How Rootkits Work

A Rootkit allows an intruder to gain access to someone’s PC whenever he wants , without detected . it is made up of a series of files and tools . it can be installed on a system in a number of ways .

A rootkit can replace important components of an operating system with new software . the new software disguise itself as the original files , including the same file size , creation date , and so on , making it extremely difficult to detect .
A rootkit install a backdoor daemon , or automatic program . this backdoor opens a hole in the system , allowing the rootkit creator to crawl in and take control of the PC whenever he wants .

Many rootkit also install keyloggers or sniffers that record all the keystrokes you make and send that to a hacker .

A rootkit can modify a computer’s systems log that tracks all the activity on a PC . The systems log normally includes all activity , including malicious activity . so the rootkit modifies the log to hide all traces of itself .