A system comprising: a processor; a kernel-mode module, wherein the kernel-mode module is an exploit module operative in kernel-mode or a security agent module operative in kernel-mode, wherein the kernel-mode module, when operated by the processor, performs: creating (202; 302) a section object (122, 134), associating the section object with a dynamic-link library, first providing (204; 306) the section object associated with the dynamic-link library to a hotpatch mechanism, the dynamic-link library including hotpatch data for a component loader associated with the hotpatch mechanism, the hotpatch data, when applied, modifying the component loader to cause the component loader to request execute rights for the section object, setting an entrypoint of the dynamic-link library such that the dynamic-link library becomes executable, and second providing the section object to the hotpatch mechanism to cause the component loader to execute (214; 310) the dynamic-link library; and the dynamic-link library which, when executed, performs: creating (216; 314) a user-mode process (128, 138), thread, or held reference, and after the creating, indicating (218; 316) to the component loader that the dynamic-link library does not include hotpatch data, causing the component loader to unload (220; 318) the dynamic-link library. a processor; a kernel-mode module, wherein the kernel-mode module is an exploit module operative in kernel-mode or a security agent module operative in kernel-mode, wherein the kernel-mode module, when operated by the processor, performs: creating (202; 302) a section object (122, 134), associating the section object with a dynamic-link library, first providing (204; 306) the section object associated with the dynamic-link library to a hotpatch mechanism, the dynamic-link library including hotpatch data for a component loader associated with the hotpatch mechanism, the hotpatch data, when applied, modifying the component loader to cause the component loader to request execute rights for the section object, setting an entrypoint of the dynamic-link library such that the dynamic-link library becomes executable, and second providing the section object to the hotpatch mechanism to cause the component loader to execute (214; 310) the dynamic-link library; and creating (202; 302) a section object (122, 134), associating the section object with a dynamic-link library, first providing (204; 306) the section object associated with the dynamic-link library to a hotpatch mechanism, the dynamic-link library including hotpatch data for a component loader associated with the hotpatch mechanism, the hotpatch data, when applied, modifying the component loader to cause the component loader to request execute rights for the section object, setting an entrypoint of the dynamic-link library such that the dynamic-link library becomes executable, and second providing the section object to the hotpatch mechanism to cause the component loader to execute (214; 310) the dynamic-link library; and the dynamic-link library which, when executed, performs: creating (216; 314) a user-mode process (128, 138), thread, or held reference, and after the creating, indicating (218; 316) to the component loader that the dynamic-link library does not include hotpatch data, causing the component loader to unload (220; 318) the dynamic-link library. creating (216; 314) a user-mode process (128, 138), thread, or held reference, and after the creating, indicating (218; 316) to the component loader that the dynamic-link library does not include hotpatch data, causing the component loader to unload (220; 318) the dynamic-link library.