RootKitShark is the only software tool in existence today with the proven capability to remove rootkits. It does this by scanning the physical files that make up the registry and comparing what is found in the files with what is returned by Windows kernel calls. When something is found that does not match, that is a hidden registry entry. RootKitShark then removes the hidden entries it finds from the registry and reboots the system so that it boots up without the rootkit running. Then, anything that was previously hidden will no longer be hidden and will be detectable by visual inspection or other security software tools that monitor your services, processes, users, files, etc.