Generally speaking, Rootkit will run with your system when it is turned on, but it is almost impossible to eliminate Rootkit in the running state, because it is hosted in the system file, just like if your nou0eu.sys forcibly kills Rootkit, it will destroy your operating system and cause the system to fail to work normally (crash, unable to turn on normally, unlimited restart, blue screen, etc. ).
The harm of Rootkit is also very great, depending on which part of the operation it wants to hide. Theoretically, after Rootkit, all your operation records, keyboard input (that is, account number and password) will be obtained by it, and account number theft is also common, and your computer may also be regarded as a broiler (I won't elaborate on this).
Rootkit is activated and runs with the system files, which means that it is almost impossible for you to kill directly through anti-virus software, and it will hide itself. After all, Rootkit appeared in 1990 and has evolved for countless generations.
If the antivirus software has clearly marked that the release of the Rootkit driver file is to hide itself, it is already very clear, and it is recommended to reinstall the operating system (format the system disk, and try to choose the pure version for the system image). At present, what antivirus software can do is basically to confirm the existence of the virus, which is almost impossible to kill (server-level antivirus software can't do it, let alone personal computers)
Note: When reinstalling the system, remember to back up your important data. Theoretically, Rootkit is attached to the system and driver files, and will not infect your personal files. There is no need to worry about personal files such as PPT and Word being infected.