xxxdefdrv.sys - Dangerous
%sysdir%\xxxdefdrv.sys
Jeff's Story:
My PC had gotten a bad rootkit that my ISP antivirus software (powered by McAfee) could not detect, nor could fix.
I sought a solution on the Internet and discovered your product and tried out the trial.
You quickly found the rootkit and SAVED my PC!
I haven't had any problems since, and I'm extremely grateful.
Manual removal instructions:
xxxdefdrv.sys is used to hide files, processes and registry.
xxxdefdrv.sys is a kernel mode rootkit.
xxxdefdrv.sys created new system drivers:
service name: "Microsoft Information Driver"
Related files:
%SysDir%\wdl.exe
%SysDir%\wdl.dll
%SysDir%\xxxdefdrv.sys
%SysDir%\windows.exe
%SysDir%\xmlsvc.exe
%SysDir%\xmldata.dll
%SysDir%\xmlsvc.dll
%SysDir%\.tmp
%SysDir%\rpcsvc.exe
%SysDir%\ioservice.exe
%SysDir%\ioservice.ini
%SysDir%\rpcsvr.exe
%SysDir%\smap.exe
%SysDir%\sv.exe
%SysDir%\diketraffic.conf
%SysDir%\dikeentry.conf
%SysDir%\bitsm.exe
%SysDir%\kern32.dll
%SysDir%\bitsm.exe -start
%SysDir%\iobanana.exe
%SysDir%\ioA.exe