Vanti.sys is the rootkit.
Vanti.sys spreads by e-mail and via open network shares.
Vanti.sys is used to hide files, processes, registry and network connections.
Vanti.sys is a kernel mode rootkit.
Vanti.sys creates new system driver.
Rootkit hooks into the kernel's System Service Descriptor Table (SSDT).
Rootkit affects the addresses corresponding to the following NTXXX functions:
NtCreateFile
NtEnumerateKey
NtEnumerateValueKey
NtOpenProcess
NtQueryDirectorFile
NtQuerySystemInformation
More info: http://ca.mcafee.com/virusInfo/default.a...
Removal: Vanti.sys is removed by RegRun.
Read more... Removal instructions...
Recommended software:
UnHackMe - easy removal Rootkits/Adware/Spyware.
http://www.unhackme.com
RegRun Security Suite - removal and protection.
http://www.regrun.com
RegRun Reanimator - free removal tool.
greatis.com/reanimator
RegRun - User's Choice
Vista Programs - full info...
What is hidden in MSDN?
.NET Secrets Revealed
Why software developers prefer Win32.FreeTechSecrets.com?
All Unix Manuals in Alphabetical Order
C# controls for .NET in 3 simple steps.
Constantly updated. Last update:
May 12 2008
Interesting information about Vista programs...
Need consultation?
Would you like to add your opinion?