When a rootkit just isn't enough