What is a RootKit?
A rootkit is a program or script that can allow hacker full access to your PC or network. And by full access we mean...
administrator type level access. A rootkit is one of the common ways hackers or other malicious bozos get malware like spyware, adware, viruses, etc, onto a system.
The very interesting thing about a rootkit is just how stealthy the lil bugger can be! It'll hide deep in some corner of your computer and reek havoc because of their admin level access! They can hijack your Windows searches and even hijack your anti-virus software! It can take it over and tell it to ignore the rootkit itself and help hide any information about the rootKit!! Ughh... and these are just a couple examples of what a rootkit can do!
It wasn't too long ago... I know y'all will remember when Sony had installed a rootkit onto its audio CDs. They hid it on people's computers as part of their "Digital Rights Management" strategy. It was Mark Russinovich, a security expert for Sysinternal, that discovered Sony's RootKit. Sony issued a download that would allow people to get the rootkit off of their computers. And, they also had to recall ALL the CD that hadn't sold yet that head the rootkit embeded into it. I wonder how many people are still infected and don't even know it!
It's not an easy thing to know if you're infected! The best of these rootkits can very easily take control of your computer and your anti virus software so you need a more specialized tool. Here are few you might give a go...
BlackLight from F-Secure
RootkitRevealer from Sysinternals Malicious Software Removal Tool from Microsoft Rootkit Hook Analyzer
More info on rootkits to come!
