IRP Hook Rootkit is a nasty virus that may be installed from insecure downloads or various shareware programs distributed by Trojans, fake online anti-malware scanners, malicious websites. If you have got this virus installed, follow the manual guide to remove it now.
IRP Hook Rootkit is a mischievous Trojan infection which is able to monitor your web browsing habits and collect related information. It aims to collect information about users and send them to host computers without any knowledge or consent.
This virus can download and install other corrupt system files onto the infected PC. It also makes some system changes and modifies the registry so that it could load every time you start your computer. Your antivirus like AVG will keep popping up an alert, showing you the virus is in your computer. But you are not able to remove it at all. In a word, this virus runs high risks for the compromised system and even its network environment. Don’t hesitate to remove it before it wreaks chaos.
Once infected, users may receive the alert from AVG like this:
“Detection name”;”IRP hook, \Driver\iaStor IRP_MJ_INTERNAL_DEVICE_CONTROL -> 0xFFFFFA8006EB9334″
“Result”;”Object is hidden”
The virus disguises itself in root of the system and it becomes complicated for anti-virus software to remove it. If you want to get rid of this virus completely, you can follow the manual guide as follow.
1. Show hidden files and folders.
Open Folder Options by clicking the Start button, clicking Control Panel, clicking Appearance and Personalization, and then clicking Folder Options.
Click the View tab.
Under Advanced settings, click Show hidden files and folders, uncheck Hide protected operating system files (Recommended) and then click OK.
2. Open Registry entries. Find out the malicious files and entries and then delete all.
Attention: Always be sure to back up your PC before making any changes.
a. Press the “Start” button and then choose the option “Run”. In the “Open” field, type “regedit” and click the “OK” button.
b. All malicious files and registry entries that should be deleted:
%Documents and Settings%\[UserName]\Application Data\[random]
IRP Hook Rootkit can slow down your system significantly. This includes starting up, shutting down, playing games, and surfing the web. It also make your PC freeze or crash all the time. Even though you have installed many antivirus programs, but none of them can remove it completely. The virus can come back again and again even if it says it is cleaned. It also allows access for remotely host and may lead to illegal action by intruders. Hence, you should delete this pest immediately once upon detection.
Published by Sarah Poehler on August 6, 2012 | How to Guides