Spikey Posted March 26, 2009 ID:67561 Share Posted March 26, 2009 Here's what RootRepeal came up with:I believe hiberfil.sys is the culprit I'm looking for. It was the only .sys file identified even though it did not follow the common naming convention noted. Am I correct?ROOTREPEAL © AD, 2007-2008==================================================Scan Time: 2009/03/25 21:04Program Version: Version 1.2.3.0Windows Version: Windows XP Media Center Edition SP3==================================================Hidden/Locked Files-------------------Path: C:\hiberfil.sysStatus: Locked to the Windows API!Path: C:\WINDOWS\Prefetch\MCAGENT.EXE-0AA61076.pfStatus: Size mismatch (API: 38460, Raw: 38472)Path: C:\WINDOWS\system32\config\software.LOGStatus: Size mismatch (API: 24576, Raw: 1024) Link to post Share on other sites More sharing options...
Spikey Posted March 26, 2009 Author ID:67565 Share Posted March 26, 2009 Topic should've been CLB Driver Infection.... that's what I get for sleep deprivation.... Link to post Share on other sites More sharing options...
Fatdcuk Posted March 26, 2009 ID:67572 Share Posted March 26, 2009 Ok Spikey there is no CLB driver onboard your computer.I will lock this topic and we can carry on back in your original topic http://www.malwarebytes.org/forums/index.php?showtopic=13089 Link to post Share on other sites More sharing options...
Recommended Posts