This is accomplished by means of a legitimate driver of the HitmanPro Alert software ("hmpalert.sys") by taking advantage of the fact that it fails to verify the legitimacy of the DLLs it loads, thus ...