Results 1 to 3 of 3

Thread: nero 8 rootkit

  1. #1
    Junior Member ashrc4's Avatar
    Join Date
    Jul 2008
    Posts
    3

    Default nero 8 rootkit

    downloaded nero 8 and ran rootalyzer and a a.d.s.>arrow_n.cur:NEDTA.DAT:$DATA came up. I googled result and four entries came up.one vague reference to nero 8 key gen having something to do with it. can anyone explaine with the ability to hide virus' whether rootalyzer will pick these up as extra entries or can this a.d.s. hide them like what happened with sony C.D. rootkit in 2005. and can anyone confirm nero 8 link. i just can't find a legite name or refernce anywhere. file size (6144 bytes)
    size on diks (8192 bytes)

  2. #2
    Junior Member ashrc4's Avatar
    Join Date
    Jul 2008
    Posts
    3

    Default

    the download was from nero global server. conformation was revieved for purchases and the deal was offered from nero 7 supplied with new computer then updated recently before i used supplied link to purchase nero 8.

  3. #3
    Member of Team Spybot PepiMK's Avatar
    Join Date
    Oct 2005
    Location
    Planet Earth
    Posts
    3,574

    Default

    Hmmm...

    ADS can hide executable malware code, but they are not bad per default and could as well hide legit stuff. From what I googled about it so far, here it sounds like Nero tries to hide its Blueray Disc Region Settings in there.

    Legit software sometimes uses such methods to hide stuff like license information (or here, region settings) that it does not want the user to touch (to avoid copying that information over to other machines, or in this case, to avoid the user playing around with region settings where he "should" be restricted).

    I therefore recommend that you ignore this entry.
    Just remember, love is life, and hate is living death.
    Treat your life for what it's worth, and live for every breath
    (Black Sabbath: A National Acrobat)

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •