New variants of Storm Worm have started to use kernel-mode
rootkit techniques to hide their files, registry keys and active
network connections. F-Secure BlackLight is able to detect the
hidden files.
These variants are now detected
as W32/Stormy.AB and
Trojan-Downloader.Win32.Agent.bet.