Hacker News new | ask | show | jobs
by rcxdude 29 days ago
Nope, AV hooks into the filesystem layer (the NT kernel has 'filesystem filters' for this) and intercepts all reads and writes on the system.