Quote:
|
Originally Posted by godsownman
What is a rootkit ?
|
A rootkit is a program(s) that get installed on the comp to perform root level (read OS level) commands and functions. They usually execute in ring 0 ie. with all privileges. It usually "hooks" into the various processes executing, thereofre it is very very difficult to distinguish between operations performed by the OS and the roootkit.
This transparency allows it to go unnoticed and ipso facto the various detection tools are unable to figure out who's who.
Rootkits were reecntly in news after the Sony fiasco, when they triued to implement DRM thru rootkits.