Mistic: A Backdoor That Runs in Memory and Erases Itself

There is a backdoor that runs entirely in memory, disguises itself as a Microsoft security component, and carries a kill switch to erase itself when its job is done. Its name is Mistic. Symantec's th