ndisoko.sys - Dangerous
ndisoko.sys
Jeff's Story:
My PC had gotten a bad rootkit that my ISP antivirus software (powered by McAfee) could not detect, nor could fix.
I sought a solution on the Internet and discovered your product and tried out the trial.
You quickly found the rootkit and SAVED my PC!
I haven't had any problems since, and I'm extremely grateful.
Manual removal instructions:
Ndisoko.sys is Trojan/Backdoor.
Kill the file ndisoko.sys and remove ndisoko.sys from Windows startup.
Malware: C:\sand-box\steinberg_cubase_sx-keygen.exe
Removed: C:\WINDOWS\system32\drivers\ndisoko.sys
C:\WINDOWS\system32\certoko.dll
Classification:Antivirus Version Last Update Result
F-Secure 9.0.15370.0 2010.04.09 Trojan.Generic.3587235
Kaspersky 7.0.0.125 2010.04.09 Trojan-Dropper.Win32.Koobface.z
Microsoft 1.5605 2010.04.09 TrojanDropper:Win32/Koobface.J
NOD32 5014 2010.04.09 a variant of Win32/Tinxy.BJ
Additional information
File size: 229376 bytes
MD5 : f3bdee76975380ab3bf574c9bb3bca38
SHA1 : 327243c4d810e992d57d09562e9f5c6c33a9fc99
SHA256: 899471037bc87cfb2c212f19ffdb8c7a0de625c52e57f18dd74ac12d87ee607a
http://greatis.com/blog/how-to-remove-ma...