The term "root kit" originally referred to a set of recompiled Unix tools such as "ps", "netstat", "w" and "passwd" that would carefully hide any trace of an intruder that those commands would normally display, thus allowing the intruder to maintain "root" or having total control on the system without the system administrator even knowing this.
