New versions of the Zeroaccess bootkit demonstrate alternative approaches to distribution and to bootkit infection on 32- and 64-bit Windows.

A new TDL4 sample includes novel privilege escalation mechanisms in the dropper and changes to the hidden storage system.