可在系统引导时工作的RootKit,较简单 1) It s very small.The basic framework is just about 100 lines of assembly code.It supports 2000,XP,2003 2) It patches the kernel at runtime(no files are patched on disk).(basic version has this code removed , so as other

一个bootkit小程序，在开机的时候path内核来执行自己的代码，对研究磁盘结构，数据还原，系统启动内核有帮助-It has several features such as 1) It s very small.The basic framework is just about 100 lines of assembly code.It supports 2000,XP,2003 2) It patches the kernel at runtime(no files are