Rootkit (English Wikipedia)

Li, Yong-Gang; Chung, Yeh-Ching; Hwang, Kai; Li, Yue-Jin (2021). "Virtual Wall: Filtering Rootkit Attacks to Protect Linux Kernel Functions". IEEE Transactions on Computers. 70 (10): 1640–1653. Bibcode:2021ITCmp..70.1640L. doi:10.1109/TC.2020.3022023. S2CID 226480878.

arstechnica.com (Global: 473^rd place; English: 338^th place)

Salter, Jim (July 31, 2020). "Red Hat and CentOS systems aren't booting due to BootHole patches". Ars Technica. Retrieved July 24, 2021.

avast.com (Global: low place; English: low place)

"Rootkit & Anti-rootkit". Retrieved 13 September 2017.

bbc.co.uk (Global: 11^th place; English: 10^th place)

news.bbc.co.uk

"Sony's long-term rootkit CD woes". BBC News. 2005-11-21. Archived from the original on 2026-02-20. Retrieved 2026-02-20.

bbc.com (Global: 26^th place; English: 23^rd place)

"Stuxnet worm 'targeted high-value Iranian assets'". BBC News. 23 September 2010.

bestantivirus.com (Global: low place; English: low place)

Steinberg, Joseph (June 9, 2021). "What You Need To Know About Keyloggers". bestantivirus.com. Archived from the original on June 4, 2023. Retrieved July 24, 2021.

blackhat.com (Global: low place; English: low place)

Ortega, Alfredo; Sacco, Anibal (2009-07-24). Deactivate the Rootkit: Attacks on BIOS anti-theft technologies (PDF). Black Hat USA 2009 (PDF). Boston, MA: Core Security Technologies. Archived (PDF) from the original on 2014-10-16. Retrieved 2014-06-12.
Kumar, Nitin; Kumar, Vipin (2007). Vbootkit: Compromising Windows Vista Security (PDF). Black Hat Europe 2007.
Heasman, John (2006-01-25). Implementing and Detecting an ACPI BIOS Rootkit (PDF). Black Hat Federal 2006. NGS Consulting. Archived (PDF) from the original on 2011-02-27. Retrieved 2010-11-21.

bleepingcomputer.com (Global: 7,223^rd place; English: 4,408^th place)

Gatlan, Sergiu (May 6, 2021). "New Moriya rootkit used in the wild to backdoor Windows systems". Bleeping Computer. Retrieved July 24, 2021.

books.google.com (Global: 3^rd place; English: 3^rd place)

Evancich, N.; Li, J. (2016-08-23). "6.2.3 Rootkits". In Colbert, Edward J. M.; Kott, Alexander (eds.). Cyber-security of SCADA and Other Industrial Control Systems. Springer. p. 100. ISBN 9783319321257 – via Google Books.
Andrew Hay; Daniel Cid; Rory Bray (2008). OSSEC Host-Based Intrusion Detection Guide. Syngress. p. 276. ISBN 978-1-59749-240-9 – via Google Books.
Greg Hoglund; James Butler (2006). Rootkits: Subverting the Windows kernel. Addison-Wesley. p. 4. ISBN 978-0-321-29431-9 – via Google Books.
"Symantec Releases Update for its Own Rootkit". HWM (March): 89. 2006 – via Google Books.
Anson, Steve; Bunting, Steve (2007). Mastering Windows Network Forensics and Investigation. John Wiley and Sons. pp. 73–74. ISBN 978-0-470-09762-5.
Bettany, Andrew; Halsey, Mike (2017). Windows Virus and Malware Troubleshooting. Apress. p. 17. ISBN 9781484226070 – via Google Books.
Skoudis, Ed; Zeltser, Lenny (2004). Malware: Fighting Malicious Code. Prentice Hall PTR. p. 335. ISBN 978-0-13-101405-3.

broadcom.com (Global: low place; English: low place)

community.broadcom.com

Butler, James; Sparks, Sherri (2005-11-16). "Windows Rootkits of 2005, Part Two". Symantec Connect. Symantec. Retrieved 2010-11-13.
Butler, James; Sparks, Sherri (2005-11-03). "Windows Rootkits of 2005, Part One". Symantec Connect. Symantec. Archived from the original on 2021-01-21. Retrieved 2010-11-12.
Burdach, Mariusz (2004-11-17). "Detecting Rootkits And Kernel-level Compromises In Linux". Symantec. Archived from the original on 2020-08-10. Retrieved 2010-11-23.
Cuibotariu, Mircea (2010-02-12). "Tidserv and MS10-015". Symantec. Retrieved 2010-08-19.
Hoang, Mimi (2006-11-02). "Handling Today's Tough Security Threats: Rootkits". Symantec Connect. Symantec. Archived from the original on 2021-07-26. Retrieved 2010-11-21.

ca.archive.org (Global: 8,190^th place; English: 5,316^th place)

dn721503.ca.archive.org

Brumley, David (1999-11-16), "Invisible Intruders: rootkits in practice" (pdf), Login, USENIX Association, pp. 27–29, retrieved 2007-08-27^{[dead link]}

ca.com (Global: low place; English: low place)

"Spyware Detail: XCP.Sony.Rootkit". Computer Associates. 2005-11-05. Archived from the original on 2010-08-18. Retrieved 2010-08-19.

cansecwest.com (Global: low place; English: low place)

Sacco, Anibal; Ortéga, Alfredo (2009). Persistent BIOS infection (PDF). CanSecWest 2009. Core Security Technologies. Archived from the original (PDF) on 2011-07-08. Retrieved 2010-11-21.

cmu.edu (Global: 2,125^th place; English: 1,347^th place)

ece.cmu.edu

Thompson, Ken (August 1984). "Reflections on Trusting Trust" (PDF). Communications of the ACM. 27 (8): 761. doi:10.1145/358198.358210. Archived (PDF) from the original on 2007-09-24. Retrieved 2010-06-09.

cnet.com (Global: 447^th place; English: 345^th place)

reviews.cnet.com

"Security Watch: Rootkits for fun and profit". CNET Reviews. 2007-01-19. Archived from the original on 2012-10-08. Retrieved 2009-04-07.

computerworld.com (Global: 3,446^th place; English: 2,279^th place)

"Is Stuxnet the 'best' malware ever?". Computerworld. Retrieved 2025-10-26.

doi.org (Global: 2^nd place; English: 2^nd place)

Thompson, Ken (August 1984). "Reflections on Trusting Trust" (PDF). Communications of the ACM. 27 (8): 761. doi:10.1145/358198.358210. Archived (PDF) from the original on 2007-09-24. Retrieved 2010-06-09.
Weinberger, Sharon (2011-06-01). "Computer security: Is this the start of cyberwarfare?". Nature. 474 (7350): 142–145. doi:10.1038/474142a. ISSN 1476-4687. PMID 21654779.
King, Samuel T.; Chen, Peter M.; Wang, Yi-Min; Verbowski, Chad; Wang, Helen J.; Lorch, Jacob R. (2006-04-03). "SubVirt: Implementing malware with virtual machines" (PDF). 2006 IEEE Symposium on Security and Privacy (S&P'06). Institute of Electrical and Electronics Engineers. pp. 14 pp.-327. doi:10.1109/SP.2006.38. ISBN 0-7695-2574-1. S2CID 1349303. Archived (PDF) from the original on 2008-12-07. Retrieved 2008-09-15.
Wang, Zhi; Jiang, Xuxian; Cui, Weidong; Ning, Peng (2009-08-11). "Countering Kernel Rootkits with Lightweight Hook Protection" (PDF). In Al-Shaer, Ehab (General Chair) (ed.). Proceedings of the 16th ACM Conference on Computer and Communications Security. CCS 2009: 16th ACM Conference on Computer and Communications Security. Jha, Somesh; Keromytis, Angelos D. (Program Chairs). New York: ACM New York. doi:10.1145/1653662.1653728. ISBN 978-1-60558-894-0. Archived (PDF) from the original on 2009-12-29. Retrieved 2009-11-11.
Seshadri, Arvind; et al. (2005). "Pioneer". Proceedings of the twentieth ACM symposium on Operating systems principles. Carnegie Mellon University. pp. 1–16. doi:10.1145/1095810.1095812. ISBN 1595930795. S2CID 9960430.
Li, Yong-Gang; Chung, Yeh-Ching; Hwang, Kai; Li, Yue-Jin (2021). "Virtual Wall: Filtering Rootkit Attacks to Protect Linux Kernel Functions". IEEE Transactions on Computers. 70 (10): 1640–1653. Bibcode:2021ITCmp..70.1640L. doi:10.1109/TC.2020.3022023. S2CID 226480878.

eeye.com (Global: low place; English: low place)

Soeder, Derek; Permeh, Ryan (2007-05-09). "Bootroot". eEye Digital Security. Archived from the original on 2013-08-17. Retrieved 2010-11-23.

eset.com (Global: low place; English: low place)

Matrosov, Aleksandr; Rodionov, Eugene (2010-06-25). "TDL3: The Rootkit of All Evil?" (PDF). Moscow: ESET. p. 3. Archived from the original (PDF) on 2011-05-13. Retrieved 2010-08-17.
Matrosov, Aleksandr; Rodionov, Eugene (2011-06-27). "The Evolution of TDL: Conquering x64" (PDF). ESET. Archived from the original (PDF) on 2015-07-29. Retrieved 2011-08-08.

f-secure.com (Global: low place; English: low place)

"BlackLight". F-Secure. Archived from the original on 2011-01-01. Retrieved 2026-02-21.

freedom-to-tinker.com (Global: low place; English: low place)

Felton, Ed (2005-11-15). "Sony's Web-Based Uninstaller Opens a Big Security Hole; Sony to Recall Discs".

gmer.net (Global: low place; English: low place)

"GMER". Archived from the original on 2026-02-16. Retrieved 2026-02-21.

ieee.org (Global: 912^th place; English: 722^nd place)

spectrum.ieee.org

"The Real Story of Stuxnet - IEEE Spectrum". spectrum.ieee.org. Retrieved 2025-10-26.
Vassilis Prevelakis; Diomidis Spinellis (July 2007). "The Athens Affair". Archived from the original on August 1, 2009.

infoworld.com (Global: 5,156^th place; English: 3,760^th place)

Hultquist, Steve (2007-04-30). "Rootkits: The next big enterprise threat?". InfoWorld. Archived from the original on 2015-09-26. Retrieved 2010-11-21.

kaspersky.com (Global: low place; English: low place)

"What is Rootkit – Definition and Explanation". www.kaspersky.com. 2021-04-09. Retrieved 2021-11-13.

mcafee.com (Global: low place; English: low place)

"Rootkits, Part 1 of 3: The Growing Threat" (PDF). McAfee. 2006-04-17. Archived from the original (PDF) on 2006-08-23.
"Rootkits Part 2: A Technical Primer" (PDF). McAfee. 2007-04-03. Archived from the original (PDF) on 2008-12-05. Retrieved 2010-08-17.

megasecurity.org (Global: low place; English: low place)

Chuvakin, Anton (2003-02-02). An Overview of Unix Rootkits (PDF) (Report). Chantilly, Virginia: iDEFENSE. Archived from the original (PDF) on 2011-07-25. Retrieved 2010-11-21.

mhprofessional.com (Global: low place; English: low place)

Davis, Michael A.; Bodmer, Sean; LeMasters, Aaron (2009-09-03). "Chapter 10: Rootkit Detection" (PDF). Hacking Exposed Malware & Rootkits: Malware & rootkits security secrets & solutions. New York: McGraw Hill Professional. ISBN 978-0-07-159118-8. Archived from the original (PDF) on 2012-03-08. Retrieved 2010-08-14.

microsoft.com (Global: 263^rd place; English: 259^th place)

blogs.technet.microsoft.com

Russinovich, Mark (2005-10-31). "Sony, Rootkits and Digital Rights Management Gone Too Far". TechNet Blogs. Microsoft. Archived from the original on 2016-01-01. Retrieved 2010-08-16.
"Restart Issues After Installing MS10-015". Microsoft. 2010-02-11. Retrieved 2010-10-05.

research.microsoft.com

Wang, Zhi; Jiang, Xuxian; Cui, Weidong; Ning, Peng (2009-08-11). "Countering Kernel Rootkits with Lightweight Hook Protection" (PDF). In Al-Shaer, Ehab (General Chair) (ed.). Proceedings of the 16th ACM Conference on Computer and Communications Security. CCS 2009: 16th ACM Conference on Computer and Communications Security. Jha, Somesh; Keromytis, Angelos D. (Program Chairs). New York: ACM New York. doi:10.1145/1653662.1653728. ISBN 978-1-60558-894-0. Archived (PDF) from the original on 2009-12-29. Retrieved 2009-11-11.
"Strider GhostBuster Rootkit Detection". Microsoft Research. 2010-01-28. Archived from the original on 2016-07-07. Retrieved 2026-02-21.

msdn.microsoft.com

"Device Guard is the combination of Windows Defender Application Control and virtualization-based protection of code integrity (Windows 10)". 11 July 2023.
"Signing and Checking Code with Authenticode". Microsoft. Archived from the original on 2008-12-29. Retrieved 2008-09-15.

technet.microsoft.com

Cogswell, Bryce; Russinovich, Mark (2006-11-01). "RootkitRevealer v1.71". Microsoft. Archived from the original on 2017-07-01. Retrieved 2010-11-13.
Danseglio, Mike; Bailey, Tony (2005-10-06). "Rootkits: The Obscure Hacker Attack". Microsoft.

support.microsoft.com

"How to generate a complete crash dump file or a kernel crash dump file by using an NMI on a Windows-based system". Microsoft. Archived from the original on 2015-03-24. Retrieved 2010-11-13.
"The Microsoft Windows Malicious Software Removal Tool helps remove specific, prevalent malicious software from computers that are running Windows 7, Windows Vista, Windows Server 2003, Windows Server 2008, or Windows XP". Microsoft. 2010-09-14. Archived from the original on 2016-12-30. Retrieved 2016-05-16.

download.microsoft.com

"Understanding Anti-Malware Technologies" (PDF). Microsoft. 2007-02-21. Archived from the original (PDF) on 2010-09-11. Retrieved 2010-08-17.

learn.microsoft.com

"Driver Signing Requirements for Windows". Microsoft. 2017-01-06. Archived from the original on 2026-02-20. Retrieved 2026-02-20.

nature.com (Global: 207^th place; English: 347^th place)

Weinberger, Sharon (2011-06-01). "Computer security: Is this the start of cyberwarfare?". Nature. 474 (7350): 142–145. doi:10.1038/474142a. ISSN 1476-4687. PMID 21654779.

networkworld.com (Global: 5,743^rd place; English: 3,776^th place)

Messmer, Ellen (2006-08-26). "Experts Divided Over Rootkit Detection and Removal". NetworkWorld.com. Framingham, Mass.: IDG. Archived from the original on 2024-11-02. Retrieved 2010-08-15.

newscientist.com (Global: 1,041^st place; English: 901^st place)

Knight, Will (2005-11-11). "Sony BMG sued over cloaking software on music CD". New Scientist. Archived from the original on 2011-01-15. Retrieved 2010-11-21.

ngsconsulting.com (Global: low place; English: low place)

Heasman, John (2006-11-15). "Implementing and Detecting a PCI Rootkit" (PDF). Next Generation Security Software. CiteSeerX: 10.1.1.89.7305. Retrieved 2010-11-13.{{cite web}}: CS1 maint: miscellaneous url (link)

nih.gov (Global: 5^th place; English: 5^th place)

pubmed.ncbi.nlm.nih.gov

Weinberger, Sharon (2011-06-01). "Computer security: Is this the start of cyberwarfare?". Nature. 474 (7350): 142–145. doi:10.1038/474142a. ISSN 1476-4687. PMID 21654779.

nvlabs.in (Global: low place; English: low place)

"BOOT KIT: Custom boot sector based Windows 2000/XP/2003 Subversion". NVlabs. 2007-02-04. Archived from the original on June 10, 2010. Retrieved 2010-11-21.

nytimes.com (Global: 7^th place; English: 7^th place)

Markoff, John (27 September 2010). "A Silent Attack, but Not a Subtle One". The New York Times.

pcworld.com (Global: 1,889^th place; English: 1,323^rd place)

Bort, Julie (2007-09-29). "Six ways to fight back against botnets". PCWorld. San Francisco: PCWorld Communications. Archived from the original on 2012-10-11. Retrieved 2009-04-07.

phrack.org (Global: low place; English: low place)

Kdm. "NTIllusion: A portable Win32 userland rootkit". Phrack. 62 (12). Archived from the original on 2026-02-20. Retrieved 2026-02-21.
Hoglund, Greg (1999-09-09). "A *REAL* NT Rootkit, Patching the NT Kernel". Phrack. 9 (55). Archived from the original on 2026-02-20. Retrieved 2026-02-21.
Sacco, Anibal; Ortéga, Alfredo (2009-06-01). "Persistent BIOS Infection: The Early Bird Catches the Worm". Phrack. 66 (7). Archived from the original on 2026-02-20. Retrieved 2026-02-20.

prevx.com (Global: low place; English: low place)

pxnow.prevx.com

Marco Giuliani (11 April 2011). "ZeroAccess – An Advanced Kernel Mode Rootkit" (PDF). Webroot Software. Archived (PDF) from the original on 25 August 2011. Retrieved 10 August 2011.

psu.edu (Global: 299^th place; English: 159^th place)

citeseerx.ist.psu.edu

Myers, Michael; Youndt, Stephen (2007-08-07). An Introduction to Hardware-Assisted Virtual Machine (HVM) Rootkits (Report). Crucial Security. CiteSeerX 10.1.1.90.8832. {{cite report}}: Cite uses deprecated parameter |citeseerx= (help)
Heasman, John (2006-11-15). "Implementing and Detecting a PCI Rootkit" (PDF). Next Generation Security Software. CiteSeerX: 10.1.1.89.7305. Retrieved 2010-11-13.{{cite web}}: CS1 maint: miscellaneous url (link)

sans.org (Global: low place; English: low place)

Dai Zovi, Dino (2011). "Kernel Rootkits". Archived from the original on September 10, 2012. Retrieved 13 Sep 2012.
Hannel, Jeromey (2003-01-23). "Linux RootKits For Beginners - From Prevention to Removal". SANS Institute. Archived from the original (PDF) on October 24, 2010. Retrieved 2010-11-22.

schneier.com (Global: low place; English: low place)

Schneier, Bruce (2009-10-23). "'Evil Maid' Attacks on Encrypted Hard Drives". Archived from the original on 2026-02-20. Retrieved 2026-02-20.

semanticscholar.org (Global: 15^th place; English: 8^th place)

api.semanticscholar.org

King, Samuel T.; Chen, Peter M.; Wang, Yi-Min; Verbowski, Chad; Wang, Helen J.; Lorch, Jacob R. (2006-04-03). "SubVirt: Implementing malware with virtual machines" (PDF). 2006 IEEE Symposium on Security and Privacy (S&P'06). Institute of Electrical and Electronics Engineers. pp. 14 pp.-327. doi:10.1109/SP.2006.38. ISBN 0-7695-2574-1. S2CID 1349303. Archived (PDF) from the original on 2008-12-07. Retrieved 2008-09-15.
Seshadri, Arvind; et al. (2005). "Pioneer". Proceedings of the twentieth ACM symposium on Operating systems principles. Carnegie Mellon University. pp. 1–16. doi:10.1145/1095810.1095812. ISBN 1595930795. S2CID 9960430.
Li, Yong-Gang; Chung, Yeh-Ching; Hwang, Kai; Li, Yue-Jin (2021). "Virtual Wall: Filtering Rootkit Attacks to Protect Linux Kernel Functions". IEEE Transactions on Computers. 70 (10): 1640–1653. Bibcode:2021ITCmp..70.1640L. doi:10.1109/TC.2020.3022023. S2CID 226480878.

sigsac.org (Global: low place; English: low place)

Wang, Zhi; Jiang, Xuxian; Cui, Weidong; Ning, Peng (2009-08-11). "Countering Kernel Rootkits with Lightweight Hook Protection" (PDF). In Al-Shaer, Ehab (General Chair) (ed.). Proceedings of the 16th ACM Conference on Computer and Communications Security. CCS 2009: 16th ACM Conference on Computer and Communications Security. Jha, Somesh; Keromytis, Angelos D. (Program Chairs). New York: ACM New York. doi:10.1145/1653662.1653728. ISBN 978-1-60558-894-0. Archived (PDF) from the original on 2009-12-29. Retrieved 2009-11-11.

sogeti.com (Global: low place; English: low place)

esec-lab.sogeti.com

Delugré, Guillaume (2010-11-21). Reversing the Broacom NetExtreme's Firmware (PDF). hack.lu. Sogeti. Archived from the original (PDF) on 2012-04-25. Retrieved 2010-11-25.

sophos.com (Global: low place; English: low place)

"Sophos Anti-Rootkit". Sophos. Archived from the original on 2012-11-19. Retrieved 2026-02-20.

sourceforge.net (Global: 1,842^nd place; English: 1,520^th place)

"Zeppoo". SourceForge. 18 July 2009. Retrieved 8 August 2011.

stoned-vienna.com (Global: low place; English: low place)

Kleissner, Peter (2009-09-02). "Stoned Bootkit: The Rise of MBR Rootkits & Bootkits in the Wild" (PDF). Archived from the original (PDF) on 2011-07-16. Retrieved 2010-11-23.
Kleissner, Peter (2013-03-16). "Stoned Bootkit". Peter Kleissner. Archived from the original on 2014-12-09. Retrieved 2026-02-20.^{[self-published source]}

symantec.com (Global: low place; English: low place)

"Windows Rootkit Overview" (PDF). Symantec. 2006-03-26. Archived from the original (PDF) on 2010-12-14. Retrieved 2010-08-17.
"Stuxnet Introduces the First Known Rootkit for Industrial Control Systems". Symantec. 2010-08-06. Archived from the original on August 20, 2010. Retrieved 2010-12-04.
Harriman, Josh (2007-10-19). "A Testing Methodology for Rootkit Removal Effectiveness" (PDF). Dublin, Ireland: Symantec Security Response. Archived from the original (PDF) on 2009-10-07. Retrieved 2010-08-17.

sysinternals.com (Global: low place; English: low place)

Russinovich, Mark (6 February 2006). "Using Rootkits to Defeat Digital Rights Management". Winternals. SysInternals. Archived from the original on 14 August 2006. Retrieved 2006-08-13.

techtarget.com (Global: 3,908^th place; English: 3,051^st place)

searchenterprisedesktop.techtarget.com

Dillard, Kurt (2005-08-03). "Rootkit battle: Rootkit Revealer vs. Hacker Defender". Archived from the original on 2014-02-13. Retrieved 2026-02-21.

theguardian.com (Global: 16^th place; English: 11^th place)

Hern, Alex (2015-08-14). "Lenovo does it again as LSE component removed after security fears". The Guardian. ISSN 0261-3077. Retrieved 2025-10-26.
Halliday, Josh (24 September 2010). "Stuxnet worm is the 'work of a national government agency'". The Guardian.

theregister.co.uk (Global: 1,877^th place; English: 1,233^rd place)

Goodin, Dan (2010-11-16). "World's Most Advanced Rootkit Penetrates 64-bit Windows". The Register. Archived from the original on 2010-11-21. Retrieved 2010-11-22.
Modine, Austin (2008-10-10). "Organized crime tampers with European card swipe devices: Customer data beamed overseas". The Register. Situation Publishing. Archived from the original on 2008-10-13. Retrieved 2008-10-13.
Goodin, Dan (2009-03-24). "Newfangled rootkits survive hard disk wiping". The Register. Situation Publishing. Retrieved 2009-03-25.

theregister.com (Global: 2,921^st place; English: 1,825^th place)

"CAUGHT: Lenovo crams unremovable crapware into Windows laptops – by hiding it in the BIOS". Archived from the original on 2025-09-06. Retrieved 2025-10-26.
Francisco, Neil McAllister in San. "Microsoft tightens grip on OEM Windows 8 licensing". www.theregister.com. Archived from the original on 2021-10-08. Retrieved 2021-10-08.

tiscali.co.uk (Global: 6,305^th place; English: 5,181^st place)

Kyriakidou, Dina (March 2, 2006). ""Greek Watergate" Scandal Sends Political Shockwaves". Reuters. Retrieved 2007-11-24. ^{[dead link]}

trendmicro.com (Global: low place; English: low place)

blog.trendmicro.com

"Hacking Team Uses UEFI BIOS Rootkit to Keep RCS 9 Agent in Target Systems - TrendLabs Security Intelligence Blog". 2015-07-13. Archived from the original on 2015-07-23. Retrieved 2015-07-15.

trlokom.com (Global: low place; English: low place)

Trlokom (2006-07-05). "Defeating Rootkits and Keyloggers" (PDF). Trlokom. Archived from the original (PDF) on 2011-07-17. Retrieved 2010-08-17.

trustedcomputinggroup.org (Global: low place; English: low place)

"Stopping Rootkits at the Network Edge" (PDF). Beaverton, Oregon: Trusted Computing Group. January 2017. Retrieved 2008-07-11.
"TCG PC Specific Implementation Specification, Version 1.1" (PDF). Trusted Computing Group. 2003-08-18. Archived (PDF) from the original on 2011-09-28. Retrieved 2010-11-22.

umich.edu (Global: 429^th place; English: 307^th place)

eecs.umich.edu

King, Samuel T.; Chen, Peter M.; Wang, Yi-Min; Verbowski, Chad; Wang, Helen J.; Lorch, Jacob R. (2006-04-03). "SubVirt: Implementing malware with virtual machines" (PDF). 2006 IEEE Symposium on Security and Privacy (S&P'06). Institute of Electrical and Electronics Engineers. pp. 14 pp.-327. doi:10.1109/SP.2006.38. ISBN 0-7695-2574-1. S2CID 1349303. Archived (PDF) from the original on 2008-12-07. Retrieved 2008-09-15.

usec.at (Global: low place; English: low place)

"Radix Anti-Rootkit". usec.at. Archived from the original on 2022-07-03. Retrieved 2026-02-21.

virusbulletin.com (Global: low place; English: low place)

Ferrie, Peter (2005-07-01). "Got [Mac]Root?" (PDF). Virus Bulletin. Archived (PDF) from the original on 2022-05-28. Retrieved 2025-10-03.

vividmachines.com (Global: low place; English: low place)

Steve Hanna (September 2007). "Using Rootkit Technology for Honeypot-Based Malware Detection" (PDF). CCEID Meeting.

washingtonpost.com (Global: 35^th place; English: 24^th place)

Marks, Joseph (July 1, 2021). "The Cybersecurity 202: DOJ's future is in disrupting hackers, not just indicting them". The Washington Post. Archived from the original on February 7, 2022. Retrieved July 24, 2021.

web.archive.org (Global: 1^st place; English: 1^st place)

"Rootkits, Part 1 of 3: The Growing Threat" (PDF). McAfee. 2006-04-17. Archived from the original (PDF) on 2006-08-23.
"Windows Rootkit Overview" (PDF). Symantec. 2006-03-26. Archived from the original (PDF) on 2010-12-14. Retrieved 2010-08-17.
Thompson, Ken (August 1984). "Reflections on Trusting Trust" (PDF). Communications of the ACM. 27 (8): 761. doi:10.1145/358198.358210. Archived (PDF) from the original on 2007-09-24. Retrieved 2010-06-09.
Ferrie, Peter (2005-07-01). "Got [Mac]Root?" (PDF). Virus Bulletin. Archived (PDF) from the original on 2022-05-28. Retrieved 2025-10-03.
"Stuxnet Introduces the First Known Rootkit for Industrial Control Systems". Symantec. 2010-08-06. Archived from the original on August 20, 2010. Retrieved 2010-12-04.
"CAUGHT: Lenovo crams unremovable crapware into Windows laptops – by hiding it in the BIOS". Archived from the original on 2025-09-06. Retrieved 2025-10-26.
Kim Zetter (17 February 2011). "Cyberwar Issues Likely to Be Addressed Only After a Catastrophe". Wired. Archived from the original on 18 February 2011. Retrieved 18 February 2011.
"Spyware Detail: XCP.Sony.Rootkit". Computer Associates. 2005-11-05. Archived from the original on 2010-08-18. Retrieved 2010-08-19.
Russinovich, Mark (2005-10-31). "Sony, Rootkits and Digital Rights Management Gone Too Far". TechNet Blogs. Microsoft. Archived from the original on 2016-01-01. Retrieved 2010-08-16.
"Sony's long-term rootkit CD woes". BBC News. 2005-11-21. Archived from the original on 2026-02-20. Retrieved 2026-02-20.
Knight, Will (2005-11-11). "Sony BMG sued over cloaking software on music CD". New Scientist. Archived from the original on 2011-01-15. Retrieved 2010-11-21.
Kyriakidou, Dina (March 2, 2006). ""Greek Watergate" Scandal Sends Political Shockwaves". Reuters. Retrieved 2007-11-24. ^{[dead link]}
Vassilis Prevelakis; Diomidis Spinellis (July 2007). "The Athens Affair". Archived from the original on August 1, 2009.
Russinovich, Mark (June 2005). "Unearthing Root Kits". Windows IT Pro. Archived from the original on 2005-11-03. Retrieved 2026-02-21.
Marks, Joseph (July 1, 2021). "The Cybersecurity 202: DOJ's future is in disrupting hackers, not just indicting them". The Washington Post. Archived from the original on February 7, 2022. Retrieved July 24, 2021.
Russinovich, Mark (6 February 2006). "Using Rootkits to Defeat Digital Rights Management". Winternals. SysInternals. Archived from the original on 14 August 2006. Retrieved 2006-08-13.
Ortega, Alfredo; Sacco, Anibal (2009-07-24). Deactivate the Rootkit: Attacks on BIOS anti-theft technologies (PDF). Black Hat USA 2009 (PDF). Boston, MA: Core Security Technologies. Archived (PDF) from the original on 2014-10-16. Retrieved 2014-06-12.
Kleissner, Peter (2009-09-02). "Stoned Bootkit: The Rise of MBR Rootkits & Bootkits in the Wild" (PDF). Archived from the original (PDF) on 2011-07-16. Retrieved 2010-11-23.
"Rootkits Part 2: A Technical Primer" (PDF). McAfee. 2007-04-03. Archived from the original (PDF) on 2008-12-05. Retrieved 2010-08-17.
Kdm. "NTIllusion: A portable Win32 userland rootkit". Phrack. 62 (12). Archived from the original on 2026-02-20. Retrieved 2026-02-21.
"Understanding Anti-Malware Technologies" (PDF). Microsoft. 2007-02-21. Archived from the original (PDF) on 2010-09-11. Retrieved 2010-08-17.
Hoglund, Greg (1999-09-09). "A *REAL* NT Rootkit, Patching the NT Kernel". Phrack. 9 (55). Archived from the original on 2026-02-20. Retrieved 2026-02-21.
Chuvakin, Anton (2003-02-02). An Overview of Unix Rootkits (PDF) (Report). Chantilly, Virginia: iDEFENSE. Archived from the original (PDF) on 2011-07-25. Retrieved 2010-11-21.
Butler, James; Sparks, Sherri (2005-11-03). "Windows Rootkits of 2005, Part One". Symantec Connect. Symantec. Archived from the original on 2021-01-21. Retrieved 2010-11-12.
Burdach, Mariusz (2004-11-17). "Detecting Rootkits And Kernel-level Compromises In Linux". Symantec. Archived from the original on 2020-08-10. Retrieved 2010-11-23.
Osborne, Charlie (September 17, 2019). "Skidmap malware buries into the kernel to hide illicit cryptocurrency mining". ZDNet. Archived from the original on July 25, 2021. Retrieved July 24, 2021.
Marco Giuliani (11 April 2011). "ZeroAccess – An Advanced Kernel Mode Rootkit" (PDF). Webroot Software. Archived (PDF) from the original on 25 August 2011. Retrieved 10 August 2011.
"Driver Signing Requirements for Windows". Microsoft. 2017-01-06. Archived from the original on 2026-02-20. Retrieved 2026-02-20.
Schneier, Bruce (2009-10-23). "'Evil Maid' Attacks on Encrypted Hard Drives". Archived from the original on 2026-02-20. Retrieved 2026-02-20.
Soeder, Derek; Permeh, Ryan (2007-05-09). "Bootroot". eEye Digital Security. Archived from the original on 2013-08-17. Retrieved 2010-11-23.
"BOOT KIT: Custom boot sector based Windows 2000/XP/2003 Subversion". NVlabs. 2007-02-04. Archived from the original on June 10, 2010. Retrieved 2010-11-21.
Kleissner, Peter (2013-03-16). "Stoned Bootkit". Peter Kleissner. Archived from the original on 2014-12-09. Retrieved 2026-02-20.^{[self-published source]}
Goodin, Dan (2010-11-16). "World's Most Advanced Rootkit Penetrates 64-bit Windows". The Register. Archived from the original on 2010-11-21. Retrieved 2010-11-22.
Francisco, Neil McAllister in San. "Microsoft tightens grip on OEM Windows 8 licensing". www.theregister.com. Archived from the original on 2021-10-08. Retrieved 2021-10-08.
King, Samuel T.; Chen, Peter M.; Wang, Yi-Min; Verbowski, Chad; Wang, Helen J.; Lorch, Jacob R. (2006-04-03). "SubVirt: Implementing malware with virtual machines" (PDF). 2006 IEEE Symposium on Security and Privacy (S&P'06). Institute of Electrical and Electronics Engineers. pp. 14 pp.-327. doi:10.1109/SP.2006.38. ISBN 0-7695-2574-1. S2CID 1349303. Archived (PDF) from the original on 2008-12-07. Retrieved 2008-09-15.
Wang, Zhi; Jiang, Xuxian; Cui, Weidong; Ning, Peng (2009-08-11). "Countering Kernel Rootkits with Lightweight Hook Protection" (PDF). In Al-Shaer, Ehab (General Chair) (ed.). Proceedings of the 16th ACM Conference on Computer and Communications Security. CCS 2009: 16th ACM Conference on Computer and Communications Security. Jha, Somesh; Keromytis, Angelos D. (Program Chairs). New York: ACM New York. doi:10.1145/1653662.1653728. ISBN 978-1-60558-894-0. Archived (PDF) from the original on 2009-12-29. Retrieved 2009-11-11.
Delugré, Guillaume (2010-11-21). Reversing the Broacom NetExtreme's Firmware (PDF). hack.lu. Sogeti. Archived from the original (PDF) on 2012-04-25. Retrieved 2010-11-25.
"Hacking Team Uses UEFI BIOS Rootkit to Keep RCS 9 Agent in Target Systems - TrendLabs Security Intelligence Blog". 2015-07-13. Archived from the original on 2015-07-23. Retrieved 2015-07-15.
Heasman, John (2006-01-25). Implementing and Detecting an ACPI BIOS Rootkit (PDF). Black Hat Federal 2006. NGS Consulting. Archived (PDF) from the original on 2011-02-27. Retrieved 2010-11-21.
Modine, Austin (2008-10-10). "Organized crime tampers with European card swipe devices: Customer data beamed overseas". The Register. Situation Publishing. Archived from the original on 2008-10-13. Retrieved 2008-10-13.
Sacco, Anibal; Ortéga, Alfredo (2009). Persistent BIOS infection (PDF). CanSecWest 2009. Core Security Technologies. Archived from the original (PDF) on 2011-07-08. Retrieved 2010-11-21.
Sacco, Anibal; Ortéga, Alfredo (2009-06-01). "Persistent BIOS Infection: The Early Bird Catches the Worm". Phrack. 66 (7). Archived from the original on 2026-02-20. Retrieved 2026-02-20.
Matrosov, Aleksandr; Rodionov, Eugene (2010-06-25). "TDL3: The Rootkit of All Evil?" (PDF). Moscow: ESET. p. 3. Archived from the original (PDF) on 2011-05-13. Retrieved 2010-08-17.
Matrosov, Aleksandr; Rodionov, Eugene (2011-06-27). "The Evolution of TDL: Conquering x64" (PDF). ESET. Archived from the original (PDF) on 2015-07-29. Retrieved 2011-08-08.
Davis, Michael A.; Bodmer, Sean; LeMasters, Aaron (2009-09-03). "Chapter 10: Rootkit Detection" (PDF). Hacking Exposed Malware & Rootkits: Malware & rootkits security secrets & solutions. New York: McGraw Hill Professional. ISBN 978-0-07-159118-8. Archived from the original (PDF) on 2012-03-08. Retrieved 2010-08-14.
Trlokom (2006-07-05). "Defeating Rootkits and Keyloggers" (PDF). Trlokom. Archived from the original (PDF) on 2011-07-17. Retrieved 2010-08-17.
Dai Zovi, Dino (2011). "Kernel Rootkits". Archived from the original on September 10, 2012. Retrieved 13 Sep 2012.
Cogswell, Bryce; Russinovich, Mark (2006-11-01). "RootkitRevealer v1.71". Microsoft. Archived from the original on 2017-07-01. Retrieved 2010-11-13.
"Sophos Anti-Rootkit". Sophos. Archived from the original on 2012-11-19. Retrieved 2026-02-20.
"BlackLight". F-Secure. Archived from the original on 2011-01-01. Retrieved 2026-02-21.
"Radix Anti-Rootkit". usec.at. Archived from the original on 2022-07-03. Retrieved 2026-02-21.
"GMER". Archived from the original on 2026-02-16. Retrieved 2026-02-21.
Harriman, Josh (2007-10-19). "A Testing Methodology for Rootkit Removal Effectiveness" (PDF). Dublin, Ireland: Symantec Security Response. Archived from the original (PDF) on 2009-10-07. Retrieved 2010-08-17.
Steinberg, Joseph (June 9, 2021). "What You Need To Know About Keyloggers". bestantivirus.com. Archived from the original on June 4, 2023. Retrieved July 24, 2021.
"Strider GhostBuster Rootkit Detection". Microsoft Research. 2010-01-28. Archived from the original on 2016-07-07. Retrieved 2026-02-21.
"Signing and Checking Code with Authenticode". Microsoft. Archived from the original on 2008-12-29. Retrieved 2008-09-15.
"TCG PC Specific Implementation Specification, Version 1.1" (PDF). Trusted Computing Group. 2003-08-18. Archived (PDF) from the original on 2011-09-28. Retrieved 2010-11-22.
"How to generate a complete crash dump file or a kernel crash dump file by using an NMI on a Windows-based system". Microsoft. Archived from the original on 2015-03-24. Retrieved 2010-11-13.
Dillard, Kurt (2005-08-03). "Rootkit battle: Rootkit Revealer vs. Hacker Defender". Archived from the original on 2014-02-13. Retrieved 2026-02-21.
"The Microsoft Windows Malicious Software Removal Tool helps remove specific, prevalent malicious software from computers that are running Windows 7, Windows Vista, Windows Server 2003, Windows Server 2008, or Windows XP". Microsoft. 2010-09-14. Archived from the original on 2016-12-30. Retrieved 2016-05-16.
Hultquist, Steve (2007-04-30). "Rootkits: The next big enterprise threat?". InfoWorld. Archived from the original on 2015-09-26. Retrieved 2010-11-21.
"Security Watch: Rootkits for fun and profit". CNET Reviews. 2007-01-19. Archived from the original on 2012-10-08. Retrieved 2009-04-07.
Bort, Julie (2007-09-29). "Six ways to fight back against botnets". PCWorld. San Francisco: PCWorld Communications. Archived from the original on 2012-10-11. Retrieved 2009-04-07.
Hoang, Mimi (2006-11-02). "Handling Today's Tough Security Threats: Rootkits". Symantec Connect. Symantec. Archived from the original on 2021-07-26. Retrieved 2010-11-21.
Messmer, Ellen (2006-08-26). "Experts Divided Over Rootkit Detection and Removal". NetworkWorld.com. Framingham, Mass.: IDG. Archived from the original on 2024-11-02. Retrieved 2010-08-15.
Hannel, Jeromey (2003-01-23). "Linux RootKits For Beginners - From Prevention to Removal". SANS Institute. Archived from the original (PDF) on October 24, 2010. Retrieved 2010-11-22.

windowsitpro.com (Global: low place; English: low place)

Russinovich, Mark (June 2005). "Unearthing Root Kits". Windows IT Pro. Archived from the original on 2005-11-03. Retrieved 2026-02-21.

wired.com (Global: 254^th place; English: 178^th place)

Kim Zetter (17 February 2011). "Cyberwar Issues Likely to Be Addressed Only After a Catastrophe". Wired. Archived from the original on 18 February 2011. Retrieved 18 February 2011.

worldcat.org (Global: 4^th place; English: 4^th place)

search.worldcat.org

Hern, Alex (2015-08-14). "Lenovo does it again as LSE component removed after security fears". The Guardian. ISSN 0261-3077. Retrieved 2025-10-26.
Weinberger, Sharon (2011-06-01). "Computer security: Is this the start of cyberwarfare?". Nature. 474 (7350): 142–145. doi:10.1038/474142a. ISSN 1476-4687. PMID 21654779.

zdnet.com (Global: 1,235^th place; English: 855^th place)

Osborne, Charlie (September 17, 2019). "Skidmap malware buries into the kernel to hide illicit cryptocurrency mining". ZDNet. Archived from the original on July 25, 2021. Retrieved July 24, 2021.

Rootkit (English Wikipedia)

adsabs.harvard.edu (Global: 14th place; English: 9th place)

ui.adsabs.harvard.edu

arstechnica.com (Global: 473rd place; English: 338th place)

avast.com (Global: low place; English: low place)

bbc.co.uk (Global: 11th place; English: 10th place)

news.bbc.co.uk

bbc.com (Global: 26th place; English: 23rd place)

bestantivirus.com (Global: low place; English: low place)

blackhat.com (Global: low place; English: low place)

bleepingcomputer.com (Global: 7,223rd place; English: 4,408th place)

books.google.com (Global: 3rd place; English: 3rd place)

broadcom.com (Global: low place; English: low place)

community.broadcom.com

ca.archive.org (Global: 8,190th place; English: 5,316th place)

dn721503.ca.archive.org

ca.com (Global: low place; English: low place)

cansecwest.com (Global: low place; English: low place)

cmu.edu (Global: 2,125th place; English: 1,347th place)

ece.cmu.edu

cnet.com (Global: 447th place; English: 345th place)

reviews.cnet.com

computerworld.com (Global: 3,446th place; English: 2,279th place)

doi.org (Global: 2nd place; English: 2nd place)

eeye.com (Global: low place; English: low place)

eset.com (Global: low place; English: low place)

f-secure.com (Global: low place; English: low place)

freedom-to-tinker.com (Global: low place; English: low place)

gmer.net (Global: low place; English: low place)

ieee.org (Global: 912th place; English: 722nd place)

spectrum.ieee.org

infoworld.com (Global: 5,156th place; English: 3,760th place)

kaspersky.com (Global: low place; English: low place)

mcafee.com (Global: low place; English: low place)

megasecurity.org (Global: low place; English: low place)

mhprofessional.com (Global: low place; English: low place)

microsoft.com (Global: 263rd place; English: 259th place)

blogs.technet.microsoft.com

research.microsoft.com

msdn.microsoft.com

technet.microsoft.com

support.microsoft.com

download.microsoft.com

learn.microsoft.com

nature.com (Global: 207th place; English: 347th place)

networkworld.com (Global: 5,743rd place; English: 3,776th place)

newscientist.com (Global: 1,041st place; English: 901st place)

ngsconsulting.com (Global: low place; English: low place)

nih.gov (Global: 5th place; English: 5th place)

pubmed.ncbi.nlm.nih.gov

nvlabs.in (Global: low place; English: low place)

nytimes.com (Global: 7th place; English: 7th place)

pcworld.com (Global: 1,889th place; English: 1,323rd place)

phrack.org (Global: low place; English: low place)

prevx.com (Global: low place; English: low place)

pxnow.prevx.com

psu.edu (Global: 299th place; English: 159th place)

citeseerx.ist.psu.edu

sans.org (Global: low place; English: low place)

schneier.com (Global: low place; English: low place)

semanticscholar.org (Global: 15th place; English: 8th place)

api.semanticscholar.org

sigsac.org (Global: low place; English: low place)

sogeti.com (Global: low place; English: low place)

esec-lab.sogeti.com

sophos.com (Global: low place; English: low place)

sourceforge.net (Global: 1,842nd place; English: 1,520th place)

stoned-vienna.com (Global: low place; English: low place)

symantec.com (Global: low place; English: low place)

sysinternals.com (Global: low place; English: low place)

techtarget.com (Global: 3,908th place; English: 3,051st place)

searchenterprisedesktop.techtarget.com

theguardian.com (Global: 16th place; English: 11th place)

theregister.co.uk (Global: 1,877th place; English: 1,233rd place)

theregister.com (Global: 2,921st place; English: 1,825th place)

tiscali.co.uk (Global: 6,305th place; English: 5,181st place)

trendmicro.com (Global: low place; English: low place)

blog.trendmicro.com

trlokom.com (Global: low place; English: low place)

trustedcomputinggroup.org (Global: low place; English: low place)

adsabs.harvard.edu (Global: 14^th place; English: 9^th place)

arstechnica.com (Global: 473^rd place; English: 338^th place)

bbc.co.uk (Global: 11^th place; English: 10^th place)

bbc.com (Global: 26^th place; English: 23^rd place)

bleepingcomputer.com (Global: 7,223^rd place; English: 4,408^th place)

books.google.com (Global: 3^rd place; English: 3^rd place)

ca.archive.org (Global: 8,190^th place; English: 5,316^th place)

cmu.edu (Global: 2,125^th place; English: 1,347^th place)

cnet.com (Global: 447^th place; English: 345^th place)

computerworld.com (Global: 3,446^th place; English: 2,279^th place)

doi.org (Global: 2^nd place; English: 2^nd place)

ieee.org (Global: 912^th place; English: 722^nd place)

infoworld.com (Global: 5,156^th place; English: 3,760^th place)

microsoft.com (Global: 263^rd place; English: 259^th place)

nature.com (Global: 207^th place; English: 347^th place)

networkworld.com (Global: 5,743^rd place; English: 3,776^th place)

newscientist.com (Global: 1,041^st place; English: 901^st place)

nih.gov (Global: 5^th place; English: 5^th place)

nytimes.com (Global: 7^th place; English: 7^th place)

pcworld.com (Global: 1,889^th place; English: 1,323^rd place)

psu.edu (Global: 299^th place; English: 159^th place)

semanticscholar.org (Global: 15^th place; English: 8^th place)

sourceforge.net (Global: 1,842^nd place; English: 1,520^th place)

techtarget.com (Global: 3,908^th place; English: 3,051^st place)

theguardian.com (Global: 16^th place; English: 11^th place)

theregister.co.uk (Global: 1,877^th place; English: 1,233^rd place)

theregister.com (Global: 2,921^st place; English: 1,825^th place)

tiscali.co.uk (Global: 6,305^th place; English: 5,181^st place)

umich.edu (Global: 429^th place; English: 307^th place)

washingtonpost.com (Global: 35^th place; English: 24^th place)

web.archive.org (Global: 1^st place; English: 1^st place)

wired.com (Global: 254^th place; English: 178^th place)

worldcat.org (Global: 4^th place; English: 4^th place)

zdnet.com (Global: 1,235^th place; English: 855^th place)