Symantec's Security Response blog is reporting that subtle changes in the "Storm worm," the trojan that brought us the "halloween.exe" attacks this week, is showing signs of subtle changes that, at first, make it look like it's becoming more benign. Until the experts looked a little closer:

Specifically, the threat no longer;

1. infects other legitimate drivers on the system. Previous variants infected drivers such as Tcpip.sys and Kbdclass.sys. This was a stealth-like feature used by the threat to start early with the operating system and without loading points in the Windows Registry.

2. injects itself into legitimate processes like Explorer.exe and Services.exe.

But then they figured out this:

Read More