How did a rootkit get on my Windows machine?

How did a rootkit get on my Windows machine?

Is there any way to figure out how a rootkit made its way onto my system?

    Requires Free Membership to View

    When you register, you’ll also receive targeted alerts from my team of editorial writers and independent industry experts with the latest news, tips, and advice to help you do your job more efficiently and effectively. Our goal is to keep you informed on the hottest topics and biggest challenges faced by IT professionals today working with desktop management and security technologies.

    Margie Semilof, Editorial Director

    By submitting your registration information to SearchEnterpriseDesktop.com you agree to receive email communications from TechTarget and TechTarget partners. We encourage you to read our Privacy Policy which contains important disclosures about how we collect and use your registration and other information. If you reside outside of the United States, by submitting this registration information you consent to having your personal data transferred to and processed in the United States. Your use of SearchEnterpriseDesktop.com is governed by our Terms of Use. You may contact us at webmaster@TechTarget.com.

Maybe. With enough time, patience and (likely) money, anything's possible. There are a million ways for a rootkit to infect your system, such as not having anti-malware software installed and a piece of malware automatically infects your system; or you are missing a patch and someone exploits that and installs the rootkit himself. The problem with rootkits is that every potential avenue of infection could be covered up or modified so there's no way of really knowing unless you have known clean copies of log files, network captures, etc., to analyze -- and those can be very hard to come by.

This was first published in January 2008