Dude VanWinkle wrote: > you would have to load first in order to beat a good rootkit right? > Windows Update Service is hardly ring 0, or am I totally off my > rocker? For a perfectly complete and flawless rootket, yes. In practice, whoever wrote their code second, wins. BB