A Rootkit is a collection of software programs that a hacker can use to gain unauthorized remote access to a computer and launch additional attacks. Rootkits can use a number of different techniques. They can monitor keystrokes, change system log files or existing system applications, create a back door into the system, and/or start attacks against other computers on the network. Rootkits are also generally organized into a set of tools programmed to target a particular operating system. Rootkits are made up of two components, a Dropper and a Payload. The Rootkit Dropper is anything that can get the targeted system to execute the code. The Rootkit Payload is a routine or driver that performs pre-determined actions to hide its presence while it performs malicious activities. |