[gruez]

You need that type of capability to detect rapidly evolving malware. Otherwise it can just load its own driver and bypass your user mode scanners, or infect all the computers while you're going through the (presumably third party?) certification process.

[smegger001]

malware isn't evolving so quickly as to make to make not fallowing basic IT best practice of testing and staged role out obsolete.

What I dont understand is why also didn't these companies just role back to the previous known working image when servers failed to reboot? please say they are not all allowing auto updates without testing and no backups.