Jun06 by James Wyke 12 Major shift in strategy for ZeroAccess rootkit malware, as it shifts to user-mode