How do we detect and remove a root-kit?