Rootkits are one of the greatest challenges to computer security. Due to the stealthy nature of rootkits, it is almost impossible for a user to see these hidden processes or files. In some situations, even security applications may not be able to detect the presence of rootkits. Rootkits use different methods to infect systems and hide their objects. Rootkit scanners use different methods to detect rootkits. One method is differentiation. This method takes a snapshot of the system's objects at a low-level layer (or even before the system boots, called preboot scanning); then it takes another snapshot at a very high-level layer and compares the differences.
Did you find this white paper useful?
1 out of 5 users found this white paper useful
Related white papers
Windows Server 2003 Active Directory Fast Recovery with Volume Shadow Copy Service and Virtual Disk Service
Using the new Microsoft Windows Server 2003 services of Volume Shadow Copy Service and Virtual Disk Service, it is now possible to recover failed Microsoft Active Directory servers in minutes...
Microsoft Windows Server 2003 Terminal Server Licensing
This white paper provides an introduction to Terminal Server Licensing, the client license management service for the operating systems in Microsoft Windows Server 2003 family. The Terminal Server Licensing service...
Active Directory Schema Modification and Publishing for Systems Management Server 2003
This paper describes the procedures necessary to extend the Active Directory service schema for Microsoft Systems Management Server (SMS) 2003 and to publish SMS information to Active Directory. Although schema...
Step-by-Step Guide for Setting Up IPv6 in a Test Lab
This white paper describes how to configure Internet Protocol version 6 (IPv6) in a test lab using five computers. Of the five computers, one is a DNS server, two are...
Virtual Private Networking with Windows Server 2003: Overview
This white paper provides an overview of virtual private networking and the virtual private network (VPN) technologies supported by Windows Server 2003 and Windows XP. Point-to-Point Tunneling Protocol (PPTP) and...
Active Directory Disaster Recovery for Windows 2000
Domain Controller requires more care and attention to detail than the equivalent operation in Windows NT 4.0. Domain Controllers can assume numerous roles within an Active Directory infrastructure: global catalogs,...
Inside Windows 2003 Infrastructure Networking Services
In this session, we will see how to migrate Windows NT 4.0 DHCP scopes into Windows Server 2003, examine new features of DHCP in Windows Server 2003, explore DHCP/DNS interaction...
