But doesn't a rootkit change services ? I am gonna take a guess but is there a rootkit for windows that changes : ftp , telnet , netstat and the sort. Or would it change something different ?

I've also read somewhere that if someone manages to replace your msgina.dll [ might be wrong with the file name ] with a trojaned one then well your basically screwed. The reason why I cannot remember.