Anti Rootkit Blog

Prevx Ltd, a UK Internet Security company , has released a long awaited removal tool for the Gromozon Rootkit. It said in a Press Release today that according to it’s estimates the Gromozon Rootkit is currently on about 250000 PC’s in the US alone.

I blogged about the Gromozon Rootkit around a week ago here. It is a very hard rootkit to remove because of the various methods of stealth it uses. The Gromozon rootkit had been around for a short while before it was found. After maybe only a few weeks in existance Prevx estimate the Gromozon rootkit is on about 250000 computers in the US alone. It was originally found to be very prevalent in Europe, especially Italy.

We received a large amount of hits on the GROMOZON.COM - The strange case of Dr.Rootkit and Mr.Adware article. Most of these hits were from Google’s Italian users who had Googled words like img.tif and FreeAccess.ocx, both components of the rootkit attack. This rootkit sure has got around in the days since it’s release. The method by which the rootkit spread is agressive and the stealth capability is great so I am sure that we havent heard the last of Gromozon. Indeed the whole Gromozon episode shows that attackers are coming up with more prolific and stealthy attacks on our computers. What will be the next big rootkit infestation?

The Gromozon Removal Tool is available from Prevx here http://www.prevx.com/gromozon.asp
Keep Safe

regards
Steo
www.antirootkit.com

This entry was posted on Friday, September 1st, 2006 at 4:43 pm and is filed under News, Gromozon. You can follow any responses to this entry through the RSS 2.0 feed. You can leave a response, or trackback from your own site.