Does it use a kernel driver? and how does handle rootkits ?