Avastantirootkit

Cybersecurity researchers have discovered that hackers are abusing a vulnerability in Avast's anti-rootkit driver (aswArPot.sys) to bypass ...

简单地说：Avast 驱动程序旨在清除恶意rootkit，却无意中禁用了合法的安全软件。恶意软件利用这个可信的驱动程序来躲避检测，并在系统中悄无声息地运行。

評分 4.1 (16,877) Avast Free Antivirus scans and cleans rootkits currently on your device, and stops future rootkits and other types of threats before they can do any damage.

A rootkit is a stealthy and dangerous type of malware that lets hackers access your computer without your knowledge.

A new malicious campaign is using a legitimate but old and vulnerable Avast Anti-Rootkit driver to evade detection and take control of the target system.

資安公司Trellix 最近揭露了一起新型惡意攻擊活動，駭客透過濫用Avast 舊版且具漏洞的防Rootkit 驅動程式，成功突破系統偵測並關閉目標系統的安全防護。

研究人員發現由檔名kill-floor.exe開始的惡意程式感染鏈，一旦該執行檔啟動，就會於受害電腦部署Avast的Anti-Rootkit驅動程式aswArPot.sys，接著 ...

A malicious campaign was recently observed that uses a legitimate, but outdated, Avast anti-rootkit driver and then manipulates it to terminate security ...

The attackers exploit an outdated and vulnerable driver from Avast Anti-Rootkit to bypass detection and disable security systems.

Anti-Rootkit 防護：藉由GMER自動檢查技術，可檢查並標記Rootkit底下載入的驅動程式，如此一來即使檢測到未知種類的Rootkit，也能在其運作前阻止，並安全地刪除。