WHAT IS A ROOTKIT?

 

A rootkit allows someone, either legitimate or malicious, to maintain command and control over a computer system, without the the user knowing about it. Parental monitoring or "net nanny" software are forms of legitimate root kit software programs.

Malicious rootkits that infect Windows machines embed themselves in the "kernel" or central files of the Windows Operating System. Once the kernel is infected, a rootkit can freely modify other parts of the operating system. Since the rootkit hides its processes from the operating system and system logs it is very difficult to detect.

Rootkits can be delivered using many types of files distributed over the internet, including email. Victims are normally unaware that a rootkit will be installed when they access these files. When browsing the internet, a user may receive a message that a program is necessary to view the site correctly, possibly disguising a rootkit as a legitimate plug in.

Once installed a rootkit may allow a hacker to secretly communicate with the computer when it is online. Rootkits are typically used to install more hidden programs and create back doors to the system.

To help guard against rootkits, experts recommend users follow these steps:

1. When using your computer, use a "Standard" or not an "Administrator" account.

For information on configuring accounts: CLICK HERE. 

2. Ensure your StopSign anti-virus software is up to date.

To update your StopSign software, CLICK HERE.

3. Install hotfixes (operating system security patches) as they become available.

To update Windows  Operating System, CLICK HERE.

4. Delete spam without opening it.

5. Only allow trusted web sites to install software.

6. Avoid clicking on unknown banners or popups. Even a no thanks button can be a ploy to download a rootkit.

7. The StopSign support team recommends using either Safari or FireFox for more secure web browsing.




For further assistance -

SUBMIT A TICKET

or

CONTACT SUPPORT

Additional user information may be found via the StopSign KNOWLEDGE BASE.