The System Scanner can be accessed by clicking the Start Scan button, which is the 2nd button down the left on the main ThreatFire control panel. The ThreatFire System Scanner can be configured to scan for rootkits, or if you have ThreatFire Pro, it can scan for any other known threats as well with the built-in antivirus.
You donÆt have to do anything special for ThreatFire to monitor your system for rootkits. ThreatFire is constantly on the lookout for signs of hidden processes that are running on your system that might indicate the presence of a rootkit. However, hidden processes are not the only indicators of a rootkit. A rootkit may contain several pieces and the System Scanner dives deeper into your system seeking out any hidden files, registry keys or other objects that may be part of a rootkit.
In ThreatFire Pro you can also configure your scan to look for viruses and other known threats.
If it finds anything, it will give you the option to quarantine the objects so that the threat cannot run. From the Quarantine section in Threat Control you can then also choose to permanently delete the objects off your system.
See Running a System Scan for instruction on how to run a scan.