Jump to content

Welcome to Geeks to Go - Register now for FREE

Need help with your computer or device? Want to learn new tech skills? You're in the right place!
Geeks to Go is a friendly community of tech experts who can solve any problem you have. Just create a free account and post your question. Our volunteers will reply quickly and guide you through the steps. Don't let tech troubles stop you. Join Geeks to Go now and get the support you need!

How it Works Create Account

NTOSKRNL-HOOK Mcafee enterprise 8.5 unable to perm remove help!

  • Please log in to reply



    New Member

  • Member
  • Pip
  • 1 posts
Hello, I am helping a friend clean up his system after infecting himself with spyware protect 2009 and successfully removed it via malwarebytes. Then ran mcafee, combofix, smitfraudfix, avz and threatfire they killed a few more virus. VUNDO.H, Zlob.H and a bunch of files in the system32 subdir armhzhw.dll, wwwlpoxi.dll, yhs783ijfo3e.dll, autochk.dll and ntdll64.dll. also had the registry and task manager disabled but used combofix to clean that up too. now McAfee Enterprise 8.5.0i is constantly reporting NTOSKRNL-HOOK Generic RootKit.d! rootkit on every reboot says it is a trojan and that it is deleted but on next boot or scan it reappears and I am unable to remove it even after perusing other posts that solved this problem. Currently scanning with kaspersky online scanner and it has detected Trojan-Spy.HTML.Fraud.gen x2 and Trojan-Spy.Win32.Zbot.rxp but it still has a way to go. Please any help would be appreciated! attached hijack this and SD fix logfiles as a start. -NickAttached File  SystemReport.txt   26.6KB   350 downloads

Attached Files

Edited by Nick_Danger, 27 April 2009 - 06:18 PM.

  • 0


Similar Topics

0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users

As Featured On:

Microsoft Yahoo BBC MSN PC Magazine Washington Post HP