Welcome to MalwareRemoval.com,
What if we told you that you could get malware removal help from experts, and that it was 100% free? MalwareRemoval.com provides free support for people with infected computers. Our help, and the tools we use are always 100% free. No hidden catch. We simply enjoy helping others. You enjoy a clean, safe computer.

Malware Removal Instructions

How do i remove a hidden/stealth rootkit?

MalwareRemoval.com provides free support for people with infected computers. Using plain language that anyone can understand, our community of volunteer experts will walk you through each step.

How do i remove a hidden/stealth rootkit?

Unread postby Brendan84 » December 17th, 2009, 9:17 am

Hi,

I now have a problem where my network is constantly running slow to get "page not found" or it keeps disconnecting.

I tried Windows Defender and spybot- nothing could be found. I then used Trojan Remover and it established a suspicious file which was hidden. This was:

C:\Windows\system32\drivers\nacqspn.sys

and the registry:

HKLM\SYSTEM\CurrentControlSet\Services\nacqspn

I tried to delete it or rename it, but TR failed to do it both times.

I then tried other tools like Killbox, Hijack this etc...all cannot delete it.

I get the message, "The device attached to the system is not functioning".

I then downloaded GMER and it confirmed it was a malicious rootkit. But even that could not delete it.

All of these processes have been done normally as well as in SAFE MODE.

I would be very grateful if somebody could offer me some advice on how to get rid of this problem.

Thank you.

Brendan
Brendan84
Active Member
 
Posts: 1
Joined: December 17th, 2009, 8:59 am
Advertisement
Register to Remove

Re: How do i remove a hidden/stealth rootkit?

Unread postby Gary R » December 17th, 2009, 6:37 pm

By posting just a description of your problems it is likely that your topic will be passed by and you will not receive the help you're looking for.

We need to know what's running on your computer so that we can give you appropriate instructions, and this information is provided by a HijackThis log.

This thread will now be closed.

If you still need help, please start a new thread with:-
  • A HijackThis log.
  • Details of the problems you're experiencing.
  • Any messages or error codes you may have got.

If for any reason you can't run HijackThis, please let us know in your post.

User avatar
Gary R
Administrator
Administrator
 
Posts: 21868
Joined: June 28th, 2005, 11:36 am
Location: Yorkshire


  • Similar Topics
    Replies
    Views
    Last post

Return to Infected? Virus, malware, adware, ransomware, oh my!



Who is online

Users browsing this forum: No registered users and 28 guests

Contact us:

Advertisements do not imply our endorsement of that product or service. Register to remove all ads. The forum is run by volunteers who donate their time and expertise. We make every attempt to ensure that the help and advice posted is accurate and will not cause harm to your computer. However, we do not guarantee that they are accurate and they are to be used at your own risk. All trademarks are the property of their respective owners.

Member site: UNITE Against Malware