Malware that is implemented as a kernel-mode device driver, including rootkits, runs at the same privilege level as the kernel and so is the most difficult to identify and remove.

• 作为内核模式设备驱动程序执行的恶意软件(包括rootkit)与内核在相同的权限级别运行,因此最难识别和删除。