Malicious software called rootkits manipulate operating system components to conceal their harmful actions. Many rootkits can hide drivers, processes, and registry entries from tools that use common system application programming interfaces (APIs).

Trend Micro RootkitBuster scans hidden files, registry entries, processes, drivers, and the master boot record (MBR) to identify and remove rootkits.