If the program is a requirement, I have got a massive number of regulatory questions as the rootkit nature of this thing implies massive reputation risk issues on the part of the bank, especially given how the vendor advertises that they burrow deep into the kernel.One thing's for sure, this thing is sneaky.