detect tuoiudu.sys as a malware

[secondjay]

hello All,

Yesterday, I was scanning my pc with MAM and almost at the last stage, it showed tuoiude.sys as a malware in the directory, C:\Windows\system32\drivers\tuoiude.sys.

I tried to remove the file but on the last screen, it say there are few more items related to this file. I've also tried to remove it in a safe mode but no success.

Today I unstalled MAM and reinstalled it. It still shows the same msg.

Is this a malware as it shows?

Thanks in advance.

[kimsland]

Please Disable System Restore (howto)

Then download Move On Boot from h e r e

Once installed click on Start--> All Programs -->GiPo@Utilities-->MoveOnBoot

Paste this exactly in the white area: C:\Windows\system32\drivers\tuoiude.sys

Click next, and then select Delete select Start

Restart

Confirm C:\Windows\system32\drivers\tuoiude.sys has in fact been deleted

If it has gone, please re-enable System Restore

Reply back with the result

Also note that this "General" Malwarebytes forum is not for Malware removal

[secondjay]

After selecting 'Delete file' and pressing Next button(I did disable System Restore), it shows an error like the following

An operation is failed.

A device attached to the system is not functioning.

I can't delete it. I've also tried KillBox, but it doesn't work either.

[kimsland]

Hi, I thought it may be a simple remove, but obviously not. Please read the following:

We don't work on Malware removal in the general forums.

Please read and follow the directions here, skipping any steps you are unable to complete. Then post a NEW topic here.

One of the expert helpers there will give you one-on-one assistance when one becomes available.

[Maurice Naggar]

@seconjay

See my reply to your post in the Malware Removal sub-forum.