Er... well actually, that depends on your BIOS these days I believe. RootKits are nasty, don't get me wrong, but if you've got a newer BIOS that supports UEFI and SecureBoot... this scenario shouldn't be possible.If you don't have a Windows 8 computer, you most likely do not have UEFI and/or SecureBoot. Note that I've never tested that SecureBoot really does work, but it *is* what they made it for (ostensibly), so I should hope it does...Oh, yeah... as for Java: don't just disable it. If you don't actively use it, just outright uninstall the entire JRE or JDK (runtime environment / developer's kit). BTW: how the Hell did a Java app execute from the Tor browser, anyway?