Here's a site listing rootkits and seems to have a bunch of hackers posting information about using them:
http://66.102.7.104/search?q=cache:BIB2gaxTOGUJ:www.rootkit.com/board.php%3Fdid%3Dedge0%26closed%3D1%26lastx%3D15+windows+defender+login&hl=en&gl=us&ct=clnk&cd=9