity for WatchGuard Technologies.

Channel: Howto

Tags: hacker  hooking  livesecurity  malware  nachreiner  network  rootkit  security  watchguard 


Rating: 4.57 (28 ratings)    Views: 9698' favoriteCount='35    Comments: 20

peaceful1123 Says:

Jul 7, 2008 - Your video's great! I don't know why there's so little people interested in it. Please repost the other parts of the video. Keep going!I've had enough with 3721 (cnsmin). Can someone tell me how to remove it with, let's say, IceSword?

LiveSecurity Says:

Jul 7, 2008 - We have more Malware Analysis videos posted, but they're longer than the 10 minutes YouTube allows. Search Google Video for "Malware Analysis" and you'll see them!

peaceful1123 Says:

Jul 7, 2008 - Thanks a lot.

NewDaysWillBegin Says:

Jul 7, 2008 - thank you for your web seminar.

alanbrit Says:

Jul 7, 2008 - Are you kidding? I am (have been) interested and subscribed to "LiveSecurity" for a long time..I am also hoping MORE videos from them., good quality stuff.@LiveSecurity: How about encoding the videos to make it much smaller (but SMALLER file-size), then you can post them. I mean theres tons of videos on youtube thats 20-40 Mins long (one video). That should fix the length problem..let us know

LiveSecurity Says:

Jul 7, 2008 - Thanks Alanbrit. Our videos are well below YouTube's file size limitations, but if they run even a second over 10 minutes, YouTube's uploader stops them. That's their stated policy. I see longer videos here, too, but I don't know the workaround. For now, we'll subdivide the videos (so the three-part series is five parts, but all under 10 minutes) and get them posted soon. Thanks for your interest!

InfoSecNomad Says:

Jul 7, 2008 - Good job of increasing awareness about rootkits... Did you guys pull down part 1?

abokaresh Says:

Jul 7, 2008 - THANKS ..for live security

isilder Says:

Jul 7, 2008 - Corey must be smart because he can follow the camera around the room ...clearly if he can't do that, the video would be harder to watch.

aquateam777 Says:

Jul 7, 2008 - Any1 ever have starware? I think its another name for malware

darkrider53 Says:

Jul 7, 2008 - Starware is a low risk BHO (Browser Helper Object) for Internet Explorer, it is used to display advertisments at the users expense. This is not another name for malware, it is a form of adware. Adware is what is described as a PUP/PUA (Potentially Unwanted Program/Application) and simply because it is low risk does not make it acceptable and can still be a risk to the users security. Some adware is programmed to send private user information back to it's authors servers.

xblade12100 Says:

Jul 7, 2008 - How can You kill msiexec.exe

thissnowtastfunny Says:

Jul 7, 2008 - depends what it is

xblade12100 Says:

Jul 7, 2008 - it is malware, When I open the control panal or my computer or a folder, Windows Installer (msiexexc) malware pop's up and crashes my computer

xXxZiockxXx Says:

Jul 7, 2008 - when i start my computer system32 pops up and nothing more happens and my computer is getting slower and slower and slower i have like 124 gb room!!! i had a virus that became 12 threats 3 trojan's i deleted it with avg and now all is deleted. after my trial with avg firewall system 32 pop's up!!! before the virus had been deleted the mouse went up to the upper left of the screen and pressed the program(my computer) that waz there!!! please help im going to reboot soon!!!

opensourcethong Says:

Jul 7, 2008 - you need to get these programs pal: comodo firewall, spybot search and destroy, ad aware 2007, SUPER anti spyware, windows defender (if you've got xp. if you have vista you'll already have it), a-squared and avg anti spyware. all trusted programs that ive had loads of success with.on the other hand you could ditch windows and switch to a linux operating system, you'll never ever have to worry about malware again then.

opensourcethong Says:

Jul 7, 2008 - p.s, why did they get the guy with the gayest sounding voice ever to do this lol

polarbear60 Says:

Jul 7, 2008 - It's funny you said that. What I really think he is trying to do to be nice, however, it's not working that well. I seen this several times on other videos that were done for training.Tom.

11hani11 Says:

Jul 7, 2008 - guys check out combofix, but i suggest you take advangtage of the help available on their website just google "combofix".. i did it without the help but i got scared because it looks like your computer is about to die.. but it removed all the malware and I was impressed.. nothing else got it right. Peace

JangosAgony502 Says:

Jul 7, 2008 - where's the fun in linux?