Answer: A rootkit, also spelled “root kit”, is best defined as a program or set of programs which enable administrative (root level) access on a computer or a network of computers.

Typically, rootkits use various methods which allow them to hide very well from the end user of the computer. Rootkits normally modify the code of at least one system file essentially becoming an integral part of the infected system. These are often very powerful programs which can have a nearly unlimited amount of control of the computer they infect. Rootkits often hide the existence of files or programs that are running on the computer and especially other malware.

There are occasionally “legitimate” reasons for a rootkit, though it is my opinion is that any program that does not forewarn you that it will install itself as a rootkit should never be considered desirable. If a company feels the need to hide files and processes from the end user without notice, why should the end user trust this company?

Bottom line: Remember, rootkits often hide very well. If you suspect a rootkit or other type of malware on your computer, please call the help desk without delay.