Jump to content


Recommended Posts

I read the topic about atapi.sys and I've never heard of such a file, but a full scan by malwarebytes found this.

I don't know what it is, and I don't have any problems with my machine.

Hex editing (a copy of) the file by one byte made the scan return no malware.

This was found on the partition of Windows XP Professional 32-bit

"C:\WINDOWS\$NtServicePackUninstall$\atapi.sys (Rootkit) -> Quarantined and deleted successfully."

Link to post
Share on other sites

(we can't edit posts?)

I scanned the atapi.sys file on virscan.org and nothing said it was a virus.

(I just let malwarebytes remove the file for now, I'll un-quarantine it if it is something useful?)

Thanks for the help anybody.

Link to post
Share on other sites

This topic is now closed to further replies.
  • Recently Browsing   0 members

    • No registered users viewing this page.
Back to top
  • Create New...

Important Information

This site uses cookies - We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.