If they've had enough access to install a root kit, they would have also installed a keystroke logger so you'd probably be screwed anyway.