hankyoreh

Malicious computer codes, with built-in protections making them nearly impossible to remove, are spreading fast over the Internet. "Rootkit" is among the worst of such codes, say experts in the field.

According to AhnLab, a vaccine developer, among spyware and adware reported by computer users last year, the number of programs using the Rootkit code string reached as many as 57. Rootkit is designed to enable hackers to obtain site manager-level rights in a given network, thus helping them dominate individual computer users’ systems.

Rootkit secretly downloads itself onto a victim’s computer during Internet use.

Industry experts said that the damages inflicted by Rootkit are worse than reported since the code string is not well known, and the hackerware program usually lies dormant for a long time.

An AhnLab official said, "Even if the root of the problem lies in Rootkit, users tend to think that any system malfunction has been prompted by their computer itself. No diagnosis [for Rootkit] is available, and inevitably users choose to reformat their whole system, which costs a lot."

Worse yet, Rootkit causes private information leaks, computer virus infections, and further downloads and upgrades of malicious codes. Experts warn that a system that has inadvertently downloaded Rootkit could be vulnerable to fatal virus infection. Computer security companies currently categorize Rootkit as a malicious code, but have not yet estimated the real damage so far caused by the program.

Ordinary computer users do not know how to detect the code. Another problem is that the program is not limited to working with other malicious codes but also with new Internet business models such as keyword searches. The only solution at this moment for ordinary users is to take action when their toolbars or vaccine programs are not functioning properly.

An official of the Korea Information Security Agency said that "there is a kind of trend of Rootkit working with other malicious codes around the world. The only solution is to contact experts as soon as possible if infection is suspected."

Please direct questions or comments to [englishhani@hani.co.kr]