Peter said:
Is rootkit code the same, no matter the O/S in use? The way I see W98 -
perhaps incorrectly - is that no-one is going to bother to write
malicious code that will target an outdated O/S. They are going to
target XP or Vista. The security issues on Vista & XP are not going to
be the same on W98. Perhaps this is the wrong way to look at it? What
do you think?
Rootkit code exploits the Kernel debug commands that are built into the
OS they then install custom Dynamic Link Libraries (loaded in as device
drivers) which contains the malicious code/ back doors etc they require.
I really cant remember to be honest if win 98 has the same debug
commands but I would assume so.
As for writing malicious code for an outdated OS, probably not but there
are still bugs being found that affect all versions of windows from
Vista all the way down to 9x there was quite a famous one as an example,
happened a good few moths ago, there was a flaw in the way that windows
handled jpeg pictures, if code was specially crafted into a jpeg image
and opened on a windows machine it could execute code this affected all
versions of windows and there was a big ho-ha because Microsoft was not
going to fix the win9x bug just the xp and vista machines, but they
eventually issued a patch for all OS's
Last week there was a flaw in adobes acrobat reader that affects all
versions and all Operating systems including Linux and mac so it just
goes to show you that you have to keep things up to date.
But as was said on a previous post, its all down to the user really and
there surfing habits.
JPEG vuln (
http://www.microsoft.com/technet/security/Bulletin/ms05-038.mspx)
Adobe reader problem
(
http://blogs.adobe.com/psirt/2009/04/update_on_adobe_reader_issue.html)
JD