可在系统引导时工作的RootKit，较简单易懂1) It s very small.The basic framework is just about 100 lines of assembly coodee.It supports 2000，XP，20032) It patches the kernel at runtime(no files are patched on disk).(basic

-Can work at system boot time RootKit, is relatively simple to understand 1) It s, very small.The Basic framework is just about 100 lines of assembly coodee.It supports 2000, XP, 20 032) It patches the kernel at the runtime (no files are patched on disk). (basic