Rootkit是一个数字工具箱，可以加到恶意软件（*病毒间谍软件）上来隐藏它，为它提供自由访问计算机的途径。恶意软件可以通过Rootkit加载到系统内核中，并通过修改内核达到隐蔽的目地（比如让系统认为恶意软件占用的空间为坏块，从而躲避杀软扫描）。Ro otkit可以提供自由访问计算机的途径，这个比较好理解，通过Rootkit注入系统内核的恶意程序运行在系统层，具有Ring0权限。本文可以带你入门roobkit(Rootkit is a digital toolbox, which can be added to malware (Trojan virus spyware) to hide it and provide free access to computers. Malware can be loaded into the system kernel through Rootkit and can be hidden by modifying the kernel (for example, let the system think that the space occupied by malicious software is bad, thus avoiding soft scan). Ro otkit can provide free access to computers. It is well understood that malicious programs running through Rootkit kernel are running on the system level with Ring0 privileges. This article can take you into the roobkit)