The Hindu Business Line : Concern over use of rootkits by anti-virus software vendors

A rootkit is a set of software tools, which are used to hide running processes, files or system data. This helps an intruder maintain access to a system without the user's knowledge. The tools are known to exist in different versions of Microsoft Windows, Linux and Solaris. The files in a hidden directory or location will not be scanned during the scheduled or manual virus scans, providing a perfect hiding ground for Trojans, viruses and other Malware.

"An un-scanned directory can become lethal for the computer itself," said sources from MicroWorld, an anti-virus software vendor. "The original rootkit controversy started with the findings of Dan Kaminsky, an independent security researcher, on CDs produced by a leading music company. "Kaminsky discovered the evidence of `rootkit' stealth for enabling copy protection on many of its CDs. Today, the global music giant faces torrential criticism and potential lawsuits on this dangerous security loophole. They are in a process of replacing the affected CDs across the globe, estimated to be half a million in number."

The findings that some anti-virus companies were using similar rootkits in their security solutions gave a different dimension to the issue, a MicroWorld release said.

Anti-virus software companies have larger social responsibilities with governments and agencies such as FBI and Interpol seeking help in tackling cyber crimes and organised scams, the noted added. "It is imperative for anti-virus providers to keep this in mind in each of their moves and make sure that nothing harmful is shipped to the end user."