I also speak from experience, ... on Macintoshes.

" ... hacked windows files stored in the hidden drive areas marked as bad sectors or obscured through geometry changes. Any reinstall would start normally from the cd, but you would observe at some point foreign (unsual) files and drivers begin to load. All ACLs were changed and since the malware had control at the bios level virtually all drivers were controlled at the lowest level."

This has also been my experience (strange to see someone else confirm this after being called (insert insult). Starting in '97 on a 68k Macintoshes and then in Nov (?) '05 on Xserves, G4s G5s, etc.

Seems to have AI underpinnings as it operates autonomously (SOAR?) It also uses the clipboard extensively, microcode in "bad boot blocks" font as "worlds" - opening sockets (ports) for internal/external message passing.

Follow this:

http://it.slashdot.org/comments.pl?sid=207252&cid=16899958

... for a sample of what I've commented previously (as I've just found this article).

hylas

[ reply ]

Link to this comment: http://www.securityfocus.com/comments/articles/11372/34206#34206