You have to research the discrepencies and you have to know what a rootkit hook looks like. Think of this tool as the HijackThis for rootkits. You have to know what you're looking at.