Jump to content

Rootkit false positive question...

Recommended Posts


This is my first posting on Malwarebytes. Hopefully someone can give me a simple answer to a (hopefully) simple question. I did a scan about 2 weeks ago when Malwarebytes reported 1 infection. I quarantined it and since then my external HD has been having trouble updating itself. The 'infection' was a Rootkit file called $NtServicePackUninstall$\atapi.sys. Can anyone tell me if this is really a virus? If not, will clicking Restore put the file back where it belongs? The computer seems to run fine except the external HD issue.

I am running XP Service Pack 3.

Thanks for all your help.


Link to post
Share on other sites

Hello, and welcome to Malwarebytes.org

We don't work on Malware removal in the general forums.

Please print out, read and follow the directions here, skipping any steps you are unable to complete. Then post a NEW topic here.

One of the expert helpers there will give you one-on-one assistance when one becomes available.

After posting your new post make sure under options that you select Track this topic and choose one of the Email options so that you're alerted when someone has replied to your post.

Alternatively, as a paying customer, you can contact the help desk at support@malwarebytes.org

Link to post
Share on other sites

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now
  • Recently Browsing   0 members

    • No registered users viewing this page.
Back to top
  • Create New...

Important Information

This site uses cookies - We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.