TDL x64 Rootkit

[Aguila]

Called TDL, TDSS, Alureon or Olmarik. First widely spreaded x64 rootkit.

Analysis:
/>http://www.prevx.com/blog/154/TDL-rootkit-x-goes-in-the-wild.html
/>http://www.prevx.com/blog/155/x-TDL-rootkit--follow-up.html
/>http://www.symantec.com/connect/de/blogs/tidserv-64-bit-goes-hiding
/>http://blog.raidrush.ws/2010/09/11/malware-analyse-tdl-rootkit-64-bit-infektion/ (german, but with TDL dropper source code)

download: http://www.xup.in/dl,15799673/TDL_x64.rar/

password: infected

[GamingMasteR]

Hi,

Dedicated thread about TDL3, first public dropper of the x64 variant could be found here :
/>http://www.kernelmode.info/forum/viewtopic.php?f=16&t=19

[JMC31337]

never cease to amaze me K11