The new version of the rootkit is distinguished by its ability to replace special data in the assembly code "classinitialize" to make anti-rootkits find the wrong address. Yaneza said that the ...