how to stop a driver from running - it self protected and rootkit hidden
- by Aristos
I have this serous problem
For the first time I can not stop a program from running.
Something is on one laptop computer that is run as system legacy driver, and self protected and hidden on service as rootkit.
Anything I try to remove fails.
When a program or anti toolkit try to remove the hidden registry setting for make it stop I get this error : "a device attached to the system is not functioning"
So any idea that can help me stop it from running, or even delete it on start up ?
My one limitation is that the hard drive is on a laptop and I can not remove it and attact it to somewhere else.
This program not let me, touch the registry, do not let me touch the file, do not let me touch the file, The move on boot fail to delete it, the rootrepeal fail to delete it, the rootkiet reveal from sysinternals fail to reveal it ! everything fails.
Do how have any experience on this, or do you have any suggestion how to stop this driver from run ?