可在系統引導時工作的RootKIt,較簡單
1) It s very small.The basic framework is just about 100 lines of assembly code.It supports 2000,XP,2003
2) It patches the kernel at runtime(no files are patched on disk).(basic version has this code removed , so as others could understand it easily).
3) BOOT KIT is PXE-compatible.
4) It can even lead to first ever PXE virus
5)It also enables you to load other root kits if you have physical access(Normally root kits can only be loaded by the administrator)
標簽：
framework
assembly
RootKIt
small
上傳時間：
2014-01-02
上傳用戶：gdgzhym
