Per the Sunbelt Blog: Microsoft’s Windows operating system, running on a 64-bit machine provides enhanced security with driver signing of system and low level drivers. This policy, called the kernel mode code signing policy, disallows any unauthorized or malicious driver to be loaded [1]. The TDL4 rootkit bypasses driver signing policy on 64-bit machines by [...]