[tomrod]

Could one write a preemptive rootkit that sniffs for other rootkits?

Would that slow things down incredibly?

[simias]

That's called an antivirus :)