Removing TODO from rootkit check