Virus Profile: FURootkit

McAfee - Computer Virus Software and Internet Security For Your PC:
"Virus Characteristics
There are numerous versions of this trojan. This description is meant as a guide.

The purpose of this trojan is to hide, or stealth, files and registry keys. It is often used in conjunction with other malware.

This trojan has recently been packaged with many different W32/Sdbot.worm variants.

In this scenario, the Sdbot.worm virus is often installing the trojan in the WINDOWS SYSTEM directory as msdirectx.sys (such as c:\WINDOWS\system32\msdirectx.sys).

This file is installed as a service:

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSetServices\msdirectx

Indications of Infection
A possible indicator is the presence of the file msdirectx.sys in the WINDOWS SYSTEM directory when browsing the SYSTEM directory remotely.

Method of Infection
This trojan is distributed with other malware."