Rustok Rootkit is a Trojan for the Windows platform that uses rootkit techniques in order to hide files, processes and registry entries.
Rustok Rootkits can be installed in the alternate data stream (ADS) on NTFS systems, such as <windows>\system:lzx32.sys.