ABSTRACT

Additionally, the majority of rootkits are “persistent,”

whereas others are not. Persistent rootkits stay installed

regardless of how many times the systems on which they

are installed are booted. Non-persistent rootkits (also

called “memory-resident” rootkits) reside only in memory;

no file in the compromised system contains their code.

They thus remain on a victim system only until the next

time the system boots, at which time they are deleted.