Suspicious drivers, is it a rootkit?

Question

The following entries show up in DriverView on my PC:

These files do not exist or are hidden.

I didn't find anything specific on the net about these files. Anyone knows if they are legit?

The OS is Windows 7 professional.

Thanks.

Randolph West · Answer 1 · 2010-11-20 22:55:52Z

up vote 2 down vote

According to SysInternals forum, you do have a rootkit. I would go through the various answers on this site in which tools to use, to remove it.

Examples include:

and

answered Nov 20 '10 at 22:55

	Thanks for your answer. I've already scanned the PC with SpyBot Search&Destroy, MalwareBytes, Avast and Avira. They all do not see a problem. Process Explorer and "Autoruns" don't show anything suspicious. However, there are the said drivers, and in TCPView occassionally the "System process" is shown visiting random sites. – user56312 Nov 21 '10 at 12:32
	Try ComboFix (which includes GMER). The tools you've used may not be able to detect this particular infection. – Randolph West Nov 21 '10 at 16:36

feedback

1 Answer