Rootkit

Updated 31 Jul 2026

•
def
- •
  malware that modifies core system files (part of the kernel), originally a Unix technique — the "root" in rootkit
•
stealth
- •
  can be invisible to the operating system (won't appear in Task Manager) and to traditional anti-virus utilities
•
detection/removal
- •
  look for unusual behavior via anti-malware scans; use a removal tool built specifically for that rootkit once discovered; enable secure boot (UEFI) to add BIOS-level protection
•
related
- •
  Malware
- •
  Fileless Malware
•
cards
- •
  Why are rootkits especially hard to detect
  - •
    They modify core system/kernel-level files, making them invisible to both the OS (e.g. Task Manager) and traditional anti-virus tools

Linked references 3