pifreak Posted November 11, 2009 ID:156591 Share Posted November 11, 2009 I read the topic about atapi.sys and I've never heard of such a file, but a full scan by malwarebytes found this.I don't know what it is, and I don't have any problems with my machine.Hex editing (a copy of) the file by one byte made the scan return no malware.This was found on the partition of Windows XP Professional 32-bit"C:\WINDOWS\$NtServicePackUninstall$\atapi.sys (Rootkit) -> Quarantined and deleted successfully." Link to post Share on other sites More sharing options...
pifreak Posted November 11, 2009 Author ID:156593 Share Posted November 11, 2009 (we can't edit posts?)I scanned the atapi.sys file on virscan.org and nothing said it was a virus.(I just let malwarebytes remove the file for now, I'll un-quarantine it if it is something useful?)Thanks for the help anybody. Link to post Share on other sites More sharing options...
sUBs Posted November 11, 2009 ID:156597 Share Posted November 11, 2009 Please dequarantine the file. Then update MBAM to the latest definitions. Let me know if it's still detected. Link to post Share on other sites More sharing options...
pifreak Posted November 11, 2009 Author ID:156672 Share Posted November 11, 2009 I already updated it before scanning the first time.I de-quarantined, updated again, and it does not detect it now.Thank you for helping![problem solved, lock topic or whatever] Link to post Share on other sites More sharing options...
Recommended Posts