
Originally Posted by
ToxicFrog
So, let's see...installs silently and without user consent; remains installed even after the software it was associated with is gone, and indeed can be uninstalled only by hand; uses system and network resources to the user's detriment; doesn't hide itself as well as the BMG rootkit, but does make a half-assed attempt, and cannot be removed without special tools; and is designed around an escalation of privilege to ring 0 that, while not exploited by other blackhats yet, is probably exploitable.
If it's not a rootkit, it's doing a really impressive job of disguising itself as one.