Virus Preventing Antivirus

October 12, 2009 at 19:18:38
Specs: Windows XP Media Cen, Pentium D/2.8 GHz/2
This is one heavy-duty bug! It deleted my NAV and will not allow me to use any other antivirus, spyware, or malware program. I cannot boot in Safe mode. I cannot do a System Restore. I have tried several on-line scanners, but all have been rendered useless by the bug on my computer. As of this time, I haven't really even been able to identify it, let alone deal with it.

I have 1 clue- I downloaded "Trojan Remover" and ran the scan. I got this message:

"The Windows service appears to be hidden using Rootkit techniques: C:\Documents and Settings\HP_Administrator\Application Data\drivers\wfsintwq.sys

The program is loaded by the following (hidden) registry key: HKLM\SYSTEM\CurrentControlSet\Services\srosa\"

I am further instructed to restart the computer, after which the hidden program will supposedly be disabled and the scan can continue. However, upon reboot and a new scan, I get the same scan results.

Do any of the experts here have a sense for what this might be or how I can accurately discover it's identity?


See More: Virus Preventing Antivirus

Report •

October 12, 2009 at 20:28:44
Well, never mind. UnHackMe is my new best friend!! It identified the problem files, and my comp now seems to be free of the bug.

Report •

October 13, 2009 at 13:14:39
great news! I use unhackme all the time now for the past while!

Some HELP in posting on plus free progs and instructions Cheers

Report •

November 4, 2009 at 14:08:24
I was wrong...

Report •

Related Solutions

November 4, 2009 at 15:24:41

Report •

November 4, 2009 at 15:37:36
Oh, it was just a lot more extensive than I thought. It had infected over 400 files and the UnHackMe only dealt with a couple of the infections. I've cleaned it up now with NOD32 (because the NAV couldn't find it!), but it's left a devastating mess on my computer- many system files were deleted during the cleanup process, and there are all kinds of applications that aren't working properly, probably because of missing or corrupt files.

Report •

Ask Question