You are viewing a single thread.
View all comments 21 points
Is this even relevant? Wasn’t it a kernel driver module?
18 points
It’s a third party kernel module, which Microsoft would love to be able to block, but legally can’t. It’s technically possible to write a virus scanner that runs in user space instead of the kernel, but it’s easier to make sure everything gets scanned if it’s in the kernel.