A rootkit is very difficult to detect. A couple of things you could try:
1) When the light comes on, disconnect from the internet and see if it stays on.
2) Put a band-aid over the camera when it comes on and see if it suddenly shuts off then.
These two steps can indicate if someone is using...