Researchers have unearthed rootkit-like functionality in an enterprise security product.

Network security software from a Chinese developer includes processes deliberately hidden from a user and, even worse, a hidden directory, Trend Micro reports. Files in the hidden directory could exist below the radar of antivirus scanners, potentially creating a stealthy hiding place for computer viruses that their creators might seek to exploit.

It doesn't name the developers except to say they are the same firm which bundles rootkit-like software with USB storage devices featuring fingerprint authentication.

Sony got a further black eye from issues with its MicroVault USM-F fingerprint reader software last year, which emerged a little over two years after its thorough mauling for including rootkit functionality on its music CDs. The feature, designed to stop fans ripping music tracks, created a security hole exploited by a number of Trojans. ®

Related stories

• Intel chip flaw gets double exposure (19 March 2009)
• Stealthy malware expands rootkit repertoire (30 September 2008)
• Open source release takes Linux rootkits mainstream (4 September 2008)
• Researchers dig into x86 chips for stealthier rootkits (12 May 2008)
• Excuse me sir: there's a rootkit in your master boot record (9 January 2008)
• Sony to exorcise 'rootkit' from USB drives (4 September 2007)
• Judge approves Sony rootkit settlement (23 May 2006)
• Homeland security urges DRM rootkit ban (17 February 2006)