acpi89.sys - Dangerous
acpi89.sys
Jeff's Story:
My PC had gotten a bad rootkit that my ISP antivirus software (powered by McAfee) could not detect, nor could fix.
I sought a solution on the Internet and discovered your product and tried out the trial.
You quickly found the rootkit and SAVED my PC!
I haven't had any problems since, and I'm extremely grateful.
Manual removal instructions:
This Trojan is extremely dangerous.
It installs itself on the system as a driver, and starting from 27th April 2004 it will delete data from the hard disk.
In systems running Windows 9x, the Trojan installs itself as the driver
MSGBS1.VXD
In systems running Windows NT/2000/XP and all subsequent versions, it installs itself as the driver
ACPI89.SYS
The Trojan also creates the following two files:
C:\Program Files\Internet Explorer\fileproc.txt
C:\Program Files\Internet Explorer\filepath.txt