Running a special program-loader happens to the bootable CD / DVD, then download the system from under it.

Program files substitute responsible for the protection, in memory on the fly. In the version shown VBootkit launched cmd.exe shell, no digital signature course, with the highest privileges.

Name:  987489.jpg
Views: 76
Size:  31.2 KB

According to the developers, they did not have enough resources to complete the work before the official release Vista. The demonstration was held at the hacker conference Black Hat Conference in Amsterdam, to release Vista RC2.