Root Kit - What Is It?

Root kits have been around a long time, yet most computer users had never heard of them before.
The Sony came along and started using the technology to prevent copying of it's music CD's and suddenly the whole world new about the root kit...
I think Sony did the average user a favour when their failed attempt at restricting customers attempts to copy their music CD's. Their PR disaster suddenly made most computer users aware of the existence of root kits!


Read the full story here.


A basic definition of a root kit is:
"A set of software tools frequently used by a third party (usually an intruder) after gaining access to a computer system. These tools are intended to conceal running processes, files or system data, which helps an intruder maintain access to a system without the user's knowledge. Rootkits are known to exist for a variety of operating systems such as Linux, Solaris and versions of Microsoft Windows."So they are NOT something you really want on your system!


How Can I Detect A Root Kit On My Computer?


Mark Russinovich, the guy who discovered the Sony Root Kit has some software you can use in many circumstances to discover root kits on your windows computer - however it is not for the beginner!


Root Kit Revealer Homepage:
http://www.sysinternals.com/utilities/rootkitrevealer.html
Root Kit Revealer Direct Download:
http://www.sysinternals.com/Files/RootkitRevealer.zip


Is There Any Easier Solution I Can Use?


Yes, Webroot's "Spy Sweeper" version 4.5 can detect many root kits and is the software I have on ALL my computers!
Try the free 15 day trial - but remember to update the "definitions" before running a sweep of your computer... (This link is found under the "Home" section)
Grab your download: http://www.1updatexp.com/sstrial.exe (6.5Mb)
...by the way Webroot have released an overview of the security threats that face all online users. You can read the main points here:
http://www.webroot.com/resources/stateofspyware/excerpt.html
If you have not installed a copy of SpySweeper (or a similar product) before you will want to after reading this report!
Do Microsoft Have A Root Kit Detection Product?
Microsoft have a page here on their research website about root kit detection:
http://research.microsoft.com/rootkit/ (Not for the non technical.)