由于这些后门程序运行在用户模式下,应用如防病毒扫描器可以检测恶意的存在,如果他们有一个签名文件。

• Since these rootkits operate in user mode, applications such as antivirus scanners can detect the rootkit's existence if they have a signature file.