Jump to content


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.

Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.


rootkit infection in atapi.sys

  • Please log in to reply
1 reply to this topic

#1 thepourfool


  • Members
  • 2 posts
  • Local time:06:05 AM

Posted 23 March 2010 - 09:22 AM


I recently started to have instances of wild redirection and script errors and reloaded AVG, after Spybot and Glary both failed to find the problem. AVG coughed up win32/patched.cg in atapi.sys, which I've since found out is tragically common and especially nasty. I understand that combofix is the best answer but read a dozen STERN cautions against just diving in by myself. So, if anyone here can lead me through the process of this tool, I will be eternally grateful. I may, however, be unable to proceed quickly, as we are a wheelchair household and I have a LOT that needs to be tended to every day.

Thanks in advance for any and all help!

BC AdBot (Login to Remove)


#2 trollocks


  • Members
  • 372 posts
  • Gender:Male
  • Location:England
  • Local time:01:05 PM

Posted 23 March 2010 - 12:28 PM

You will need to go to the Virus, Trojan, Spyware, and Malware Removal Logs forum.

Follow steps 6-9 here http://www.bleepingcomputer.com/forums/t/34773/preparation-guide-for-use-before-using-malware-removal-tools-and-requesting-help/

0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users