x
48h OFFER
If you're already a customer of
our homeusers protection,
renew now with a 50% off
RENEW NOW
x
SPECIAL OFFER
If you're already a customer of
our homeusers protection,
renew now with a 50% off
RENEW NOW
x
HALLOWEEN OFFER
take advantage of our
terrific discounts
BUY NOW AND GET A 50% OFF
x
CHRISTMAS OFFER
Buy the best antivirus
at the best price
BUY NOW AND GET A 40% OFF
x
SPECIAL OFFER
Buy the best antivirus
at the best price
BUY NOW AND GET A 50% OFF
x
BLACKFRIDAY OFFER
Buy the best antivirus
at the best price
TODAY ONLY UP TO 70% OFF
x
CYBERMONDAY OFFER
Buy the best antivirus
at the best price
(Only for homeusers)
TODAY ONLY UP TO 70% OFF
Active Scan. Scan your PC free
Panda Protection

Virus Encyclopedia

Welcome to the Virus Encyclopedia of Panda Security.

NTRootkit

Threat LevelModerate threatDamageHighDistributionNot widespread
Common name:NTRootkit
Technical name:Rootkit/NTRootkit.A
Threat level:Low
Alias:NTRootkit, NT Rootkit,, Rootkit TROJ_ROOTKIT, WinNT.RootKit
Type:Hacking Tool
Effects:  

It hides certain files, processes and entries of the affected computer and logs the keystrokes typed by the user. It does not spread automatically by its own means.

Affected platforms:

Windows XP/2000/NT

First detected on:Feb. 13, 2003
Detection updated on:Sept. 17, 2007
StatisticsNo

Brief Description 

    

NTRootkit is a Trojan that can hide certain files, processes or entries of the Windows Registry and also log the keystrokes typed by the user, which can be used to capture passwords or other kind of sensitive information. This would pose a threat to the user's confidentiality.

NTRootkit does not spread automatically using its own means. It needs an attacking user's intervention in order to reach the affected computer. The means of transmission used include, among others, floppy disks, CD-ROMs, email messages with attached files, Internet downloads, FTP, IRC channels, peer-to-peer (P2P) file sharing networks, etc.

NTRootkit only works on machines with the operating systems Windows NT, 2000 or XP installed, as a service must be loaded for this program to run. The effects of NTRootkit vary, as there are different versions of this tool that carry out different actions.

Visible Symptoms 

    

NTRootkit is difficult to recognize, as it does not display any messages or warnings that indicate it has reached the computer.